[1] Wordpress Security

Bagi yang memiliki website berbasis wordpress, ternyata ada celahnya supaya orang lain bisa tahu username cpanel kita. silahkan coba http://domainwebsite.com/wp-admin/includes/upgrade.php pastinya akan muncul pesan eror seperti ini :

Fatal error: require_once() [function.require]: Failed opening required 'ABSPATHwp-admin/includes/admin.php' (include_path='.:/usr/local/php53/pear') in /home/usercpanel/public_html/wp-admin/includes/upgrade.php on line 16

Pesan eror diatas memperlihatkan username cpanel kita.

Solusi :
tambahkan script dibawah ini pada file .htaccess :

Spoiler:

# Block the include-only files.
RewriteEngine On
RewriteBase /
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]

Semoga bermanfaat :)