[et_pb_section fb_built="1" _builder_version="3.22"][et_pb_row _builder_version="3.25" background_size="initial" background_position="top_left" background_repeat="repeat"][et_pb_column type="4_4" _builder_version="3.25" custom_padding="|||" custom_padding__hover="|||"][et_pb_text _builder_version="3.27.4" background_size="initial" background_position="top_left" background_repeat="repeat"]While looking a bit daunting, code is really not that difficult of a language to learn as you may think, starting with the basics may seem obvious but they are often really simple and doing so is the first step to mastering any computer language.

In this day and age there are seemingly infinite free online sources available should you be interested in learning how to code. It has never been easier to pick up than it is now.

One place I recommend is a site called w3schools.com.

It has tonnes of tutorials, guides, quizzes and walkthroughs for all the major styles of code and can quickly assist you in becoming well versed in the fine arts of HTML or JavaScript and many other written languages. Did I mention it was free?

There are also plenty of useful YouTube channels if you’re struggling a bit to teach yourself, Khan Academy has a few channels with endless amounts of informative and detailed videos from the basic level to much more advanced techniques and skills. Their computing channel specific to computer science and code is where you’d find what you’re looking for but their main channel, Khan Academy, covers way more than just that, math, science and economics to name a few things.

If you’re looking for a more engaging style of learning though, codecombat.com is actually a fantasy style RPG game that helps teach code, it’s definitely a more fun way of learning and I’m not going to lie. I spent probably a bit too long playing while testing it out.

In summary, code is all around you and more accessible than ever before. Once you get into it and can begin to let your creative juices flow it’s can be quite fun and fulfilling too, although at times frustrating but we don’t talk about that.
[/et_pb_text][/et_pb_column][/et_pb_row][/et_pb_section]

[et_pb_section fb_built="1" _builder_version="4.0.3" custom_padding="0px||0px|||"][et_pb_row _builder_version="4.0.3" custom_padding="0px||0px|||"][et_pb_column type="4_4" _builder_version="4.0.3"][et_pb_text _builder_version="4.0.3"]

Here at Hosting Australia our developers have noticed a concerning trend.

We are seeing more and more incidences of WordPress websites being hacked or compromised in someway.

Unfortunately, we are seeing one common theme. Inevitably, access to website has been made possible through the lack of security implemented by iether the website's developer or owner.

Listed in this article are 5 of the top ways reasons your website is vulnerable. 

1. Not updating WordPress

If there’s one commonality among WordPress hack victims, it’s this:

Not updating WordPress!

According to Sucuri’s Hacked Website Report, somewhere between 55-61% of WordPress hack victims were running out-of-date WordPress when they got infected, and that’s definitely not a coincidence:

(Charts by Visualizer Lite.)

From reflection on the sites that we see being compromised we see 3 times of people who don't update their WordPress installs.

1. People who put off updates because they’re too busy or forget, OR
2. People who are afraid that updating their site will break it, OR
3. People who have no idea that their website needs updates or how to do it.

If you belong in group 1, then stop procrastinating already! – it just takes a few seconds to update your site.

If you belong in the group 2, you can take some steps to ensure nothing breaks your site.

Always make a full and complete backup of your site before you run an update.

In the unlikely event that your site does crash, you can easily roll back the previous version.

If you are in group 3? Then we are here to help! Open a support ticket by emailing support@hosting-australia.com or contact your developer and ask about updating your site.

2. Not updating plugins

See this as the same as updating your WordPress install.  It is just as important, if not more so, to update the plugins that you use in your site.

If you use outdated plugins and do not update them, you are exposing yourself to potential security issues and bugs…

Again, Sucuri’s study has some helpful data – 18% of WordPress hack victims were hacked just because they hadn’t updated plugins with known vulnerabilities. The plugin developer knew there was a problem and fixed it – people just didn’t update the plugin to secure their site!

Additionally, in a survey of WordPress hack victims from Wordfence, over 55% of people who knew how the hacker got in said it was because of a plugin issue.

If you’ve got a ton of plugins and you find it hard to keep track of all the updates, we recommend using Wordfence.

This plugin comes with a malware scanner that will check your other plugins for malware, bad URLs, backdoors, SEO spam, malicious redirects and code injections. It also draws your attention to potential security issues when a plugin you’re using has been closed or abandoned.

3. Not protecting your WordPress admin directory

In that same Wordfence survey, one of the most common WordPress hack attempts involved getting access to your WordPress login credentials, either through brute force attacks or password theft:

To prevent that from happening, you’ll want to protect your WordPress admin directory (your /wp-admin page).

First and foremost, make sure you password protect your WordPress admin page.

By default, you’ll require a password to get into the directory, but we’re talking about adding another layer on top of that.

That way, anyone trying to access your WordPress admin will need to provide an extra username and password.

If you need a walkthrough on how to do this, check out Step 2 of our article: 4 Ways to Tighten WordPress Security.

If you don’t like that approach, another good alternative is two-factor authentication.

With two-factor authentication set up, your site users won’t just require a password to log in – they’ll also need to input a code that’s sent to them via text message, email, or an app.

To do this, check out our WordPress two-factor authentication guide.

Last but not least, it’s not a good idea to use “admin” as your WordPress username.

Hackers might attempt to get into your site using this default username, so you should definitely switch it up.

While WordPress doesn’t let you directly change your username, you can still do it by following these methods.

4. Using weak passwords

This one’s pretty obvious – if you use weak passwords, it’s easier for hackers to access your accounts.

We’re not just talking about the password that you use for your WordPress admin account, though.

The same thing applies to your other passwords, including your:

• Web hosting accounts
• FTP accounts
• MySQL database
• Email accounts associated with your WordPress admin account

To learn more about generating a strong password, read How Secure Is My Password? Here’s Your Answer, Plus How to Pick a Strong Password.

Additionally, some hosts (like Kinsta and WP Engine) let you use two-factor authentication for your hosting account. That’s another good layer of security.

5. Using low quality themes

If you do a quick Google search, you’ll find a good handful of websites that distribute paid WordPress themes for free.

At first glance, this might look like a cool money-saver for website owners on a tight budget.

In actuality, though, most of these sites are pretty dodgy…

If you download and install a theme from them, you might end up compromising the security of your website.

Remember, there’s no such thing as a free lunch.

If you want to use a premium theme on your website, then get it from a reputable theme developer website and PAY for it. Or you can check out our free WordPress themes (no hacks here – promise!).

Stop WordPress hack attempts before it’s too late

Sad to say, the average WordPress site owner doesn’t consider security a priority.

When you’re setting up your site for the first time, you’re probably more concerned with the look and feel of your website than anything else.

And once you get your site up and running, you’ll turn your focus to churning out great content, neglecting security as you go along.

Obviously, this is a huge mistake.

You don’t wait to wait for a WordPress hack attempt BEFORE you start caring about your site’s security – when that happens, it’ll be too late.

So set aside an hour or two and make sure that your WordPress site is secure and up-to-date.

Forget analyzing your traffic from Google Analytics or optimizing your pages for SEO — this is the one most important thing you can do for your WordPress site.

[/et_pb_text][/et_pb_column][/et_pb_row][/et_pb_section]