Baseline hardening for a public blog

Defaults worth locking in for a public technical blog.

  • Disable file editing in wp-config.php.
  • Keep automatic core updates on for security releases.
  • Limit XML-RPC and review plugin inventory quarterly.

Leave a Reply

Your email address will not be published. Required fields are marked *

About

Editor · LowNKey

Practical notes on technology, WordPress, and shipping careful infrastructure.

Topics index