WordPress Tip: Admin is NOT your Admin Log in Is It?

Tweet

So you’ve bitten the bullet and gone with WordPress for your Web Site system, good for you! I like it, and have been using it for many years (although I am not a zealot either, whatever system works just fine, if you are comfortable with it).

One of the first security things you really should think about it is to change the Administrator account on your system. Why? Well if I look at Wordfence, to see who is trying to log into my system I see the following:


spacer Hanoi, Vietnam attempted a failed login using an invalid username “admin”.

spacer

Image courtesy of Stuart Miles, at FreeDigitalPhotos.neta failed login using an invalid username .

IP: 125.212.220.77  [unblock]
43 seconds ago
spacer Japan attempted a failed login using an invalid username “admin”.
IP: 133.242.22.177  [block]
10 minutes ago
spacer Sibiu, Romania attempted a failed login using an invalid username “admin”.
IP: 46.214.107.142  [block]
Hostname: 46-214-107-142.next-gen.ro
20 minutes ago
spacer United Kingdom attempted a failed login using an invalid username “admin”.
IP: 213.229.121.124  [block]
21 minutes ago
spacer Istanbul, Turkey attempted a failed login using an invalid username “admin”.
IP: 193.255.83.100  [block]
Hostname: www.beykoz.edu.tr
29 minutes ago

Let me assure you that none of these log in attempts are from me (given I am not in any of those countries), but do you see a trend here? They are all attempting to log in with the user name Admin and that is the first (and primary) attack vector for many of the hackers out there.

How to remedy this?

  • Go to the Users Menu on your WordPress site
  • Create a NEW userid, and call it what you wish (e.g. ThisIsNotAdmin ) that has Admin privileges, and give this user id a good password (not that crappy one you use for most sites)
  • Log out of your Admin account, and try to log in with your new Admin UserID, make sure you can do all you want, and that it is really an Admin account (be really sure before you do the next step).
  • From your new Admin userID, delete the Admin user id (maybe after you have done a full backup of your site just to be paranoid).

That is it, you have shut down the first attack vector for hackers, so your site is a little more secure (but don’t get cocky, there are many other ways into your site, this is just shutting off one of the easiest to attack).

A new way of doing:

  • Twitter
  • Google
  • Facebook
  • StumbleUpon
  • LinkedIn
  • Reddit
  • Tumblr
  • Pinterest
  • Pocket
  • Email
  • Print

Old Commentaries become Timeless

Tweet

With over 2500 articles written over 10 years there are many of my commentaries that have faded in their significance, and the points made are no longer valid, however, that is easily remedied, with some judicious editing.

Many of my investing commentaries over the years leaving up to 2008, actually are becoming quite relevant to the current market situation, however, simply trying to pass them off as current commentary would be lazy and lacks a level of panache. If you add a simple preface to the post something similar to:

Do note the date of this original post, just before the great EXPLOSION of 2008, interesting the parellels eh? (When is next market crash 2007)

Suddenly that article becomes a foreboding warning, is it not?

Another simple tactic is just reading over a commentary about Debt and such and add in exact dates on when the commentary was being made, and remove any specific mention of coming current events (at the time), as I did with Great Canadian Debts, it had a reference to a coming provincial/federal election.

I am even following my own advice with this collection, updating Paypal Donation Buttons, which was previously a little short and didn’t really mention Paypal by name either. There are many similar posts here that really do need a bit of a clean up as well, and maybe some SEO work.

 

 

A new way of doing:

  • Twitter
  • Google
  • Facebook
  • StumbleUpon
  • LinkedIn
  • Reddit
  • Tumblr
  • Pinterest
  • Pocket
  • Email
  • Print

Twitter CAN get it done, but not For Very Long 3

Tweet

I typically retweet many of my older posts (daily) to see if I can get some traction on older content that I had. Usually this only constitutes a bump of 10-20 readers a day, however, last week one of my older posts got picked up by a Twitter heavy weight who retweeted it and suddenly I received over 100 readers from Twitter.

The specific retweet was from Rob Carrick who has about 17K followers, but what was interesting was the effect really only lasted about a half an hour and then things went back to normal.

spacer

Social Media is Everywhere
Image courtesy of FreeDigitalPhotos.net

Old but good: Financial mistakes made as a young man via @bigcajunman #genYmoney t.co/8CiKHJKQWV

— Rob Carrick (@rcarrick) July 3, 2014

 

This seems to suggest that Twitter can be useful driving traffic in short spikes, but not overly very useful for driving quality traffic, that will stay and come back often, but that does some up Twitter nicely (i.e. Wham Bam thank you Ma’am).

I continue to grow readership slowly on all fronts, we shall see how best to keep bringing older posts to the forefront (like the one in this post) Financial Time Machine List, which is simply me lamenting some bad financial decisions I made as a young man.

A new way of doing:

  • Twitter
  • Google
  • Facebook
  • StumbleUpon
  • LinkedIn
  • Reddit
  • Tumblr
  • Pinterest
  • Pocket
  • Email
  • Print

Timing is Essential

Tweet

Sometimes if a topic has good timing you can get astounding results. As I said in Freakish Posts and Who Reads What? I really have little comprehension as to why some topics seem to really cause a great deal of interest and others that I think are interesting languish in a sea of disinterest, but sometimes Timing is Everything.

The day after the first full televised leaders debate here in Ontario, I didn’t have any new content, however, I Tweeted/Google+/LinkedIn/Facebook/Pinterest’ed a post titled Damn Rich Civil Servants, which was a rehash of some Stats Canada info about household income and showing that Ottawa is a pretty rich town. The Post caused a 110 reader spike in 1 hour (which was not sustained for the rest of the day unfortunately), but it caused quite the interest.

Why was this so darn interesting? The main topic at the Leaders debate, aside from corruption, was the PC’s plans to lay off 100,000 Civil Servants, and how that would save money. I saw that post languishing in my archive, took a chance and republished it using Social Media and it caused a very nice bump in readership.

As with all topics, timing is everything

A new way of doing:

  • Twitter
  • Google
  • Facebook
  • StumbleUpon
  • LinkedIn
  • Reddit
  • Tumblr
  • Pinterest
  • Pocket
  • Email
  • Print

Copyright messages and Scrapers

Tweet

One easy way to ensure that your content remains your content is to add some kind of copyright statement on the copy, so that if someone borrows it for their own use, you could take legal action.

I have taken this is a step further by embedding in many of my posts the following HTML code:

This article is owned and written by Author: Me, all rights reserved. No part of any of the content of this article may be reproduced, distributed, modified, framed, cached, adapted or linked to, or made available in any form by any photographic, electronic, digital, mechanical, photostat, microfilm, xerography or other means, or incorporated into or used in any information storage and retrieval system, electronic or mechanical, without the prior written permission of Me.

The added fun with that is that I put it in an HTML comment at the start of the document. You can do this by simply inserting:

< ! --- This is my copyright notice, no copying without my permission you salacious plagiarist --->

Into the HTML source for the document, the im