Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Create config file for database access
  • Set URL
  • ...

Secure WordPress

Restrict WordPress Database Account

As part of good application security, the WordPress database account should only be granted minimal privileges.

...

WordPress and PHP simply due to the model is inherently insecure when compared to more Enterprise solutions.

As such the Bonsai Framework takes an administrator approach to managing WordPress. It is strongly recommends to not use a co-hosting model for multiple clients that require privacy. That is one client would be damaged if another client saw their data.

Warning

WordPress updates through the built in admin interface will fail unless he the restrictions are relaxed. With this modelsecurity approach, privileges will must be temporarily be granted as part of the upgrade process.

Restrict WordPress Database Account

As part of good application security, the WordPress database account should only be granted minimal privileges.

Connect into MySQL,

Code Block
languagebash
mysql -u root -p 

...