A few clients have come to me recently to let me know that their site has been hacked. They all run Wordpress on their site but were unaware of the critical update that stopped users from injecting code into your pages. I’ve found a site that explains this all very well, so check out the article at Unmask Parasites.

If you were a victim, or haven’t upgraded your Wordpress yet, you may be interested in taking a step to secure your blog by joining the newsletter. You will also want to subscribe to the blog RSS.

The first step to securing your website is you. Don’t blame your host because your outdated and insecure scripts infected your site. Everyone on a server has different needs and to run the scripts you want to use, and the other clients to run the scripts they want, there has to be flexibility in security. You cannot expect to run any script with any insecurities and for your hosting company to be able to block off all attacks. If you’re looking for a host tailored to your specific security needs and no one elses, it may be time to go dedicated. If you’re cheap and need to keep paying $20 a year, it’s time to learn to keep regular backups of your own and expect problems now and again.

This entry was posted on Saturday, July 25th, 2009 at 5:09 pm and is filed under Current Events. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.