Wordpress Backup Plugins

May 14, 2009

In the last few days the Gumblar malware injection attack has been making the rounds and hopefully you’ve taken preventitive measures to ensure that you are as safe as you can be from this annoying injection attack.

Just so you’re aware the reason for this attack is Blackhat SEO spammers are attempting to insert a hidden link on your site for the purposes of link building. The problem is it’s not only illegal, it’s incredibly lame.

Here’s another scenario, let’s assume for a second that your site did in fact get hijacked. Likely what you will be left with is an annoying script in a tond of your Wordpress site pages. Not just in your theme but in anything beneath wp-content that they could inject.

This might include:

  1. Your theme files.
  2. Your plug-ins (a very good case for limiting and auditing new plugins you add).
  3. Your wp-admin files (this is extremely annoying as well).

Your only solution at that point is to reinstall WP (thus over writing the compromised files), re uploading your theme (backup!) and reinstalling all of your plugins. That would then get every file restored.

Now that’s a time consuming and lengthy pain in the ass process to be honest. So let’s be a bit proactive and add some functionality to your Wordpress site that will automate some of these things for you.

Here’s a list of trusted management, backup and resoration plugins I use on all my sites:

  1. WP-DBManager – this is a great plugin by the prolific Lester Chan (one of my favorite plugin authors). It will let you do database work and backups directly from your Wordpress Admin. Very handy.
  2. Wordpress Backup – this is also a highly recommended plug in that will backup more than just your post data. Run it regularly and better yet, automate it. My rule of thumb is that if it can be forgotten it will be forgotten. I’m the worst case of that.
  3. WP-DBBackup – this will help you automate that process and keep a nice fresh copy of your database on hand for that disasterous moment.
  4. eFiles Backup – this is a good one for a smaller site. In general any injection attack won’t hurt your database, just the content files. This little guy puts your files on eFiles.com – I haven’t tested it but I might actually give it a whirl.
  5. Wordpress Automatic Online Backup – this is another promising service which I have not tried out but am thinking of giving a whirl. Like I said automation is key.

In general people do not like to think about things like backups. It’s not a very sexy subject to say the least. But from my experience there is nothing worse than having to weed through a mass of files, downtime, and just the frustration of repairing things.

These backups can make a bad experience like getting injected relatively painless. It’s a bit of a “set it and forget it” scenario.

If this is your first visit here you might want to have a look at my other Wordpress Security and SEO Posts

All the best,

Dan

In

Related Posts
  • Internet Marketing Tweet Digest 2009-10-24 @anilopez It's not a useful metric for a number of reasons - Google created the marketing PR obsession. in reply to anilopez # I really want to setup my Mac as a media server for my PS3 # @thedirtyturtle Thanks I'll give it a try. I tried an open......
  • Building Great Links Link Building is always a topic of conversation for anyone in the world of Internet Marketing. People who push only organic SEO tend to be quite focused on the overall process of building masses of links with target anchor text on sites which may pass link juice. Personally that's a......
Related Websites
  • WordPress publishes native Android application We just learned that Automattic has released a native WordPress client for Android. Like Android, the app is an open source project and anyone can add contributions. The app looks quite similar to the unofficial wpToGo and we think that...
  • Online Stores Online stores adds related online stores to the bottom of your blog posts. Improving the user experience by offering them additional related content. It uses your blog as the seed to find the related online stores. There are setting to...

Comments

9 Responses to “Wordpress Backup Plugins”

  1. Vote -1 Vote +1Felix on September 9th, 2009 1:55 am

    I like the plug-ins and think they are really useful. But in my case I usually use the back-up tools from the CPanel of my site to do the data back-up. Aside from that, I always make sure that my WP site is updated every time Wordpress announces it. I also make sure that my local PC is free from any spyware or virus to prevent future infections like the gumblar. Luckily, I was not hit by this but some of my friend’s site were really hit badly by this.

  2. Vote -1 Vote +1Dan Nedelko on September 9th, 2009 3:55 am

    I agree, a manual data backup (or even automating it using a Cron job) from CPanel is a good way to go. The real intention of the post is for those who want a wordpress integrated solution. Good points overall.

  3. +1 Vote -1 Vote +1blackhatguide on October 12th, 2009 11:07 am

    Awesome blog mate! regards from BlackhatGuide let me know if you want to partner up with my blog as well! =]

  4. +1 Vote -1 Vote +1Justin W on October 27th, 2009 6:57 pm

    Hey Dan, that WP-DBBackup is certainly easy and handy too. Been using it for a while ^_^

  5. Vote -1 Vote +1Dan Nedelko on October 27th, 2009 7:02 pm

    Hey Justin,

    Yeah it’s a fantastic plugin – it’s saved me a few times :)

  6. Vote -1 Vote +1clavier arabe on November 4th, 2009 12:14 pm

    Awesome blog mate! regards from BlackhatGuide let me know if you want to partner up with my blog as well! =]

    thanks

  7. Vote -1 Vote +1FTLwpress on January 8th, 2010 1:33 am

    installing these ‘back up’ plug in will just eat up space lol why bother? I mean, if you’re on a hosted site they got this back up button ready for backing up in just a click :D

  8. Vote -1 Vote +1Dan Nedelko on January 8th, 2010 2:00 am

    Well for a couple of reasons:

    1. The ability to backup directly from the admin panel (good for clients and one step backups).
    2. The backup utility provided by hosting companies is not generally automated and scheduled.
    3. Backup utilities provided by shared hosts (if that’s what you are referring to) generally do not backup your database and webroot at the same time. If you use Wordpress (or any CMS) you are missing half the equation.
    4. These plugins backup everything you need for Wordpress, wp-content and it’s children and the database.

    So yeah. Also keep in mind that these tools are intended for either clients or people who want to be assured their sites are backed up easily and automatically.

    Nuff said (I think).

  9. Vote -1 Vote +1turisuna on January 11th, 2010 10:32 am

    Thank you for this useful information, I usually backup my site manually cause I’m not good in technical things, this plugins information help me so much, I will try it. Thanks for the sharing.

Join in on the Discussion! Comment Now: