PHP code vs plugins vs server-side security

13 Aug PHP code vs plugins vs server-side security

Here are our brief thoughts on securing your WordPress site

Looking to understand security better?

Well, as you go about your research it’s important to keep in mind that PHP code or a WordPress security plugin cannot act as real security. You’ll want a platform that provides world-class server-level security. Talk with your server or website builder or designer to see what protections they have in place.

To help with that conversation here’s our application and server-side security checklist.

• Web Application Firewall specifically tuned for WordPress
• Real-time malware detection
• DoS/DDoS protection
• Fully isolated per site environment
• Daily incremental backups
• Disaster backups
• Long-lived backups via CloudSnap
• Specially designed file system without write permissions to WordPress core files
• Hardened PHP
• Timely WordPress installation, theme, and plugin updates

One caveat, a few security plugins offer advanced features like checking password strength, two-factor authorization, and similar features. For these use cases, you can use these specialized plugins to add an added layer of security. If so, do check with your server to see which plugins are compatible with their configuration.

Covered in this agreement

• Basic Terms & Conditions
• Intellectual Property Provisions
• Additional supplements for print, interactive, and environmental

Of course, you could always rely on us. We automatically update WordPress, plugins, and security so you don’t have to. Make the switch to Red Plum WP Builder and let us design and manage your site.

Make The Switch

The AIGA Standard Form of Agreement for Design Services.