Thursday, March 17, 2011

Change the Table Prefix in Wordpress

This way is not too important to be done, But this way an attacker could cause confusion. Look at the picture below :


Table prefix seems there are two, but only one original. When the attacker wants to find the Wordpress user table. He will be puzzled to find a real user table.

By the way we change the table prefix on Wordpress, we disable that using the technique of jumping assault. Jumping technique is carried out the attack by jumping from one site that had been planted shell (Back Door) to other sites on one server.

A jumper to go to another site in one server must first go to the victim site MySQL using shell (Back Door). Then find a table a user to modify the victim site administrator password to get into the admin panel of Wordpress site using the password on the wanted.

By the way we make a lot of table prefix on Wordpress, it is likely the attacker will be a loss to find a real user table. The following table prefix on how to change Wordpress ;


  • Export database in PHPMyAdmin Wordpress
  • Edited using Notepad ++
  • Search for "wp_" and change your own
  • Import a database that has been edited to PHPMyAdmin

  • Open wp-config.php and look for "$table_prefix = 'wp_';
  • Replace "wp_" according to with the database that you fox.
  • Save and finish.