https://digitalkirk.com/make-wordpress-blog-more-secure-without-additional-plugins/