{"id":2987,"date":"2015-03-20T15:45:33","date_gmt":"2015-03-20T14:45:33","guid":{"rendered":"https:\/\/www.olivares.fr\/consultant\/?p=2987"},"modified":"2023-07-24T20:55:17","modified_gmt":"2023-07-24T18:55:17","slug":"audit-de-securite-wordpress","status":"publish","type":"post","link":"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/","title":{"rendered":"Audit de s\u00e9curit\u00e9 de sites WordPress pour Orange.com"},"content":{"rendered":"<h3>Contexte<\/h3>\n<p>La section <a href=\"http:\/\/Orange.com\">Orange.com<\/a> du groupe Orange h\u00e9berge\u00a0plusieurs sites publics aux sujets tr\u00e8s vari\u00e9s.\u00a0Sachant qu&rsquo;une partie de ces sites sont sous le <abbr class=\"abbr\" title=\"Content Management System\">CMS<\/abbr> <strong>WordPress<\/strong> et que leur gestion a \u00e9t\u00e9 confi\u00e9e \u00e0 divers prestataires, alors la direction m&rsquo;a demand\u00e9 de r\u00e9aliser un <strong>audit de s\u00e9curit\u00e9<\/strong> sur quatre\u00a0d&rsquo;entre eux :<\/p>\n<ul>\n<li>le blog Fondation (hors-ligne \u00e0 ce jour),<\/li>\n<li><a href=\"https:\/\/web.archive.org\/web\/20170929055649\/https:\/\/pop.orange.com\/fr\/\">Live Orange<\/a> (d\u00e9sormais Pop),<\/li>\n<li>le Blog Ouest (hors-ligne),<\/li>\n<li>le <a href=\"https:\/\/recherche.orange.com\/\" class=\"broken_link\">Blog de la recherche<\/a>.<\/li>\n<\/ul>\n<h3>R\u00f4les<\/h3>\n<p>Pour cet audit de s\u00e9curit\u00e9, mon r\u00f4le fut simple : mettre mon <strong>expertise WordPress<\/strong>\u00a0au service de la s\u00e9curit\u00e9 des contributeurs et gestionnaires de site.<\/p>\n<p>Ainsi, j&rsquo;ai analys\u00e9 la s\u00e9curit\u00e9 et l&rsquo;<strong>optimisation des sites<\/strong> afin de fournir un \u00e9tat des lieux clair et des solutions pertinentes.<\/p>\n<p><strong>R\u00e9sultats<\/strong><\/p>\n<p>Alors, le soucis avec un site Internet c&rsquo;est que bien souvent <strong>une fois mis en place il n&rsquo;y a plus de suivi<\/strong>. C&rsquo;est d&rsquo;autant plus emb\u00eatant quand le site a \u00e9t\u00e9 r\u00e9alis\u00e9 avec un <abbr class=\"abbr\" title=\"Content Management System\">CMS<\/abbr>.<\/p>\n<p>Par exemple, les extensions et le c\u0153ur de l&rsquo;outil restent dans des versions qui <strong>ne sont plus fiables<\/strong>.<br \/>\nFacile me direz-vous, mettons tout \u00e0 jour. Oui et non, fr\u00e9quemment,\u00a0en quelques mois, voir ann\u00e9es, le d\u00e9veloppement des extensions se trouve\u00a0perturb\u00e9 et donc\u00a0d\u00e9synchronis\u00e9 de celui\u00a0du c\u0153ur.<\/p>\n<p>Pour r\u00e9aliser un audit de s\u00e9curit\u00e9 convenable, il faut donc <strong>tout analyser en profondeur avant d&rsquo;agir<\/strong> :<\/p>\n<ul>\n<li>o\u00f9 en est le d\u00e9veloppement de chaque extension,<\/li>\n<li>le d\u00e9veloppement du c\u0153ur,<\/li>\n<li>quid de l&rsquo;inter-compatibilit\u00e9 extension\/c\u0153ur,<\/li>\n<li>quelle est la n\u00e9cessit\u00e9 de mont\u00e9e de version vis-\u00e0-vis des besoins et des risques,<\/li>\n<li>etc.<\/li>\n<\/ul>\n<p>Finalement, la synth\u00e8se\u00a0de cet\u00a0<strong>audit de s\u00e9curit\u00e9<\/strong> :<\/p>\n<ul>\n<li>2 sites furent bloqu\u00e9s en mont\u00e9e de version de WordPress \u00e0 cause d&rsquo;une\u00a0extension de gestion du multilinguisme au d\u00e9veloppement arr\u00eat\u00e9,<\/li>\n<li>pas mal de r\u00e8gles de s\u00e9curit\u00e9 non appliqu\u00e9es :\n<ul>\n<li>adresse de connexion non modifi\u00e9e,<\/li>\n<li>backup au sein des dossiers de WordPress,<\/li>\n<li>pr\u00e9fixe de base standard,<\/li>\n<\/ul>\n<\/li>\n<li>des base de donn\u00e9es non optimis\u00e9es,<\/li>\n<li>etc.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>La section Orange.com du groupe h\u00e9berge plusieurs sites. Sachant que ces sites sont sous le CMS WordPress et que leur gestion a \u00e9t\u00e9 confi\u00e9e \u00e0 divers prestataires, alors la direction m&rsquo;a demand\u00e9 de r\u00e9aliser un audit de s\u00e9curit\u00e9.<\/p>\n","protected":false},"author":1,"featured_media":3060,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,13,12],"class_list":["post-2987","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-projets-internet","tag-expertise-wordpress","tag-realisation-daudit","tag-securite-wordpress"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Audit de s\u00e9curit\u00e9 de sites WordPress pour Orange.com - Laurent Olivares, consultant Internet<\/title>\n<meta name=\"description\" content=\"R\u00e9alisation d&#039;un audit de s\u00e9curit\u00e9 sur 4 des sites WordPress du Groupe Orange. Version du CMS, des extensions, conseils et recommandations.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Audit de s\u00e9curit\u00e9 de sites WordPress pour Orange.com - Laurent Olivares, consultant Internet\" \/>\n<meta property=\"og:description\" content=\"R\u00e9alisation d&#039;un audit de s\u00e9curit\u00e9 sur 4 des sites WordPress du Groupe Orange. Version du CMS, des extensions, conseils et recommandations.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/\" \/>\n<meta property=\"og:site_name\" content=\"Laurent Olivares, consultant Internet\" \/>\n<meta property=\"article:published_time\" content=\"2015-03-20T14:45:33+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-24T18:55:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.olivares.fr\/consultant\/wp-content\/uploads\/2015\/03\/audit-orange-960.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"960\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"lol\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"lol\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/\",\"url\":\"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/\",\"name\":\"Audit de s\u00e9curit\u00e9 de sites WordPress pour Orange.com - Laurent Olivares, consultant Internet\",\"isPartOf\":{\"@id\":\"https:\/\/www.olivares.fr\/consultant\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.olivares.fr\/consultant\/wp-content\/uploads\/2015\/03\/audit-orange-960.jpg\",\"datePublished\":\"2015-03-20T14:45:33+00:00\",\"dateModified\":\"2023-07-24T18:55:17+00:00\",\"author\":{\"@id\":\"https:\/\/www.olivares.fr\/consultant\/#\/schema\/person\/8e42ff4046e7b5bb33c066abb00ca628\"},\"description\":\"R\u00e9alisation d'un audit de s\u00e9curit\u00e9 sur 4 des sites WordPress du Groupe Orange. Version du CMS, des extensions, conseils et recommandations.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/#primaryimage\",\"url\":\"https:\/\/www.olivares.fr\/consultant\/wp-content\/uploads\/2015\/03\/audit-orange-960.jpg\",\"contentUrl\":\"https:\/\/www.olivares.fr\/consultant\/wp-content\/uploads\/2015\/03\/audit-orange-960.jpg\",\"width\":960,\"height\":400,\"caption\":\"Illustration de l'audit de s\u00e9curit\u00e9 pour Orange par Laurent Olivares Consultant Internet \u00e0 Nantes\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Pr\u00e9sentation\",\"item\":\"https:\/\/www.olivares.fr\/consultant\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Projets\",\"item\":\"https:\/\/www.olivares.fr\/consultant\/projets-internet\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Audit de s\u00e9curit\u00e9 de sites WordPress pour Orange.com\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.olivares.fr\/consultant\/#website\",\"url\":\"https:\/\/www.olivares.fr\/consultant\/\",\"name\":\"Laurent Olivares, consultant Internet\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.olivares.fr\/consultant\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.olivares.fr\/consultant\/#\/schema\/person\/8e42ff4046e7b5bb33c066abb00ca628\",\"name\":\"lol\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/www.olivares.fr\/consultant\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/7b87ba194496b1d724ff0ef40dd7da4f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/7b87ba194496b1d724ff0ef40dd7da4f?s=96&d=mm&r=g\",\"caption\":\"lol\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Audit de s\u00e9curit\u00e9 de sites WordPress pour Orange.com - Laurent Olivares, consultant Internet","description":"R\u00e9alisation d'un audit de s\u00e9curit\u00e9 sur 4 des sites WordPress du Groupe Orange. Version du CMS, des extensions, conseils et recommandations.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/","og_locale":"fr_FR","og_type":"article","og_title":"Audit de s\u00e9curit\u00e9 de sites WordPress pour Orange.com - Laurent Olivares, consultant Internet","og_description":"R\u00e9alisation d'un audit de s\u00e9curit\u00e9 sur 4 des sites WordPress du Groupe Orange. Version du CMS, des extensions, conseils et recommandations.","og_url":"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/","og_site_name":"Laurent Olivares, consultant Internet","article_published_time":"2015-03-20T14:45:33+00:00","article_modified_time":"2023-07-24T18:55:17+00:00","og_image":[{"width":960,"height":400,"url":"https:\/\/www.olivares.fr\/consultant\/wp-content\/uploads\/2015\/03\/audit-orange-960.jpg","type":"image\/jpeg"}],"author":"lol","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"lol","Dur\u00e9e de lecture estim\u00e9e":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/","url":"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/","name":"Audit de s\u00e9curit\u00e9 de sites WordPress pour Orange.com - Laurent Olivares, consultant Internet","isPartOf":{"@id":"https:\/\/www.olivares.fr\/consultant\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/#primaryimage"},"image":{"@id":"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/#primaryimage"},"thumbnailUrl":"https:\/\/www.olivares.fr\/consultant\/wp-content\/uploads\/2015\/03\/audit-orange-960.jpg","datePublished":"2015-03-20T14:45:33+00:00","dateModified":"2023-07-24T18:55:17+00:00","author":{"@id":"https:\/\/www.olivares.fr\/consultant\/#\/schema\/person\/8e42ff4046e7b5bb33c066abb00ca628"},"description":"R\u00e9alisation d'un audit de s\u00e9curit\u00e9 sur 4 des sites WordPress du Groupe Orange. Version du CMS, des extensions, conseils et recommandations.","breadcrumb":{"@id":"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/#primaryimage","url":"https:\/\/www.olivares.fr\/consultant\/wp-content\/uploads\/2015\/03\/audit-orange-960.jpg","contentUrl":"https:\/\/www.olivares.fr\/consultant\/wp-content\/uploads\/2015\/03\/audit-orange-960.jpg","width":960,"height":400,"caption":"Illustration de l'audit de s\u00e9curit\u00e9 pour Orange par Laurent Olivares Consultant Internet \u00e0 Nantes"},{"@type":"BreadcrumbList","@id":"https:\/\/www.olivares.fr\/consultant\/projets-internet\/audit-de-securite-wordpress\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Pr\u00e9sentation","item":"https:\/\/www.olivares.fr\/consultant\/"},{"@type":"ListItem","position":2,"name":"Projets","item":"https:\/\/www.olivares.fr\/consultant\/projets-internet\/"},{"@type":"ListItem","position":3,"name":"Audit de s\u00e9curit\u00e9 de sites WordPress pour Orange.com"}]},{"@type":"WebSite","@id":"https:\/\/www.olivares.fr\/consultant\/#website","url":"https:\/\/www.olivares.fr\/consultant\/","name":"Laurent Olivares, consultant Internet","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.olivares.fr\/consultant\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/www.olivares.fr\/consultant\/#\/schema\/person\/8e42ff4046e7b5bb33c066abb00ca628","name":"lol","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.olivares.fr\/consultant\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/7b87ba194496b1d724ff0ef40dd7da4f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/7b87ba194496b1d724ff0ef40dd7da4f?s=96&d=mm&r=g","caption":"lol"}}]}},"_links":{"self":[{"href":"https:\/\/www.olivares.fr\/consultant\/wp-json\/wp\/v2\/posts\/2987"}],"collection":[{"href":"https:\/\/www.olivares.fr\/consultant\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.olivares.fr\/consultant\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.olivares.fr\/consultant\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.olivares.fr\/consultant\/wp-json\/wp\/v2\/comments?post=2987"}],"version-history":[{"count":10,"href":"https:\/\/www.olivares.fr\/consultant\/wp-json\/wp\/v2\/posts\/2987\/revisions"}],"predecessor-version":[{"id":106193,"href":"https:\/\/www.olivares.fr\/consultant\/wp-json\/wp\/v2\/posts\/2987\/revisions\/106193"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.olivares.fr\/consultant\/wp-json\/wp\/v2\/media\/3060"}],"wp:attachment":[{"href":"https:\/\/www.olivares.fr\/consultant\/wp-json\/wp\/v2\/media?parent=2987"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.olivares.fr\/consultant\/wp-json\/wp\/v2\/categories?post=2987"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.olivares.fr\/consultant\/wp-json\/wp\/v2\/tags?post=2987"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}