Setting up an antimalware suite

Of the many security plugins, two stand out, adding easy set-it-forget-it defence.

Firewall

WordPress Firewall from the clever coders at seoegghead is a tremendous piece of kit, stopping a wide range of attacks in their tracks:

• Directory traversals (server defence)

• Executable file uploads (server defence)

• Field truncation, SQL and WP-specific queries (database defence)

You can whitelist your own IP addresses as well as page-specific form variables, and the firewall can be set to send you e-mail alerts like this (but with lots more detail):

• WordPress Firewall – http://www.seoegghead.com/software/wordpress-firewall.seo

AntiVirus

The AntiVirus plugin from Sergej Müller is another beauty, scanning for malicious links, virus injections, and other WordPress weaknesses.

Click on the new Dashboard tab and then on AntiVirus to run a manual scan. Check off those alerts you know to be false positives while researching the others. The aim, from first plugin use, is to underline...