One of my client website is getting affected by malware often. i have used Wordpress Plugin (Wordfence) to clear the virus. It was cleared at that moment but again it is affected. I need a permanent solution to keep my website secure without any malware inject. Anyone can help me in this?
What steps did you take to prevent it happening again? For example, have you changed all your passwords and ensured they are really strong? What file permissions are you using?
This article might be helpful:
1 Like
It sounds as though you haven’t completely cleaned the malware from your site. A plugin can help, but doesn’t do everything. As well as the link @technobear gave, have a look at the following Wordfence articles:
As well as changing your admin user’s password, I would strongly recommend changing the admin user’s username.
If you can, consider installing modsecurity on your hosting account.
2 Likes
I’d do this: 1. Secure your WordPress website by protecting the login page and preventing brute force attacks.
2. Use 2-factor authentication
3. Analyze how this malware happened to prevent the future ones
This topic was automatically closed 91 days after the last reply. New replies are no longer allowed.