{"id":115983,"date":"2025-06-24T04:33:00","date_gmt":"2025-06-23T21:33:00","guid":{"rendered":"https:\/\/tino.vn\/blog\/?p=115983"},"modified":"2026-01-02T18:57:43","modified_gmt":"2026-01-02T11:57:43","slug":"cai-dat-va-su-dung-itheme-security","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/cai-dat-va-su-dung-itheme-security\/","title":{"rendered":"[H\u01b0\u1edbng d\u1eabn 2026] C\u00e0i \u0111\u1eb7t v\u00e0 s\u1eed d\u1ee5ng iTheme Security b\u1ea3o m\u1eadt WordPress"},"content":{"rendered":"\n

M\u1ed9t trong nh\u1eefng plugin b\u1ea3o m\u1eadt ph\u1ed5 bi\u1ebfn v\u00e0 hi\u1ec7u qu\u1ea3 nh\u1ea5t tr\u00ean WordPress<\/a> hi\u1ec7n nay ch\u00ednh l\u00e0 iTheme Security. V\u1eady l\u00e0m th\u1ebf n\u00e0o \u0111\u1ec3 c\u00e0i \u0111\u1eb7t v\u00e0 s\u1eed d\u1ee5ng iTheme Security m\u1ed9t c\u00e1ch t\u1ed1i \u01b0u? Trong b\u00e0i vi\u1ebft n\u00e0y, Tino s\u1ebd h\u01b0\u1edbng d\u1eabn b\u1ea1n t\u1eebng b\u01b0\u1edbc chi ti\u1ebft \u0111\u1ec3 gi\u00fap website c\u1ee7a b\u1ea1n \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 t\u1ed1t nh\u1ea5t tr\u01b0\u1edbc c\u00e1c m\u1ed1i \u0111e d\u1ecda t\u1eeb hacker v\u00e0 ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i.<\/strong><\/p>\n\n\n\n

<\/a>\u0110\u00f4i n\u00e9t v\u1ec1 plugin iTheme Security<\/h2>\n\n\n\n

<\/a>iTheme Security l\u00e0 g\u00ec?<\/strong><\/h3>\n\n\n\n

iTheme Security (hi\u1ec7n t\u1ea1i l\u00e0 Solid Security<\/a><\/strong>) l\u00e0 m\u1ed9t plugin b\u1ea3o m\u1eadt m\u1ea1nh m\u1ebd d\u00e0nh cho WordPress, gi\u00fap b\u1ea3o v\u1ec7 website kh\u1ecfi c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng, tin t\u1eb7c v\u00e0 ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i. Plugin n\u00e0y cung c\u1ea5p h\u01a1n 30 t\u00ednh n\u0103ng b\u1ea3o m\u1eadt \u0111\u1ec3 t\u0103ng c\u01b0\u1eddng an to\u00e0n cho trang web, bao g\u1ed3m ch\u1eb7n \u0111\u0103ng nh\u1eadp sai nhi\u1ec1u l\u1ea7n, x\u00e1c th\u1ef1c hai y\u1ebfu t\u1ed1 (2FA), qu\u00e9t m\u00e3 \u0111\u1ed9c, b\u1ea3o v\u1ec7 t\u1ec7p tin quan tr\u1ecdng v\u00e0 nhi\u1ec1u t\u00ednh n\u0103ng h\u1eefu \u00edch kh\u00e1c.<\/p>\n\n\n

\n
\"iTheme
iTheme Security l\u00e0 g\u00ec?<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

V\u1edbi giao di\u1ec7n th\u00e2n thi\u1ec7n v\u00e0 kh\u1ea3 n\u0103ng t\u1ef1 \u0111\u1ed9ng h\u00f3a cao, iTheme Security ph\u00f9 h\u1ee3p cho c\u1ea3 ng\u01b0\u1eddi m\u1edbi b\u1eaft \u0111\u1ea7u l\u1eabn chuy\u00ean gia qu\u1ea3n tr\u1ecb web. Plugin n\u00e0y gi\u00fap b\u1ea1n nhanh ch\u00f3ng x\u00e1c \u0111\u1ecbnh v\u00e0 kh\u1eafc ph\u1ee5c c\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt, ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ph\u1ed5 bi\u1ebfn nh\u01b0 Brute Force Attack, SQL Injection, XSS (Cross-Site Scripting) v\u00e0 nhi\u1ec1u h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng kh\u00e1c.<\/p>\n\n\n\n

<\/a>C\u00e1c t\u00ednh n\u0103ng n\u1ed5i b\u1eadt c\u1ee7a iTheme Security<\/strong><\/h3>\n\n\n\n

<\/a>Ch\u1eb7n \u0111\u0103ng nh\u1eadp sai nhi\u1ec1u l\u1ea7n<\/h4>\n\n\n\n

M\u1ed9t trong nh\u1eefng ph\u01b0\u01a1ng ph\u00e1p ph\u1ed5 bi\u1ebfn m\u00e0 hacker s\u1eed d\u1ee5ng \u0111\u1ec3 x\u00e2m nh\u1eadp v\u00e0o website l\u00e0 Brute Force Attack (t\u1ea5n c\u00f4ng d\u00f2 m\u1eadt kh\u1ea9u). iTheme Security gi\u00fap ng\u0103n ch\u1eb7n \u0111i\u1ec1u n\u00e0y b\u1eb1ng c\u00e1ch gi\u1edbi h\u1ea1n s\u1ed1 l\u1ea7n nh\u1eadp sai m\u1eadt kh\u1ea9u. N\u1ebfu m\u1ed9t \u0111\u1ecba ch\u1ec9 IP c\u1ed1 g\u1eafng \u0111\u0103ng nh\u1eadp qu\u00e1 s\u1ed1 l\u1ea7n quy \u0111\u1ecbnh, h\u1ec7 th\u1ed1ng s\u1ebd t\u1ef1 \u0111\u1ed9ng kh\u00f3a IP \u0111\u00f3 trong m\u1ed9t kho\u1ea3ng th\u1eddi gian ho\u1eb7c v\u0129nh vi\u1ec5n.<\/p>\n\n\n\n

<\/a>X\u00e1c th\u1ef1c hai y\u1ebfu t\u1ed1 (2FA)<\/h4>\n\n\n\n

X\u00e1c th\u1ef1c hai y\u1ebfu t\u1ed1 (2FA) l\u00e0 m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt b\u1ed5 sung, y\u00eau c\u1ea7u ng\u01b0\u1eddi d\u00f9ng nh\u1eadp m\u00e3 x\u00e1c th\u1ef1c t\u1eeb \u1ee9ng d\u1ee5ng Google Authenticator, Authy ho\u1eb7c qua email khi \u0111\u0103ng nh\u1eadp. Ngay c\u1ea3 khi m\u1eadt kh\u1ea9u b\u1ecb \u0111\u00e1nh c\u1eafp, hacker v\u1eabn kh\u00f4ng th\u1ec3 truy c\u1eadp v\u00e0o t\u00e0i kho\u1ea3n m\u00e0 kh\u00f4ng c\u00f3 m\u00e3 x\u00e1c th\u1ef1c n\u00e0y.<\/p>\n\n\n\n

<\/a>\u1ea8n trang \u0111\u0103ng nh\u1eadp WordPress<\/h4>\n\n\n\n

M\u1eb7c \u0111\u1ecbnh, trang \u0111\u0103ng nh\u1eadp c\u1ee7a WordPress c\u00f3 \u0111\u01b0\u1eddng d\u1eabn wp-login.php ho\u1eb7c wp-admin, khi\u1ebfn hacker d\u1ec5 d\u00e0ng t\u00ecm th\u1ea5y v\u00e0 t\u1ea5n c\u00f4ng. iTheme Security cho ph\u00e9p b\u1ea1n thay \u0111\u1ed5i URL trang \u0111\u0103ng nh\u1eadp \u0111\u1ec3 tr\u00e1nh b\u1ecb bot v\u00e0 hacker qu\u00e9t t\u00ecm, gi\u00fap gi\u1ea3m thi\u1ec3u r\u1ee7i ro b\u1ecb t\u1ea5n c\u00f4ng.<\/p>\n\n\n

\n
\"C\u00e1c
C\u00e1c t\u00ednh n\u0103ng n\u1ed5i b\u1eadt c\u1ee7a iTheme Security<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

<\/a>B\u1ea3o v\u1ec7 t\u1ec7p tin quan tr\u1ecdng<\/h4>\n\n\n\n

C\u00e1c t\u1ec7p tin quan tr\u1ecdng c\u1ee7a WordPress nh\u01b0 wp-config.php, .htaccess ch\u1ee9a nhi\u1ec1u th\u00f4ng tin nh\u1ea1y c\u1ea3m v\u1ec1 website. iTheme Security gi\u00fap b\u1ea1n ch\u1eb7n truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0o nh\u1eefng t\u1ec7p tin n\u00e0y, \u0111\u1ea3m b\u1ea3o hacker kh\u00f4ng th\u1ec3 ch\u1ec9nh s\u1eeda ho\u1eb7c khai th\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt.<\/p>\n\n\n\n

<\/a>T\u00edch h\u1ee3p qu\u00e9t m\u00e3 \u0111\u1ed9c<\/h4>\n\n\n\n

iTheme Security cung c\u1ea5p t\u00ednh n\u0103ng qu\u00e9t m\u00e3 \u0111\u1ed9c (Malware Scan) gi\u00fap ki\u1ec3m tra c\u00e1c t\u1ec7p tin tr\u00ean website \u0111\u1ec3 ph\u00e1t hi\u1ec7n d\u1ea5u hi\u1ec7u c\u1ee7a m\u00e3 \u0111\u1ed9c, ph\u1ea7n m\u1ec1m gi\u00e1n \u0111i\u1ec7p ho\u1eb7c c\u00e1c \u0111o\u1ea1n m\u00e3 b\u1ecb ch\u00e8n b\u1ea5t h\u1ee3p ph\u00e1p. Khi ph\u00e1t hi\u1ec7n b\u1ea5t th\u01b0\u1eddng, plugin s\u1ebd c\u1ea3nh b\u00e1o ngay l\u1eadp t\u1ee9c, gi\u00fap b\u1ea1n x\u1eed l\u00fd k\u1ecbp th\u1eddi tr\u01b0\u1edbc khi website b\u1ecb \u1ea3nh h\u01b0\u1edfng.<\/p>\n\n\n\n

<\/a>H\u01b0\u1edbng d\u1eabn c\u00e0i \u0111\u1eb7t v\u00e0 s\u1eed d\u1ee5ng iTheme Security <\/h2>\n\n\n\n

<\/a>C\u00e0i \u0111\u1eb7t iThemes Security<\/strong><\/h3>\n\n\n\n

B\u01b0\u1edbc 1:<\/strong> \u0110\u0103ng nh\u1eadp v\u00e0o trang qu\u1ea3n tr\u1ecb WordPress c\u1ee7a b\u1ea1n.<\/p>\n\n\n\n

B\u01b0\u1edbc 2:<\/strong> Ch\u1ecdn Plugins <\/strong>-> Add New Plugin<\/strong><\/p>\n\n\n\n

Trong \u00f4 t\u00ecm ki\u1ebfm, nh\u1eadp “iThemes Security<\/strong>” ho\u1eb7c \u201cSolid Security<\/strong>\u201d v\u00e0 nh\u1ea5n Enter<\/strong>.<\/p>\n\n\n\n

B\u01b0\u1edbc 3: <\/strong>T\u00ecm plugin “iThemes Security (by iThemes)<\/strong>” trong k\u1ebft qu\u1ea3 t\u00ecm ki\u1ebfm v\u00e0 nh\u1ea5p v\u00e0o n\u00fat Install Now<\/strong>.<\/p>\n\n\n

\n
\"C\u00e0i<\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

Sau khi c\u00e0i \u0111\u1eb7t ho\u00e0n t\u1ea5t, nh\u1ea5p v\u00e0o n\u00fat Active <\/strong>\u0111\u1ec3 k\u00edch ho\u1ea1t plugin.<\/p>\n\n\n\n

<\/a>C\u1ea5u h\u00ecnh ban \u0111\u1ea7u<\/strong><\/h3>\n\n\n\n

B\u01b0\u1edbc 1: <\/strong>Sau khi k\u00edch ho\u1ea1t, b\u1ea1n s\u1ebd th\u1ea5y m\u1ee5c Security <\/strong>\u1edf menu b\u00ean tr\u00e1i giao di\u1ec7n qu\u1ea3n tr\u1ecb WordPress. Nh\u1ea5p v\u00e0o \u0111\u00f3 \u0111\u1ec3 b\u1eaft \u0111\u1ea7u qu\u00e1 tr\u00ecnh thi\u1ebft l\u1eadp.<\/p>\n\n\n

\n
\"C\u1ea5u
C\u1ea5u h\u00ecnh ban \u0111\u1ea7u<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

B\u01b0\u1edbc 2: <\/strong>Ch\u1ecdn lo\u1ea1i h\u00ecnh website c\u1ee7a b\u1ea1n. Sau \u0111\u00f3, th\u1ef1c hi\u1ec7n theo h\u01b0\u1edbng d\u1eabn \u0111\u1ec3 chuy\u1ec3n \u0111\u1ebfn ph\u1ea7n c\u00e0i \u0111\u1eb7t chung.<\/p>\n\n\n

\n
\"C\u1ea5u
C\u1ea5u h\u00ecnh ban \u0111\u1ea7u<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

D\u01b0\u1edbi \u0111\u00e2y l\u00e0 trang Dashboard c\u1ee7a Solid Security:<\/p>\n\n\n

\n
\"C\u1ea5u
C\u1ea5u h\u00ecnh ban \u0111\u1ea7u<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

<\/a>C\u1ea5u h\u00ecnh chi ti\u1ebft c\u00e1c t\u00ednh n\u0103ng<\/strong><\/h3>\n\n\n\n

<\/a>Site Scans (Qu\u00e9t trang web)<\/h4>\n\n\n\n

T\u00ednh n\u0103ng n\u00e0y gi\u00fap qu\u00e9t to\u00e0n b\u1ed9 trang web \u0111\u1ec3 ph\u00e1t hi\u1ec7n m\u00e3 \u0111\u1ed9c, t\u1ec7p tin b\u1ecb nhi\u1ec5m ho\u1eb7c c\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt.<\/p>\n\n\n

\n
\"Site
Site Scans (Qu\u00e9t trang web)<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

<\/a>Firewall (T\u01b0\u1eddng l\u1eeda)<\/h4>\n\n\n\n

T\u01b0\u1eddng l\u1eeda gi\u00fap ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng t\u1eeb b\u00ean ngo\u00e0i, b\u1ea3o v\u1ec7 trang web kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda nh\u01b0 SQL Injection, XSS v\u00e0 c\u00e1c h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng kh\u00e1c.<\/p>\n\n\n

\n
\"Firewall
Firewall (T\u01b0\u1eddng l\u1eeda)<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

<\/a>Vulnerable Software (Ph\u1ea7n m\u1ec1m d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng)<\/h4>\n\n\n\n

T\u00ednh n\u0103ng n\u00e0y gi\u00fap ki\u1ec3m tra v\u00e0 c\u1ea3nh b\u00e1o v\u1ec1 c\u00e1c plugin, theme ho\u1eb7c phi\u00ean b\u1ea3n WordPress c\u00f3 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt.<\/p>\n\n\n

\n
\"Vulnerable
Vulnerable Software (Ph\u1ea7n m\u1ec1m d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng)<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n\n

<\/a>User Security (B\u1ea3o m\u1eadt ng\u01b0\u1eddi d\u00f9ng)<\/h4>\n\n\n\n

\u0110\u1ea3m b\u1ea3o t\u00e0i kho\u1ea3n ng\u01b0\u1eddi d\u00f9ng \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7, ng\u0103n ch\u1eb7n truy c\u1eadp tr\u00e1i ph\u00e9p. \u0110\u1ec3 c\u1ea5u h\u00ecnh:<\/p>\n\n\n\n