How to perform a complete security audit of website

What is a security audit of website?

Security audit is a regular process that should be performed on your client’s websites on regular basis.

It includes general huygine checkups, server software upgrades & indepth security analysis of website.

How to prevent a website from getting hacked

1. Disable directory listing
2. Set appropriate security headers
3. Set Appropriate file permissions
4. Hide WordPress version

Disable directory listing

Put the following code into your .htaccess file or vhost conf file in apache

<Directory /{YOUR DIRECTORY}>
 Options FollowSymLinks
</Directory>

Set Appropriate Security Headers

Set Appropriate File permissions

Hide WordPress Version

Put this code into your active themes functions.php file

function itgiggs_remove_version() {return'';}add_filter('the_generator', itgiggs_remove_version');