Nuking the wp_ tables prefix
The WordPress database, like any other that isn't brand new, comprises a bunch of tables. These tables have one thing in common, the default WordPress prefix. This way, you have wp_options
, wp_posts
, wp_users
, and so on.
The security issue with this structure is that, a bit like the old default admin user account, hackers know about these default table names and, if a flaw exists, they are more likely to successfully exploit them with an SQL injection attack. So what to do?
We can't change the name of each and every table. We can, however, change their uniform prefix. Here's how, using Semper Fi's stalwart plugin WP Security Scan:
WP Security Scan – http://wordpress.org/extend/plugins/wp-security-scan
Backing up the database
Good point, well said. After all, this is a major change. In the unlikely event that you encounter a problem, you will need a very recent backup to restore from.
Automated prefix change
Having installed and activated WP Security Scan, check your...