{"id":14676,"date":"2026-01-31T09:49:44","date_gmt":"2026-01-31T06:49:44","guid":{"rendered":"https:\/\/www.inetmar.com\/blog\/?p=14676"},"modified":"2026-01-31T11:25:25","modified_gmt":"2026-01-31T08:25:25","slug":"wordpress-veritabani-guvenligi-icin-8-onemli-adim","status":"publish","type":"post","link":"https:\/\/www.inetmar.com\/blog\/wordpress-veritabani-guvenligi-icin-8-onemli-adim\/","title":{"rendered":"Wordpress Veritaban\u0131 G\u00fcvenli\u011fi \u0130\u00e7in 8 \u00d6nemli Ad\u0131m!"},"content":{"rendered":"<p>WordPress milyonlarca web sitesinin temelini olu\u015fturan g\u00fc\u00e7l\u00fc ve kullan\u0131c\u0131 dostu bir i\u00e7erik y\u00f6netim sistemi. Ki\u015fisel bloglardan e-ticaret platformlar\u0131na kadar her alanda tercih ediliyor. Ancak bu pop\u00fclerlik, onu siber sald\u0131rganlar\u0131n da bir numaral\u0131 hedefi haline getiriyor. \u00d6zellikle <strong>veritaban\u0131<\/strong>, kullan\u0131c\u0131 bilgileri, yaz\u0131lar, ayarlar ve hassas verileri bar\u0131nd\u0131rd\u0131\u011f\u0131 i\u00e7in en de\u011ferli ve en savunmas\u0131z nokta.<\/p>\n<p>Bir an i\u00e7in d\u00fc\u015f\u00fcn\u00fcn: Y\u00f6netici panelinize eri\u015fen bir sald\u0131rgan, ayn\u0131 anda veritaban\u0131n\u0131za da h\u00fckmedebilir. \u0130\u015fte bu y\u00fczden veritaban\u0131 g\u00fcvenli\u011fi, WordPress sitenizin hayatta kalmas\u0131 i\u00e7in kritik \u00f6neme sahip.<\/p>\n<p>Bu rehberde, WordPress veritaban\u0131n\u0131z\u0131 korumak i\u00e7in <strong>pratik, uygulanabilir ve \u00f6zg\u00fcn 8 ad\u0131m\u0131<\/strong> ad\u0131m ad\u0131m ele alaca\u011f\u0131z. Hadi ba\u015flayal\u0131m!<\/p>\n<h2>Veritaban\u0131 Eri\u015fimini K\u0131s\u0131tlay\u0131n<\/h2>\n<p>WordPress\u2019in varsay\u0131lan davran\u0131\u015f\u0131: <strong>Y\u00f6netici hesab\u0131 ile veritaban\u0131 kullan\u0131c\u0131s\u0131 ayn\u0131 kimlik bilgilerini payla\u015f\u0131r.<\/strong> Bu, bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n kap\u0131s\u0131n\u0131 ard\u0131na kadar a\u00e7ar.<\/p>\n<h3>Ne yapmal\u0131s\u0131n\u0131z?<\/h3>\n<ul>\n<li>cPanel, phpMyAdmin veya hosting paneliniz \u00fczerinden <strong>sadece veritaban\u0131 i\u00e7in \u00f6zel bir kullan\u0131c\u0131<\/strong> olu\u015fturun.<\/li>\n<li>Bu kullan\u0131c\u0131ya <strong>sadece gerekli izinleri<\/strong> verin: <code>SELECT<\/code>, <code>INSERT<\/code>, <code>UPDATE<\/code>, <code>DELETE<\/code>. <code>DROP<\/code>, <code>CREATE<\/code> gibi tehlikeli izinleri <strong>kald\u0131r\u0131n<\/strong>.<\/li>\n<li><code>wp-config.php<\/code> dosyas\u0131ndaki veritaban\u0131 ba\u011flant\u0131 bilgilerini bu yeni kullan\u0131c\u0131yla g\u00fcncelleyin.<\/li>\n<\/ul>\n<div class=\"tip\"><strong>\u0130pucu:<\/strong> Hosting firman\u0131z bu kullan\u0131c\u0131y\u0131 sizin i\u00e7in otomatik olu\u015fturabiliyorsa, mutlaka kullan\u0131n.<\/div>\n<h2>WordPress\u2019i Her Zaman G\u00fcncel Tutun<\/h2>\n<p>G\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n %90\u2019\u0131 eski s\u00fcr\u00fcmlerden kaynaklan\u0131r. WordPress ekibi, her yeni s\u00fcr\u00fcmde bilinen a\u00e7\u0131klar\u0131 kapat\u0131r.<\/p>\n<h3>Nas\u0131l g\u00fcncellersiniz?<\/h3>\n<ol>\n<li>Y\u00f6netici paneline girin \u2192 <strong>G\u00f6sterge Paneli &gt; G\u00fcncellemeler<\/strong><\/li>\n<li>WordPress, eklenti ve temalar i\u00e7in g\u00fcncellemeleri kontrol edin.<\/li>\n<li><strong>Otomatik g\u00fcncellemeleri etkinle\u015ftirin<\/strong> (\u00f6zellikle k\u00fc\u00e7\u00fck g\u00fcvenlik yamalar\u0131 i\u00e7in).<\/li>\n<\/ol>\n<div class=\"warning\"><strong>Dikkat:<\/strong> B\u00fcy\u00fck g\u00fcncellemelerden \u00f6nce <strong>tam yedek al\u0131n<\/strong>.<\/div>\n<h2>Veritaban\u0131 Tablo \u00d6nekini De\u011fi\u015ftirin<\/h2>\n<p>Varsay\u0131lan \u00f6nek: <code>wp_<\/code><\/p>\n<p>Hackerlar bunu bilir. SQL injection sald\u0131r\u0131lar\u0131nda ilk tahminleri <code>wp_users<\/code>, <code>wp_posts<\/code> olur.<\/p>\n<h3>\u00d6n ekinizi nas\u0131l de\u011fi\u015ftirirsiniz?<\/h3>\n<ol>\n<li><strong>Kurulum a\u015famas\u0131nda:<\/strong> Kurulum sihirbaz\u0131nda \u00f6nek se\u00e7in (\u00f6rnek: <code>xyz42_<\/code>)<\/li>\n<li><strong>Mevcut sitede:<\/strong>\n<ul>\n<li><code>wp-config.php<\/code> dosyas\u0131ndaki \u015fu sat\u0131r\u0131 d\u00fczenleyin:\n<pre><code>$table_prefix = 'xyz42_';<\/code><\/pre>\n<\/li>\n<li>phpMyAdmin ile t\u00fcm tablolar\u0131n ad\u0131n\u0131 yeni \u00f6neke g\u00f6re yeniden adland\u0131r\u0131n.<\/li>\n<li><code>wp_options<\/code> tablosunda <code>wp_user_roles<\/code> gibi \u00f6nek i\u00e7eren alanlar\u0131 g\u00fcncelleyin.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<div class=\"warning\"><strong>Uyar\u0131:<\/strong> Bu i\u015flem risklidir. Mutlaka yedek al\u0131n.<\/div>\n<h2>G\u00fcvenlik Eklentileriyle Savunman\u0131z\u0131 G\u00fc\u00e7lendirin<\/h2>\n<p>Tek ba\u015f\u0131na yeterli de\u011filler ama <strong>\u00e7ok katmanl\u0131 g\u00fcvenlik<\/strong> i\u00e7in \u015fart.<\/p>\n<h3>\u00d6nerilen eklentiler:<\/h3>\n<table>\n<tbody>\n<tr>\n<th>Eklenti<\/th>\n<th>\u00d6zellikleri<\/th>\n<\/tr>\n<tr>\n<td><strong>Wordfence<\/strong><\/td>\n<td>Ger\u00e7ek zamanl\u0131 firewall, k\u00f6t\u00fc IP engelleme, dosya de\u011fi\u015fim takibi<\/td>\n<\/tr>\n<tr>\n<td><strong>iThemes Security<\/strong><\/td>\n<td>2FA, login URL de\u011fi\u015ftirme, veritaban\u0131 yedekleme<\/td>\n<\/tr>\n<tr>\n<td><strong>Sucuri Security<\/strong><\/td>\n<td>Bulut tabanl\u0131 WAF, malware tarama, g\u00fcvenlik bildirimleri<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<div class=\"tip\"><strong>Pro \u0130pucu:<\/strong> Eklentileri a\u015f\u0131r\u0131 y\u00fcklemeyin. 1-2 g\u00fc\u00e7l\u00fc eklenti yeterlidir.<\/div>\n<h2>G\u00fcvenilir Hosting Se\u00e7in<\/h2>\n<p>Hosting firman\u0131z, sitenizin ilk savunma hatt\u0131d\u0131r.<\/p>\n<h3>Nelere dikkat etmeli?<\/h3>\n<ul>\n<li><a href=\"https:\/\/www.inetmar.com\/sunucu\/vds-sunucu\/\" target=\"_blank\" rel=\"noopener\"><strong>NvME Disk sunucular<\/strong><\/a> ve <strong>y\u00fcksek uptime<\/strong><\/li>\n<li><strong>Otomatik yedekleme<\/strong> ve <strong>1 t\u0131kla geri y\u00fckleme<\/strong><\/li>\n<li><strong>DDoS korumas\u0131<\/strong>, <strong>WAF (Web Application Firewall)<\/strong><\/li>\n<li><strong>PHP 8.1+ deste\u011fi<\/strong>, <strong>SFTP eri\u015fimi<\/strong><\/li>\n<\/ul>\n<div class=\"warning\"><strong>K\u00f6t\u00fc hosting = yava\u015f site + y\u00fcksek risk<\/strong><\/div>\n<h2>WordPress S\u00fcr\u00fcm Bilgisini Gizleyin<\/h2>\n<p>Hackerlar, meta etiketlerden veya RSS feed\u2019lerden s\u00fcr\u00fcm numaran\u0131z\u0131 okuyabilir.<\/p>\n<h3>Gizleme y\u00f6ntemleri:<\/h3>\n<ol>\n<li><code>functions.php<\/code> dosyas\u0131na ekleyin:\n<pre><code>remove_action('wp_head', 'wp_generator');<\/code><\/pre>\n<\/li>\n<li>RSS feed\u2019den s\u00fcr\u00fcm kald\u0131rmak i\u00e7in:\n<pre><code>add_filter('the_generator', '__return_false');<\/code><\/pre>\n<\/li>\n<\/ol>\n<h2>G\u00fc\u00e7l\u00fc ve Benzersiz \u015eifreler Kullan\u0131n<\/h2>\n<p>&#8220;123456&#8221; veya &#8220;admin123&#8221; kullananlar hala var. Brute force ara\u00e7lar\u0131 saniyede binlerce deneme yapabiliyor.<\/p>\n<h3>\u015eifre kurallar\u0131:<\/h3>\n<ul>\n<li>En az <strong>12 karakter<\/strong><\/li>\n<li>B\u00fcy\u00fck\/k\u00fc\u00e7\u00fck harf, rakam, \u00f6zel karakter<\/li>\n<li>Her sitede <strong>farkl\u0131 \u015fifre<\/strong><\/li>\n<\/ul>\n<h3>\u00c7\u00f6z\u00fcm: <strong>Password Manager<\/strong><\/h3>\n<ul>\n<li><a href=\"https:\/\/bitwarden.com\" target=\"_blank\" rel=\"nofollow noopener\">Bitwarden<\/a><\/li>\n<li><a href=\"https:\/\/www.avast.com\/tr-tr\/random-password-generator\" target=\"_blank\" rel=\"nofollow noopener\">Avast\u00a0<\/a><\/li>\n<\/ul>\n<div class=\"bonus\"><strong>Bonus:<\/strong> 2 Fakt\u00f6rl\u00fc Kimlik Do\u011frulama (2FA) mutlaka aktif edin.<\/div>\n<h2>D\u00fczenli Yedekleme ve \u0130zleme<\/h2>\n<p>En iyi g\u00fcvenlik bile %100 koruma sa\u011flamaz. <strong>Yedekleme = son \u00e7are.<\/strong><\/p>\n<h3>\u00d6neriler:<\/h3>\n<ul>\n<li><strong>UpdraftPlus<\/strong> ile haftal\u0131k otomatik yedek<\/li>\n<li>Yede\u011fi <strong>farkl\u0131 bir sunucuda<\/strong> (Google Drive, Dropbox) saklay\u0131n<\/li>\n<li><code>wp-admin<\/code> ve <code>wp-login.php<\/code> giri\u015f denemelerini izleyin<\/li>\n<\/ul>\n<p>WordPress veritaban\u0131n\u0131z\u0131 korumak, tek bir eklenti y\u00fcklemekle bitmez. <strong>S\u00fcrekli dikkat, g\u00fcncelleme ve proaktif yakla\u015f\u0131m<\/strong> gerektirir.<\/p>\n<p>Bu 8 ad\u0131m\u0131 uygulad\u0131\u011f\u0131n\u0131zda:<\/p>\n<ul>\n<li>SQL injection riski azal\u0131r<\/li>\n<li>Brute force sald\u0131r\u0131lar\u0131 etkisiz hale gelir<\/li>\n<li>Veri kayb\u0131 ihtimali minimuma iner<\/li>\n<\/ul>\n<p><strong>Unutmay\u0131n:<\/strong> G\u00fcvenlik, zincirin en zay\u0131f halkas\u0131 kadar g\u00fc\u00e7l\u00fcd\u00fcr. Siz g\u00fc\u00e7l\u00fc olun, siteleriniz de g\u00fc\u00e7l\u00fc kals\u0131n.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>WordPress milyonlarca web sitesinin temelini olu\u015fturan g\u00fc\u00e7l\u00fc ve kullan\u0131c\u0131 dostu bir i\u00e7erik y\u00f6netim sistemi. Ki\u015fisel bloglardan e-ticaret platformlar\u0131na kadar her alanda tercih ediliyor. Ancak bu pop\u00fclerlik, onu siber sald\u0131rganlar\u0131n da bir numaral\u0131 hedefi haline getiriyor. \u00d6zellikle veritaban\u0131, kullan\u0131c\u0131 bilgileri, yaz\u0131lar, ayarlar ve hassas verileri bar\u0131nd\u0131rd\u0131\u011f\u0131 i\u00e7in en de\u011ferli ve en savunmas\u0131z nokta. Bir an i\u00e7in &hellip;<\/p>\n","protected":false},"author":2,"featured_media":14771,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[],"class_list":["post-14676","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wordpress"],"_links":{"self":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/14676","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/comments?post=14676"}],"version-history":[{"count":7,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/14676\/revisions"}],"predecessor-version":[{"id":14772,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/14676\/revisions\/14772"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/media\/14771"}],"wp:attachment":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/media?parent=14676"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/categories?post=14676"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/tags?post=14676"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}