If your website was hacked tomorrow, would you know what to do?
Most WordPress sites are not compromised through advanced attacks. They are compromised through outdated plugins, weak passwords, nulled themes, and backups that were never tested.
The good news is that a few consistent habits prevent the majority of these problems.
At WordCamp Islamabad 2026 Contributor Day, this workshop walks you through a practical security routine for WordPress. You will apply each step on a practice site or your own as it is explained.
You do not need a security background. The focus is on settings and habits you can put in place the same day.
What You’ll Learn
- How Sites Get Hacked: The most common entry points, with real examples of what goes wrong.
- Safe Updates: Keeping WordPress core, themes, and plugins current without breaking your site, and why nulled software is a risk.
- Login Protection: Strong passwords, two-factor authentication, and limiting login attempts.
- Users and Permissions: Giving each person only the access they need.
- Backups That Work: Setting up regular backups and testing that you can actually restore them.
- When Things Go Wrong: What security plugins and firewalls can and cannot do, plus a first-response checklist for a hacked site.
Meet Your Facilitator
Shakir Ali
Senior Systems Engineer, Fueled
Shakir has more than 15 years of experience in web hosting and cloud infrastructure and works as a Senior Systems Engineer at Fueled (formerly 10up). An AWS Certified Solutions Architect (Professional), he has deep experience in systems administration, cloud infrastructure, and DevOps, and enjoys working through complex technical problems. He is the founder of Zeeta Cloud, a WebOps and cloud management startup, and led the organizing team of WordCamp Islamabad 2019.
Who Should Attend?
Whether you own a website, manage client sites as a freelancer, or develop for WordPress and want a reliable security routine, this workshop is for you.
Bring a charged laptop and a smartphone with an authenticator app installed. Admin access to a site you manage is optional; a practice site will be available. If you plan to work on a live site, take a full backup beforehand.
Session Details
Event: WordCamp Islamabad 2026, Contributor Day
Date: Saturday, 24 October 2026
Venue: e-Earn Innovation Hub, Rawalpindi
Session: Hands-on Workshop
Join us to make your WordPress site harder to break into and easier to recover.
Leave a Reply