{"id":1059,"date":"2025-12-31T14:27:02","date_gmt":"2025-12-31T11:27:02","guid":{"rendered":"https:\/\/tuncersen.com.tr\/blog\/?p=1059"},"modified":"2025-12-31T16:06:57","modified_gmt":"2025-12-31T13:06:57","slug":"wordpress-guvenlik-onlemleri","status":"publish","type":"post","link":"https:\/\/tuncersen.com.tr\/blog\/wordpress-guvenlik-onlemleri.html","title":{"rendered":"WordPress G\u00fcvenlik \u00d6nlemleri: Sald\u0131r\u0131lar Nas\u0131l Engellenir?"},"content":{"rendered":"<h1 data-path-to-node=\"7\">WordPress G\u00fcvenlik \u00d6nlemleri: Sald\u0131r\u0131lar Nas\u0131l Engellenir?<\/h1>\n<p data-path-to-node=\"8\">Kurumsal bir web sitesini y\u00f6netiyorsan\u0131z, siber g\u00fcvenlik &#8220;olsa da olur&#8221; bir \u00f6zellik de\u011fil, hayati bir zorunluluktur. \u0130nternet d\u00fcnyas\u0131nda her g\u00fcn binlerce site bot sald\u0131r\u0131lar\u0131, kaba kuvvet (brute force) denemeleri ve k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131mlarla kar\u015f\u0131 kar\u015f\u0131ya kal\u0131yor. 15 y\u0131ll\u0131k IT ve web y\u00f6netim tecr\u00fcbemde g\u00f6rd\u00fc\u011f\u00fcm en net ger\u00e7ek \u015fudur: <b data-path-to-node=\"8\" data-index-in-node=\"333\">WordPress g\u00fcvenlik \u00f6nlemleri<\/b> en ba\u015ftan al\u0131nmazsa, telafisi \u00e7ok daha maliyetli krizlere yol a\u00e7ar.<\/p>\n<p data-path-to-node=\"9\">Bu rehberde, y\u00f6netti\u011fim y\u00fcksek trafikli kurumsal sitelerde uygulad\u0131\u011f\u0131m ve sald\u0131r\u0131lar\u0131 ba\u015far\u0131yla engelleyen &#8220;G\u00f6r\u00fcnmez Kalkan&#8221; stratejisini t\u00fcm detaylar\u0131yla anlataca\u011f\u0131m.<\/p>\n<h2 data-path-to-node=\"10\">WordPress G\u00fcvenlik \u00d6nlemleri Neden Hayati \u00d6nem Ta\u015f\u0131r?<\/h2>\n<p data-path-to-node=\"11\">\u00c7o\u011fu web sitesi sahibi, &#8220;Benim sitem k\u00fc\u00e7\u00fck, hackerlar neden benimle u\u011fra\u015fs\u0131n?&#8221; yan\u0131lg\u0131s\u0131na d\u00fc\u015fer. Oysa sald\u0131r\u0131lar\u0131n %90&#8217;\u0131 hedef g\u00f6zetmeksizin interneti tarayan otomatik botlar taraf\u0131ndan yap\u0131l\u0131r. Bu botlar, g\u00fcncel olmayan eklentileri, zay\u0131f \u015fifreleri ve korumas\u0131z sunucu ayarlar\u0131n\u0131 saniyeler i\u00e7inde tespit eder.<\/p>\n<p data-path-to-node=\"12\">Do\u011fru yap\u0131land\u0131r\u0131lm\u0131\u015f <b data-path-to-node=\"12\" data-index-in-node=\"22\">WordPress g\u00fcvenlik \u00f6nlemleri<\/b>, sitenizi bu botlar i\u00e7in &#8220;u\u011fra\u015fmaya de\u011fmeyecek kadar zor&#8221; bir hedef haline getirir.<\/p>\n<h2 data-path-to-node=\"13\">1. Temel Savunma: Sunucu ve Panel Ayarlar\u0131<\/h2>\n<p data-path-to-node=\"14\">G\u00fcvenlik, WordPress panelinde de\u011fil, sunucunun k\u00f6k dizininde ba\u015flar. Plesk veya cPanel kullanman\u0131z fark etmeksizin, \u015fu temel ayarlar\u0131 mutlaka kontrol etmelisiniz:<\/p>\n<ul>\n<li data-path-to-node=\"15,0,0\"><b data-path-to-node=\"15,0,0\" data-index-in-node=\"0\">PHP S\u00fcr\u00fcm\u00fc:<\/b> Sunucunuzda daima en g\u00fcncel ve kararl\u0131 PHP s\u00fcr\u00fcm\u00fcn\u00fc (\u00d6rn: PHP 8.1 veya \u00fczeri) kullan\u0131n. Eski s\u00fcr\u00fcmler yamalanmam\u0131\u015f a\u00e7\u0131klarla doludur.<\/li>\n<li data-path-to-node=\"15,1,0\"><b data-path-to-node=\"15,1,0\" data-index-in-node=\"0\">Dizin Listelemeyi Kapat\u0131n:<\/b> Ziyaret\u00e7ilerin <code data-path-to-node=\"15,1,0\" data-index-in-node=\"42\">wp-content\/uploads<\/code> gibi klas\u00f6rlerin i\u00e7eri\u011fini g\u00f6rmesini engellemek i\u00e7in sunucu ayarlar\u0131ndan &#8220;Directory Browsing&#8221; \u00f6zelli\u011fini devre d\u0131\u015f\u0131 b\u0131rak\u0131n.<\/li>\n<li data-path-to-node=\"15,2,0\"><b data-path-to-node=\"15,2,0\" data-index-in-node=\"0\">Gizli Dosyalar\u0131 Koruyun:<\/b> <code data-path-to-node=\"15,2,0\" data-index-in-node=\"25\">.htaccess<\/code> veya <code data-path-to-node=\"15,2,0\" data-index-in-node=\"40\">wp-config.php<\/code> gibi kritik dosyalara d\u0131\u015far\u0131dan eri\u015fimi tamamen kesin.<\/li>\n<\/ul>\n<h2 data-path-to-node=\"16\">2. Kritik Dosya \u0130zinleri ve Yap\u0131land\u0131rma<\/h2>\n<p data-path-to-node=\"17\">WordPress dosya sistemi izinleri (chmod), sitenizin kilit mekanizmas\u0131d\u0131r. Yanl\u0131\u015f bir izin, anahtar\u0131 kap\u0131n\u0131n \u00fczerinde b\u0131rakmak gibidir.<\/p>\n<ul>\n<li data-path-to-node=\"18,0,0\">Klas\u00f6rler: <code data-path-to-node=\"18,0,0\" data-index-in-node=\"11\">755<\/code><\/li>\n<li data-path-to-node=\"18,1,0\">Dosyalar: <code data-path-to-node=\"18,1,0\" data-index-in-node=\"10\">644<\/code><\/li>\n<li data-path-to-node=\"18,2,0\">wp-config.php: <code data-path-to-node=\"18,2,0\" data-index-in-node=\"15\">440<\/code> veya <code data-path-to-node=\"18,2,0\" data-index-in-node=\"24\">400<\/code><\/li>\n<\/ul>\n<p data-path-to-node=\"19\">Ayr\u0131ca, veritaban\u0131 kurulum a\u015famas\u0131nda varsay\u0131lan gelen <code data-path-to-node=\"19\" data-index-in-node=\"55\">wp_<\/code> tablo \u00f6n ekini mutlaka de\u011fi\u015ftirin (\u00d6rn: <code data-path-to-node=\"19\" data-index-in-node=\"99\">krmsl34_<\/code>). Bu basit de\u011fi\u015fiklik, standart SQL Injection sald\u0131r\u0131lar\u0131n\u0131n \u00e7o\u011funu bo\u015fa \u00e7\u0131kar\u0131r.<\/p>\n<h2 data-path-to-node=\"20\">3. Kod Taraf\u0131nda WordPress G\u00fcvenlik \u00d6nlemleri<\/h2>\n<p data-path-to-node=\"21\">Eklenti kullanmadan, do\u011frudan sistem dosyalar\u0131na m\u00fcdahale ederek g\u00fcvenli\u011fi s\u0131k\u0131la\u015ft\u0131rabilirsiniz. \u0130\u015fte <code data-path-to-node=\"21\" data-index-in-node=\"103\">.htaccess<\/code> dosyan\u0131za eklemeniz gereken hayati bir kural:<\/p>\n<p data-path-to-node=\"22\"><b data-path-to-node=\"22\" data-index-in-node=\"0\">XML-RPC Kapatma:<\/b> E\u011fer Jetpack eklentisi veya mobil uygulama kullanm\u0131yorsan\u0131z, bu \u00f6zelli\u011fi kapat\u0131n. DDoS sald\u0131r\u0131lar\u0131n\u0131n en sevdi\u011fi kap\u0131d\u0131r.<\/p>\n<p data-path-to-node=\"22\"><div class=\"epcl-shortcode epcl-box notice\"><span class=\"epcl-icon\">\ud83d\udcaa<\/span><div class=\"epcl-box-content\"><span style=\"color: #000000;\"><strong>Dikkat:<\/strong> Bu dosyalarda de\u011fi\u015fiklik yapmadan \u00f6nce mutlaka yede\u011fini al\u0131n!<\/span><\/div><\/div>\n<div class=\"code-block ng-tns-c503815587-180 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\" data-hveid=\"0\" data-ved=\"0CAAQhtANahgKEwiE_-W6sueRAxUAAAAAHQAAAAAQ0wI\">\n<div class=\"code-block-decoration header-formatted gds-title-s ng-tns-c503815587-180 ng-star-inserted\">\n<p><span class=\"ng-tns-c503815587-180\">Apache<\/span><\/p>\n<\/div>\n<div class=\"formatted-code-block-internal-container ng-tns-c503815587-180\">\n<div class=\"animated-opacity ng-tns-c503815587-180\">\n<pre class=\"ng-tns-c503815587-180\"><code class=\"code-container formatted ng-tns-c503815587-180\" role=\"text\" data-test-id=\"code-content\"><span class=\"hljs-section\">&lt;Files xmlrpc.php&gt;<\/span>\r\n<span class=\"hljs-attribute\"><span class=\"hljs-nomarkup\">order<\/span><\/span> <span class=\"hljs-literal\" style=\"color: #ff9900;\">deny<\/span>,<span class=\"hljs-literal\" style=\"color: #ff9900;\">allow<\/span>\r\n<span class=\"hljs-attribute\"><span class=\"hljs-nomarkup\">deny<\/span><\/span> from <span class=\"hljs-literal\" style=\"color: #ff9900;\">all<\/span>\r\n<span class=\"hljs-section\">&lt;\/Files&gt;<\/span>\r\n<\/code><\/pre>\n<\/div>\n<\/div>\n<\/div>\n<p data-path-to-node=\"24\">Ayr\u0131ca, panel i\u00e7inden dosya d\u00fczenlemeyi kapatmak i\u00e7in <code data-path-to-node=\"24\" data-index-in-node=\"54\">wp-config.php<\/code> dosyas\u0131na \u015fu sat\u0131r\u0131 ekleyin:<\/p>\n<p data-path-to-node=\"24\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-1071\" src=\"https:\/\/tuncersen.com.tr\/blog\/wp-content\/uploads\/2025\/12\/wp-config.jpg\" loading=\"lazy\" alt=\"wp-config\" width=\"728\" height=\"418\" srcset=\"https:\/\/tuncersen.com.tr\/blog\/wp-content\/uploads\/2025\/12\/wp-config.jpg 728w, https:\/\/tuncersen.com.tr\/blog\/wp-content\/uploads\/2025\/12\/wp-config-300x172.jpg 300w\" sizes=\"(max-width: 728px) 100vw, 728px\" \/><\/p>\n<p data-path-to-node=\"24\">\n<p data-path-to-node=\"24\"><div class=\"epcl-shortcode epcl-box notice\"><span class=\"epcl-icon\">\ud83d\udcaa<\/span><div class=\"epcl-box-content\"><span style=\"color: #000000;\"><strong>Dikkat:<\/strong> Bu dosyalarda de\u011fi\u015fiklik yapmadan \u00f6nce mutlaka yede\u011fini al\u0131n!<\/span><\/div><\/div>\n<div class=\"code-block ng-tns-c503815587-181 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\" data-hveid=\"0\" data-ved=\"0CAAQhtANahgKEwiE_-W6sueRAxUAAAAAHQAAAAAQ1AI\">\n<div class=\"code-block-decoration header-formatted gds-title-s ng-tns-c503815587-181 ng-star-inserted\">\n<p><span class=\"ng-tns-c503815587-181\">PHP<\/span><\/p>\n<\/div>\n<div class=\"formatted-code-block-internal-container ng-tns-c503815587-181\">\n<div class=\"animated-opacity ng-tns-c503815587-181\">\n<pre class=\"ng-tns-c503815587-181\"><code class=\"code-container formatted ng-tns-c503815587-181\" role=\"text\" data-test-id=\"code-content\">define( <span class=\"hljs-string\" style=\"color: #008000;\">'DISALLOW_FILE_EDIT'<\/span>, <span class=\"hljs-literal\" style=\"color: #ff9900;\">true<\/span> );\r\n<\/code><\/pre>\n<\/div>\n<\/div>\n<\/div>\n<p><img decoding=\"async\" class=\"size-full wp-image-1064\" src=\"https:\/\/tuncersen.com.tr\/blog\/wp-content\/uploads\/2025\/12\/wordfence.jpg\" loading=\"lazy\" alt=\"wordfence\" width=\"882\" height=\"146\" srcset=\"https:\/\/tuncersen.com.tr\/blog\/wp-content\/uploads\/2025\/12\/wordfence.jpg 882w, https:\/\/tuncersen.com.tr\/blog\/wp-content\/uploads\/2025\/12\/wordfence-300x50.jpg 300w, https:\/\/tuncersen.com.tr\/blog\/wp-content\/uploads\/2025\/12\/wordfence-768x127.jpg 768w\" sizes=\"(max-width: 882px) 100vw, 882px\" \/><\/p>\n<h2 data-path-to-node=\"26\">4. G\u00fcvenlik Eklentileri ve D\u0131\u015f Kaynak Taramalar\u0131<\/h2>\n<p data-path-to-node=\"27\">Manuel \u00f6nlemlerden sonra, sistemi 7\/24 izleyen bir Web Uygulama G\u00fcvenlik Duvar\u0131 (WAF) kurmal\u0131s\u0131n\u0131z. Wordfence veya iThemes Security gibi eklentiler, \u015f\u00fcpheli IP adreslerini an\u0131nda bloklar.<\/p>\n<p data-path-to-node=\"28\">Sitenizin \u015fu anki g\u00fcvenlik durumunu merak ediyorsan\u0131z, harici bir tarama yapmakta fayda var. Bunun i\u00e7in global standart kabul edilen <a class=\"ng-star-inserted\" href=\"https:\/\/sitecheck.sucuri.net\/\" target=\"_blank\" rel=\"noopener nofollow\" data-hveid=\"0\" data-ved=\"0CAAQ_4QMahgKEwiE_-W6sueRAxUAAAAAHQAAAAAQ1QI\">Sucuri SiteCheck<\/a> arac\u0131n\u0131 kullanarak sitenizde malware veya vir\u00fcs olup olmad\u0131\u011f\u0131n\u0131 \u00fccretsiz tarayabilirsiniz.<\/p>\n<h2 data-path-to-node=\"29\">5. Yedekleme ve B\u00fct\u00fcnc\u00fcl Yakla\u015f\u0131m<\/h2>\n<p data-path-to-node=\"30\">Hi\u00e7bir g\u00fcvenlik \u00f6nlemi %100 garanti vermez. Bu y\u00fczden en b\u00fcy\u00fck g\u00fcvenceniz, sunucu d\u0131\u015f\u0131nda (Google Drive, AWS vb.) saklanan g\u00fcncel yedeklerinizdir.<\/p>\n<p data-path-to-node=\"31\">G\u00fcvenlik sadece web sitesi dosyalar\u0131yla s\u0131n\u0131rl\u0131 de\u011fildir. Kurumsal ileti\u015fiminizin devaml\u0131l\u0131\u011f\u0131 i\u00e7in e-posta sunucunuzun g\u00fcvenli\u011fi de bu zincirin bir par\u00e7as\u0131d\u0131r. E\u011fer mailleriniz spama d\u00fc\u015f\u00fcyorsa, bir \u00f6nceki yaz\u0131m olan <a class=\"ng-star-inserted\" href=\"https:\/\/tuncersen.com.tr\/blog\/kurumsal-eposta-blacklist-cozumu.html\" target=\"_blank\" rel=\"noopener\" data-hveid=\"0\" data-ved=\"0CAAQ_4QMahgKEwiE_-W6sueRAxUAAAAAHQAAAAAQ1gI\">Kurumsal E-posta Kara Liste \u00c7\u00f6z\u00fcmleri<\/a> makalesindeki SPF ve DKIM ayarlar\u0131n\u0131 mutlaka inceleyin.<\/p>\n<h3 data-path-to-node=\"32\">Sonu\u00e7<\/h3>\n<p data-path-to-node=\"33\">Kurumsal web sitelerini korumak, tek seferlik bir i\u015flem de\u011fil, s\u00fcrekli devam eden bir s\u00fcre\u00e7tir. Bu rehberdeki <b data-path-to-node=\"33\" data-index-in-node=\"110\">WordPress g\u00fcvenlik \u00f6nlemleri<\/b> ad\u0131mlar\u0131n\u0131 uygulayarak, sitenizi siber d\u00fcnyan\u0131n tehlikelerine kar\u015f\u0131 sa\u011flam bir kaleye d\u00f6n\u00fc\u015ft\u00fcrebilirsiniz. Unutmay\u0131n, g\u00fcvenlikte paranoya yoktur, tedbir vard\u0131r.<\/p>\n<p data-path-to-node=\"33\"><div class=\"epcl-shortcode epcl-box information\"><span class=\"epcl-icon\">\ud83d\udca1<\/span><div class=\"epcl-box-content\">Unutmay\u0131n; en g\u00fcvenli site, sald\u0131rgan i\u00e7in maliyeti getirisinden y\u00fcksek olan sitedir.<\/div><\/div>\n<p data-path-to-node=\"34\">Siz hangi g\u00fcvenlik eklentilerini kullan\u0131yorsunuz? Tecr\u00fcbelerinizi yorumlarda payla\u015fabilirsiniz.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>WordPress G\u00fcvenlik \u00d6nlemleri: Sald\u0131r\u0131lar Nas\u0131l Engellenir? Kurumsal bir web sitesini y\u00f6netiyorsan\u0131z, siber g\u00fcvenlik &#8220;olsa da olur&#8221; bir \u00f6zellik de\u011fil, hayati bir zorunluluktur. \u0130nternet d\u00fcnyas\u0131nda her&#8230;<\/p>\n","protected":false},"author":1,"featured_media":1063,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[113],"class_list":["post-1059","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik","tag-wordpress-guvenlik-onlemleri"],"menu_order":0,"_links":{"self":[{"href":"https:\/\/tuncersen.com.tr\/blog\/wp-json\/wp\/v2\/posts\/1059","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tuncersen.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tuncersen.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tuncersen.com.tr\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tuncersen.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=1059"}],"version-history":[{"count":0,"href":"https:\/\/tuncersen.com.tr\/blog\/wp-json\/wp\/v2\/posts\/1059\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tuncersen.com.tr\/blog\/wp-json\/wp\/v2\/media\/1063"}],"wp:attachment":[{"href":"https:\/\/tuncersen.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=1059"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tuncersen.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=1059"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tuncersen.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=1059"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}