8 Sep
2014
8 Sep
'14
7:51 p.m.
Andy said:
1. Disable any apache2 modules that you don't need
and restart
apache2.
I use suphp, which means that my Apache process is quite small (it's
not loading PHP for things that do not need it). The active modules
are
alias, auth_basic, authn_file, authz_default, authz_host, authz_user,
autoindex, cgi, deflate, dir, mime, rewrite, ssl, suphp.
If I didn't use Apache's authorisation for access for wp-login.php
(it's another defence against the bots trying to bruteforce access to
any WordPress site), I could lose a couple of the auth modules.
Similarly, if I weren't using SSL for some sites' admin pages, I could
lose ssl.
Ian