Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

PROTECT YOUR WEBSITE - Hide your WordPress login page!

Hello HF

This tutorial is for members that use wordpress on their websites. Now to login to the wordpress admin panel, there are two main ways. The front end way:
Quote:www.website.com/wp-login.php

Or the backend way:
Quote:www.website.com/wp-admin.php

However, hackers may attempt to brute force your site, or attempt to log on. There is a very simple way to protect this, and that is to use the Lockdown WP Admin plugin.

Quote:http://wordpress.org/plugins/lockdown-wp-admin/

This is a very useful plugin and i use it on my own wordpress sites.
The plugin hides the WordPress Admin login pages (/wp-admin/ and wp-login/) when a user isn't logged in.
If a user isn't logged in and they attempt to access WP Admin directly, they will be unable to and it will return a 404.
Using this plugin, you can also rename the login URL, so that you can make the URL whatever you wish, EG:

Quote:www.website.com/admin/

If this helped you, please post saying thanks :D
Removing http://website.com/wp-includes/rss-functions.php and http://website.com/readme.html will help to prevent attacks from WPScan
(Jan 5, 2014 03:38 PM)Pringles Wrote:  Removing http://website.com/wp-includes/rss-functions.php and http://website.com/readme.html will help to prevent attacks from WPScan
I didn't think of that, but i suppose that it does help :D
Thanks got the great tutorial. The quality of this post is amazing.
(May 27, 2016 09:31 PM)Heart of Kings Wrote:  Thanks got the great tutorial. The quality of this post is amazing.
Appreciate it, thank you.
Clear and easy to read guide.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by WhiteFlameDec 9, 2024 10:52 PM 529 42,836 Dec 9, 2024 10:52 PM
Last Post: Capsule
by Isaac NewtonMay 21, 2024 04:54 AM 35 6,418 May 21, 2024 04:54 AM
Last Post: cyberaquila
by NoTrollFromHereOct 20, 2016 03:06 AM 4 207 Oct 20, 2016 03:06 AM
Last Post: equi_gonzales13