Security

[darrienj]

What should I do to keep WordPress useable & secure? Do I need to delete wp-config.php file once i've started? What type of file permissions should my files have?

[TCH-Thomas]

First of all, Do not delete wp-config.php. This file contains the database info etc.

 

Second, you should not need to change any permissions unless spcifically mentioned in their installation guide or mentioned in any instructions that might come with a plugin that you might install.

 

Doing the above, you should be fine.

[stevevan]

I would add that you need to ensure your WordPress is kept up-to-date. Upgrade when security releases are put out.

[TCH-Bruce]

Get yourself the Spam Karma 2 plugin and install it. It will protect you from comment and trackback spam.

 

And there is no need to change any of the permissions on any of the files if you do a standard installation.

[darrienj]

Get yourself the Spam Karma 2 plugin and install it. It will protect you from comment and trackback spam.

 

And there is no need to change any of the permissions on any of the files if you do a standard installation.

 

For instance, I created a sitemap.xml and had to give a 777 Permission to get an addon to use it properly... is this safe?

[TCH-Bruce]

Depends on what it is but normally you would just go changing everything to 777.

 

When you install Wordpress you don't need to set any permissions unless you wanted to edit your theme files through the admin interface. I don't recommend doing that because someone else can come along and change your files without your knowledge.