*Remove disused user accounts (any contributions set to Anne Dayton)
*Changed permissions of all users to author, except Tay to editor, and left just Ed and Anne to admin
I also installed the delete-all-comments-easily plugin and easily deleted the enormous queue of junk comments.
===Changing permissions===
Image upload was tested and worked fine, and a new plugin was also installed fine.
===Installing WordFence===
I also installed the free version of WordFence. It wouldn't have stopped our last malware, most likely, but it should stop at least some of the future annoyances. I went with the basic config. The notifications are sent to mcnair@rice.edu
===Still to do===
We should consider some extra hardening! See, for example, https://codex.wordpress.org/Hardening_WordPress
That we really can't update our theme is an ongoing issue...
[[Category: McNair Admin]]