1. Welcome to WordUp Pompey! 15th November 2018
@wppompey
#wppompey – no hyphen!
/About-wordpress-meetups/code-of-conduct/
Welcome to WordUp Pompey! for November 2018
This evening we’ll look into more detail at some of the practical security tips from this year’s presentations by Dave Potter and Tim Nash.
Agenda
19:00 Networking
19:10 Practical Security Workshop
20:30 Q & A
20:45 Wrap Up
21:00 Social at Sovereigns

2. Sponsors Venue sponsor Pizza sponsor RedIT
@reditcouk
Scott McKeown says
I'll offer a 25% discount on Web Hosting or Virtual Servers to WordUp Pompey! members entering wordup and checkout
(that's for life by the way, not once)
Pizza sponsor
WordPress plugins
Herb Miller @herb_miller @bobbingwide
@sharedbigram

3. Practical Security Workshop
Implementing security tips, using WP-Pompey.org.uk, with Herb, Drew, Scott and attendees.
This month we'll actually implement some of the tips mentioned and discussed throughout the year
with particular emphasis on recommendations from Dave Potter ),
Tim Nash ) and, of course, WordPress Portsmouth Meetup members.
It will include:
[bw_csv uo=u]
Hosting
Backup / Restore
Two Factor Authentication
Security plugins
Monitoring
Implementing practical security tips on
With Herb, Drew, Scott… and anyone else who cares to contribute!

4. True Story
My site was hacked last week!
Herb Miller

5. Contents Hosting - what can they do for you? Backup / Restore
Two Factor Authentication
Security plugins – firewall and malware scanners
Monitoring

6. Hosting – what can they do for you?
Backup & Restore
Control Panel: cPanel Plesk
Disk space
DNS
File permissions
Firewall: WAF
FTP
Git
GDPR policy
https
IP blocking
Let’s Encrypt
Logs: access error
Managed
Monitoring
One-Click install / update
Passwords or PassPhrases?
Performance
PHP versions
phpMyAdmin
SFTP
SSH
SSL
Softaculous
Staging
Support: 24/7 chat
Tutorials
WP-CLI

7. Backup / Restore
I’ve used: BackWPup, UpdraftPlus, BackUpWordPress

8. Two Factor Authentication
I’ve used Two Factor with and Google Authenticator.

9. Security plugins Tim Nash also mentioned WP fingerprint and Stream.
Firewall and Malware scanners
Tim Nash also mentioned WP fingerprint and Stream.

10. Monitoring https://www.host-tracker.com https://visualping.io

11. Security - A to Z
Authentication – Two Factor
Backup: 3, 2 formats, 1 there
Core
Classic Editor
CDN as DNS: CloudFlare
Debug
DISALLOW_FILE_MODS
Delete: unused plugin
Disaster Recovery Plan
Editor
Encryption
Firewall
File permissions
GDPR
Gutenberg
.htaccess
https:
http/2
Hosting
Insurance
IP Blocker
JavaScript
KeePass
LastPass
Limit logins
Lockdown uploads
Monitor
Nonce
OAuth
Privacy
Passwords / PassPhrases
Q clearance
REST
Settings
SSL: FORCE_SSL_LOGIN
Tracing / tracking
Updates – core, plugins, themes, child themes
Users
Vulnerabilities
Web Application Firewall
WP-CLI
WP_DEBUG
X-Frame-Options
XMLRPC
You’re responsible!
zzz
Please know of any additional items that you can think of.

12. Complete the checklist
Purpose: Ensure wp-pompey.org.uk is secure
Item
Your choice
Hosting
TsoHost & Let’s Encrypt
Backup / Restore
cPanel & UpdraftPlus
Two Factor Authentication
Two Factor
Firewall and Malware scanner
Wordfence
Monitor
visualping

13. Security Mantra - A to F
Always Be
Cautious
Don’t
Ever
Foul Up

14. Credit: https://torquemag

15. Coming up 15 Nov WordPress 5.0 beta 5 17-18 Nov WordCamp Edinburgh
19 Nov WordPress 5.0 RC1
27 Nov WordPress 5.0
6 Dec WordCamp Lille
20 Dec WordUp Pompey! – Xmas Special
See for initial proposals
22 Jan WordPress 5.0 secondary release
Thanks again to our venue sponsor redIT