malakaka

Most contact forms are similar because they were hacked from the same original code. I tried all those, but they did not work for me. Don’t know why. Finally I tried PXS Mail and it worked fine. Only one file, not 3 like the others. It may not be perfect for the big sites, but perfect for my simple little site.
http://www.phrixus.co.uk/pxsmail/

A quicker idea is to go into your host’s control panel and use phpMyAdmin to change your default login name from admin to something different. Just find your WP database and the entry wp_users. Click browse or edit. Change user_login to whatever you wish and save. Any hacker using the default login will get nowhere fast. You might also change display_name to something more interesting while you’re in your database.

I came to this forum with the same security concern. I’m disturbed when people give canned answers to legitimate concerns. In this case the answer is from Moshu, a moderator. Resiny and spencerp are simply misinformed, but moshu should do better.

Renaming the wp-admin and wp-login names is one more small layer of security. When using such a popular script, knowing the default file names makes the process of hacking simpler. Read about one such attack here: http://ww.wp.xz.cn/support/topic/77186?replies=3

There is a script http://jdk.phpkid.org/index.php?p=1127 that automates the renaming, so it is entirely worthwhile. As you point out, it may not work with the latest version of WP.

I’ll test the script on my site and see if it works with 2.0.3. If not, I’ll try it manually.