Destructive behaviour

• 

  pavelryana · Member · Jun 30, 2015 at 8:54 pm

  • Copy link
  • Add topic to favorites

  Does WordPress trace people who enter (illegally) a site or page and try to modify it — add underlining, change photographs, obstruct text or otherwise indulge destructive behaviour? Please advise.

  The blog I need help with is: (visible only to logged in users)

• 

  timethief · Member · Jun 30, 2015 at 9:04 pm

  • Copy link

  It is critically important to learn how to prevent providing access to your blog to others. My advice is to become aware of how hackers get into blogs and make sure that your blog is secure. Please read what follows knowing that it is bloggers themselves that make their blogs vulnerable to attack.

  Only one Admin per site is the recommendation.
  https://en.support.wordpress.com/user-roles/#administrator

  re: hacked accounts and blogs

  If anyone is posting anything to your blog or removing anything from it, or changing anything in it, or if your blog has been deleted and you did not delete it, then it’s most likely that you have provided them with the ability to do so, either deliberately by adding them as official users, or by allowing them access to your login information, or by posting content that makes it easy for them to guess what your log-in information is.

  For you the questions that need to be answered are:
  Who, aside from me, has access to my login information?
  How do I prevent providing access to my blog to hackers?

  Read > http://en.support.wordpress.com/security/

  If you suspect your blog has been hacked …

  1. Go to your email program immediately and change the password to a very difficult one because that’s how many hackers gain access to blogs.

  2. If you can log-in go here > Users > All Users and delete any user that does not belong there.

  3. Disable post by email > http://en.support.wordpress.com/post-by-email/

  4. Disable post by voice > http://en.support.wordpress.com/post-by-voice/

  5. Change your blog password to a very difficult one > http://en.support.wordpress.com/passwords/#change-your-password
  You can also reset your password via your Settings tab on the WordPress.com home page:
  http://wordpress.com/#!/settings/

  6. Use a secure, encrypted connection to connect to your Dashboard. Under Users → Personal Settings, check the box that says “Always use HTTPS when visiting administration pages, and click Save Changes.

  7. Use two step authentication http://en.support.wordpress.com/security/two-step-authentication/

  8. Run a security scan on your computer.

  9. Never leave your computer logged into your blogs and walk away from it. Always log out properly.