Secure your WordPress in x10hosting

[stahn.universe]

Thanks to the admins, x10hosting php support is great. But this also comes with lots of security risks that can be easily avoided with a plugin (while not all, most).

First, let me tell you that if you screw up, you have to delete some .htaccess files, manually: Delete all .htaccess and .htpasswd files in your WP root directory and wp-admin directory.

Download the AskApache Password Protect plugin. Activate, then go to the config. You will have to setup a username and password, but it will be useless for x10hosting.

Next, config the plugin exactly as you see it here:



This config will let you use your WordPress install with every plugin you want (I'm using MyFTP and OneClick without problems), and securing your wp-content folders.