<div>It would help to know more about the hacks you are seeing. Is it via plugins?</div>
<div>
<br></div>
<div>We put wp-admin behind a firewall. You have to be on campus or using VPN to log into WordPress. It's a pain at times, but keeps certain malicious people out. </div>
<br><br><div class="gmail_quote"><p>On Mon, Sep 9, 2013 at 6:18 PM, Leslie Melvin <span dir="ltr"><<a href="mailto:melvin@bard.edu" target="_blank">melvin@bard.edu</a>></span> wrote:<br></p><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Hi Folks,<div><br></div><div>We have been hosting WP Multisite (for course blogs and as a blog supplement to our program websites) for a few years, with mixed results. Our community (users) love the flexibility of WP, but it has proven to be an unexpected support burden for IT...it seems that all of our website/network hacks have been introduced via WP. </div><div><br></div><div>I haven't seen the topic addressed by this group, so it appears our experience is isolated, which would lead me to suspect we are missing some simple safe-guards. Have any of your institutions dealt with WP-related security issues? Have you found any successful, secure configurations, and if so, would you be willing to share your experiences with us? WP is proving to be such a valuable tool...</div><div><br></div><div>If so, I will bring our Networks and Systems folks into the conversation, as they could answer specific questions related to our configuration and protocols.</div><div><br></div><div>Many thanks in advance!</div><div><br></div><div>Best,</div><div>Leslie</div><div><br></div><div><div apple-content-edited="true">
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-weight: normal; font-style: normal; "><span class="Apple-style-span" style="font-family: 'trebuchet ms', sans-serif; "><b><span class="Apple-style-span" style="font-family: Helvetica; font-weight: normal; "><b><font class="Apple-style-span" face="'Helvetica Neue'"><span class="Apple-style-span" style="font-family: Helvetica; font-weight: normal; ">---</span></font></b></span></b></span></div><div><b><b style="color: rgb(0, 0, 0); "><font class="Apple-style-span">Leslie A. Melvin</font></b><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-size: medium; font-style: normal; font-family: Helvetica; font-weight: normal; "> | </span><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-size: medium; font-style: normal; font-family: Helvetica; font-weight: normal; "><font class="Apple-style-span" size="3"><span class="Apple-style-span" style="font-size: 11px; ">Manager, Academic Technology Services</span></font></span><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-size: medium; font-style: normal; font-family: Helvetica; font-weight: normal; "><br></span><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-size: medium; font-style: normal; font-family: Helvetica; font-weight: normal; "><font class="Apple-style-span" size="3"><span class="Apple-style-span" style="font-size: 11px; "><br></span></font></span><div style="color: rgb(0, 0, 0); font-size: medium; font-style: normal; font-family: Helvetica; "><font class="Apple-style-span" size="3"><span class="Apple-style-span" style="font-size: 11px; "><span class="Apple-style-span" style="font-weight: normal; ">BARD COLLEGE</span><br><span class="Apple-style-span" style="font-weight: normal; ">PO Box 5000 | 204 Old Henderson | </span></span></font></div><div style="font-size: medium; font-style: normal; font-family: Helvetica; "><font class="Apple-style-span" size="3"><span class="Apple-style-span" style="font-size: 11px; "><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-weight: normal; ">Annandale-on-Hudson, NY 12504</span><br><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-weight: normal; ">office: 845.758.7496 |<span class="Apple-converted-space"> </span></span><u><font class="Apple-style-span" color="#3e6ba9"><a href="http://www.bard.edu">http://www.bard.edu</a></font></u></span></font></div></b></div></div></div></span></div></span></span>
</div>
<br></div></blockquote></div><br>