• Resolved elpezrojo

    (@elpezrojo)


    Hi
    I′m working on a site which is attacked several times and the first thing they do is create a new admin user.
    How can I avoid this?

    I′m thinking on changing the Id of wp_users table to enum and put only the ids of the good users
    Is this a good idea?
    What can I do?

    Thanks
    Javier

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • I′m working on a site which is attacked several times and the first thing they do is create a new admin user.

    That type of activity (creating admin accounts) usually indicates that the site, or the server and/or some user credentials have been compromised.

    You may want to carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures.

    Thread Starter elpezrojo

    (@elpezrojo)

    Thanks for responding Clayton
    I will check the guide (now are working experts of the hosting).
    But I tried the enum change in another test WordPress and seems ok, I think that nobody can create new users except from phpmyadmin and the WordPress seems to be ok.

    Javier

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Avoid new users’ is closed to new replies.