From a446f879e8ba10a4e17e7e4d619e1c18a9b4fccf Mon Sep 17 00:00:00 2001 From: ethicalhack3r Date: Tue, 17 Jul 2012 12:43:05 -0700 Subject: [PATCH] Updated WordPress Security Tips (markdown) --- WordPress-Security-Tips.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/WordPress-Security-Tips.md b/WordPress-Security-Tips.md index b178aee..5443cc5 100644 --- a/WordPress-Security-Tips.md +++ b/WordPress-Security-Tips.md @@ -14,7 +14,7 @@ WordPress used to set the 'admin' username by default on all installations. In r **4. Keep plugin installations to a minimum.** -Through experience we've found that WordPress plugins are normally the weakest link in WordPress blog's security. Many plugins are susceptible to Cross-Site Scripting (XSS), SQL Injection and other attacks. By keeping plugin installations to a minimum you reduce the attack surface. +Through experience we've found that WordPress plugins are normally the weakest link in a WordPress blog's security. Many plugins are susceptible to Cross-Site Scripting (XSS), SQL Injection and other attacks. By keeping plugin installations to a minimum you reduce the attack surface. **5. Move the wp_config.php file one directory up, outside of the web root directory.**