Why we lock WordPress against known hacking attempts?


To strengthen WordPress security, we lock the public_html directory using chattr security to stop making any changes to website files and folders. We also apply a phpMyAdmin database triggers to the WordPress wp_users table to restrict unauthorized create, update, and delete actions. These additional WordPress security features are available exclusively on our Corporate Hosting servers for an extra layer of website protection. You can contact our support team anytime to temporarily or permanently disable the chattr immutable security or database triggers whenever legitimate website or database changes are required.

The primary purpose of chattr security is to apply the immutable (+i) attribute to website files and folders, preventing them from being altered. This helps protect your website against malicious files being uploaded or existing files being modified through vulnerabilities in outdated or compromised WordPress themes and plugins. However, while the immutable attribute is enabled, you or your developer will also be unable to modify website files or upload product images and other media

The primary purpose of the phpMyAdmin database triggers is to protect the WordPress wp_users table by restricting create, update, and delete actions. This helps prevent unauthorized creation of new WordPress users or modification or deletion of existing users through database-level access or exploited vulnerabilities. However, while this protection is enabled, legitimate user creation, profile updates, password changes, or user deletion may also be restricted.

Does this guarantee 100% security?
No security measure can guarantee 100% protection against all future attacks. These locks are designed to reduce recognized hacking risks, limit unauthorized changes, and strengthen your WordPress security. Our goal is to make unauthorized changes more difficult while keeping legitimate website changes under proper authorization.