Website Security / I keep getting hacked, help

[s_curran]

So we have 3 or 4 websites hosted on one Bluehost account. They all are wordpress sites. 1 of them is constantly being hacked, another is only sometimes. It appears to be a .htaccess hack. When on mobile browsers it forwards over to some garbage.

I run an anti malware plugin that kills it instantly and quickly, but it happens every day. Does anyone have any suggestions? It seems like I could use sitelock (a service through blue host), and for 30 a month it would scan an remove malware. Its not HUGE money, but for a mostly inactive blog it seems like a big cost to me. Also, does that mean for a certain percentage of every day our blog would be a shitty porn site?

Is there a good website for web security, or someone I can pay a small amount for decent info for a non-coder?

Also, it seems that a scan removal has done a decent job at breaking something on our website as well.

[Noteddy]

Wordpress is kind of notorious for this. Widely used and so widely under attack. To be fair, Wordpress constantly posts fixes and updates to cope. You have to commit to keeping the code updated. Older versions are highly vulnerable. If you use third-party plugins, those also need to be kept updated and fixing one can break the other. It is a constant battle. As a result, there are a lot of folks who make their living keeping the bad guys (and bots) out. I would think there would be a handful of good, competitively priced shops in Boston that could handle this for a modest fee. I don't have any names to recommend there.

An alternative is to move to another platform where you (mostly) don't have to do your own maintenance. WIX and Squarespace seem to work fine and they automatically test and push security updates to all of their sites, so you don't have to. Changing technologies, of course, can be a huge pain if you have a lot of content.

This is a constant part-time job. Unless it is what you like to do, or want to do, outsource it. It won't be a one-time fix.

[Too Tall]

What Nic said. Vsalon used to be on my private Unix space and it became all consuming. It was east, pay someone else who is GOOD at this to do it.

[xjoex]

Have you installed WordFence ? It is a free security plugin with a premium pay option. Works wonders.

I am fairly knowledgeable in this subject, I can help you. Send me an email Joe at soulrun.

At a minimum I can can do a quick vulnerability assessment (same offer for all you folks).

Cheers,
Joe