The MU forums have moved to

WPMU Security (5 posts)

  1. RolloTamasi
    Posted 16 years ago #

    Hi guys,
    Just wondering if the MU Community would like the share some information on the manners in which they have secured their MU blogs?

    I am trying to restrict access to my wp-admin folder only to my work IP.

    I have also deleted the 'admin' account and I am using a less obvious admin login username.

    But what else can I do to make MU more secure and to reduce the possibility of it being hacked?


  2. overclockwork
    Posted 16 years ago #

    You can use WP-Ban on your blog to ban users by IP, IP Range, host name and referrer url. In your case you would have to ban access from the entire internet and then create an exception rule with IP addresses you allow access.

  3. RolloTamasi
    Posted 16 years ago #

    Thanks overclockwork,
    Instead of doing that I could just use a htaccess block on IP.

    Are there are specific MU security plugins or tips out there?

  4. Cruth
    Posted 15 years ago #

    I am also interested in this subject. Wp-security-scan is a good plugin for WP, and it would be good to have something similar for WPMU. Also, I just installed WPMU and I see the table pre-fix is WP, which I believe is a security risk. I would like to be able to have all individual blogs set-up without the WP preferix, but I do not know how to do that

  5. donncha
    Key Master
    Posted 15 years ago #

    Cruth - changing the prefix isn't really a reliable way of securing an install, although it helps a tiny bit. If a hacker can execute SQL on your system it's child's play figuring out what the prefix is. It's "security by obscurity" and can give a false sense of security.

    I would recommend upgrading to the latest WPMU whenever new releases come out and also keeping an eye on this forum.

    You could also try my Exploit Scanner at if you think you've been hacked.

About this Topic

  • Started 16 years ago by RolloTamasi
  • Latest reply from donncha