Skip to content

Site security options

The hardening switches on the Access tab, and what each one actually stops.

On this page

Every Sitebefy site ships with sensible defaults. These options let you tighten things further, and each one has a real cost as well as a benefit.

The Access tab showing the security hardening options

XML-RPC#

An older WordPress interface that some apps and plugins use to publish remotely. It is also a common target for brute-force attempts. Turn it off unless something you use needs it; if a publishing app stops working, this is the first thing to check.

Login attempt limits#

Blocks an address after repeated failed logins. Worth having on. The cost is that you can lock yourself out by mistyping your own password several times; wait it out rather than panicking.

PHP version#

Newer PHP is faster and gets security fixes for longer. Older plugins occasionally need an older version. If you change it and something breaks, change it back: nothing is lost by switching.

SFTP access#

Direct file access to your site, for when you need to upload or edit files outside WordPress. Credentials are on the Access tab.