Thanks for your reply.

Regarding #2, on Page 141 of your ebook, there is a link to Donncha’s blog post titled “Did your WordPress site get hacked?”. In that blog post, it was mentioned that the SECRET_KEY need to be created.

Regarding the SALT values, yes, I have the newsletter with the video and I will implement these also in the wp-config.php.

Cheers
Raj

Sorry to hear about your sites, that really does suck. These guys who do that really get on my nerves.

Could you mention on which page you found #2. I’d like to go take a look at what specifically I was talking about. But the answer to your question is just stick with #1. Also, I recently sent out a video to my newsletter subscribers which showed how to add SALT values as well which will speed up how fast your blog loads the KEY values. So be sure to watch that video also if you still have the email.

If you don’t, let me know and I’ll make sure you get it.

Thanks again and let me know if you have any other questions.

I had bought your WordPress Defender ebook a month back.

I own some 35+ blogs/websites out of which some 5+ sites are authority sites.

As usual, I was procrastinating and did not implement the tips as per your ebook.

I upgraded WordPress to 3.0 on 25-26/Jun for all my blogs. Before/during upgrade, all the sites were ok.

3 days back, when I was checking my blogs, I found that 2 of my blogs had been hacked. Luckily for me they were not my authority sites.

Since yesterday, I have started reading your ebook and creating a checklist of all the things to implement in each of my blogs.

I plan to implement the security measures as per this checklist, first to my authority blogs and then to all the other blogs of mine.

I just wanted to clarify a doubt.

1. On Page 48 of your ebook, you have asked that the security keys: AUTH_KEY; SECURE_AUTH_KEY; LOGGED_IN_KEY; NONCE_KEY, be added to the wp-config.php file.

2. At another place, you have also said that the security key SECRET_KEY should be added.

What I would like to know is that if I do #1 above, do I still need to add the #2, i.e., SECRET_KEY?

Kindly advice.

Thanks
Raj

PS: By the way, I forgot to mention, you ebook is excellent. I will give you detailed feedback about your ebook after I have implemented your recommendations on at least some of my blogs.
V K Rajagopalan´s last blog ..Affiliate Marketing Secrets

Without the blood stains? But that comes at no extra charge! hehe

Keeping your WordPress blog up-to-date is definitely a must when talking about WordPress security, but there are several other ways someone might get into your blog even through your blog is fully upgraded.

It could be because they’ve managed to download a virus to your computer which lets them see ways to get into your blog. Or perhaps your email, FTP, or login page itself screws it up for you. It could even be other social media sites.

All those things and more are ways that someone could get into your blog even though your blog is upgraded to the latest version.

If you have any questions, you can always contact me here or through the newsletter email (just hit reply).

Have a great day!

I’m a happy blogger, who bought your powerful security weapon:) I have already read the ebook and it is excellent. One of my goals for this week is to implement your suggestions and protect my “babies”:)

Thank you once more for this highly valuable product!

Justyna
Justyna Bizdra´s last blog ..8 Powerful Time Management Techniques for Internet Marketers

I definitely did my best to write it more like I was talking to a friend rather than writing a tech manual.
John Hoff – WP Blog Host´s last blog ..Something New to Blogosphere is Coming, Thanks to a Broken Heart

About your order, after you purchased the ebook you should have been directed to the download page via E-Junkie.com.

Have you gotten it yet?

Ah wait, I see it. Yeah I think it’ll take a day or two with how your order was placed. I’ll see if I can do something about that for you. Email coming your way!