• Resolved bob73

    (@bob73)


    Hello

    Congratulations for your very efficient Security & Antispam plugin for WP.

    I have configured a custom login URL, and managed to let it work as expected, but only after reading the related topic here.
    I would like to know if it is possible to restrict the access to the custom login URL only to a certain IP address, either on the plugin or .htaccess level.
    Do you have some advise for this need ?

    Reason of my question : as already noticed in some topics, some hackers may get to the custom login URL. In this case, they get the login page and can try to login in. I am aware that the security mechanism with limited login attempts would match afterwards, but if I can prevent the access to the custom login URL, it would be much better.

    Thanks a lot in advance.

Viewing 1 replies (of 1 total)
  • Plugin Author gioni

    (@gioni)

    Hi! The plugin has no such functionality. You should not do this either. It’s just overkill. Even if a bad guy find out your Custom login URL they can’t do something harmful cause the plugin protects this login page. Enabling the following protection features is enough:

    – Immediately block IP when attempting to login with a non-existent username
    – Disable automatic redirecting to the login page when /wp-admin/ is requested by an unauthorized request
    – Immediately block IP after any request to wp-login.php

Viewing 1 replies (of 1 total)

The topic ‘Custom login URL’ is closed to new replies.