Additional security rules

Hello!

I usually work with security rules by hand and use security plugins only for scanning files and blocking IPs. Tested All In One WP Security at new site. Looks like it does a lot of work and saves time. ??

Just want to suggest you to add some more security rules, wich could be set with AIOWS.

Force https connection for admins (you should check, that ssl exist):
define(‘FORCE_SSL_ADMIN’, true);

Administration Over SSL

Force secure connection for FTP actions (you should check, that hosting allow):
define(‘FTP_SSL’, true);

Editing wp-config.php

Disable debug messages on frontend (some developers foget this, when enable debug on working site):
define(‘WP_DEBUG_DISPLAY’, false);
@ini_set( ‘display_errors’, 0 );
Last optional, not 2 at once.

Debugging in WordPress