How login is possible, if I deny login page via .htaccess with allow ip

You have denied the access to /wp-admin, however the user can still attempt to login via wp-login:

http://example.com/wp-login.php

Therefore, you should also deny wp-login.php:

<Files "wp-login.php">
    Order allow,deny
    deny from all
    allow from 123.123.123.123 // Your IP address
</Files>

Related Posts:

  1. “Too many redirects” ONLY when trying to access wp-admin page
  2. Use a different domain for SSL
  3. .htaccess in wp-admin produces a redirect loop
  4. Change Login URL Without Plugin
  5. Securing wp-admin folder – Purpose? Importance?
  6. Wrong canonical link on wp-admin pages
  7. WordPress in sub directory wp-admin problem
  8. Options for restricting access to wp-admin
  9. .htaccess rewrite rule for removing .php extension with exception of wp login and wp-admin
  10. Can’t access admin dashboard with wp-admin without /index.php after it
  11. How to change “wp-admin” to something else without search-replacing the core?
  12. Why should I password protect WP-Admin?
  13. Call to undefined function insert_with_markers
  14. Block access to wp-admin
  15. Cannot log into WordPress Dashboard after removing/adding .htaccess
  16. Should I add the IP of the server that hosts my sites to the list of authorized IPs in the wp-admin/.htaccess?
  17. Which HTTP headers to use for subdomain embedding?
  18. CDN + WP Admin Query – .htaccess redirection
  19. From 403 error to 500 internal server error
  20. Cannot Access Admin Area After Migration
  21. Wrong wp-admin URL
  22. How do I host WordPress on a hidden domain through a reverse proxy?
  23. How to Change The WordPress Login URL Without Plugin
  24. 404 redirect wp-login and wp-admin after changing login url [closed]
  25. Redirect an entire WordPress site on a subdomain, except wp-admin
  26. Blank page when viewing wp-admin
  27. wp-admin going directly to 404
  28. WordPress /wp-admin redirect to wrong port in docker
  29. wp-admin and wp-login.php not Accessible after Cloudflare
  30. Disabling WP-Admin Caching in htaccess
  31. Limit access to wp-admin but still be able to log in from different locations?
  32. SSL doesn’t deliver parts of WordPress Administration Module
  33. Making WP Admin Folder accessable JUST under a different link
  34. Couple questions about .htaccess, login page, updates
  35. Remove ‘Custom..’ option in tinyMCE colour swatch
  36. How to remove items from +New admin menu?
  37. Remove “From computer” media tab for posts with existing attachments?
  38. Upgrade to SSL Breaks Admin Dashboard
  39. Disable slow media queries?
  40. Make sub menu items a main link in the admin menu using fuctions.php
  41. Too many datadabse connections – upper ceiling mysql
  42. I can’t access my admin page after changing main url
  43. remove plugin admin menu in wordpress without installing plugin in v3.8.1
  44. SSL Partially breaking admin panel and elementor
  45. Only allow administrators and editors to access wp-admin
  46. Create a admin page in wordpress without admin menus (“wordpress sidebars”)
  47. Woocommerce: Add column to ORDERS admin page with items purchased
  48. How to declutter admin columns
  49. New wordpress install, what are the reasons the “Install Themes” tab is missing?
  50. Customise WordPress Update Notice in wp-admin backend area
  51. wp_comments table really big casuing /wp-admin/edit-comments.php to slowly load
  52. I get a 404 page on /wp-admin but not wp-login but as soon as I login I get a 404 again [closed]
  53. I want to disable login of admin (/wp-admin) with email and make it accessible only with username
  54. password reset link being sent as HTTP?
  55. How to make the front-end RTL without changing the admin panel language?
  56. Post.php is blocked by server? How to unblock? [closed]
  57. WP-Admin shows (1) update but there is no update for plugin, theme or WordPress
  58. wp-admin redirects to 404
  59. Generate PDF using tcpdf from WordPress admin side custom page [closed]
  60. Editor’s role in WP
  61. Minimum version for WordPress Backbone
  62. I accidentally deleted an admin user and all their content is now gone from the site. [closed]
  63. Detect Featured Image remove while editing post in wp-admin (client-side)
  64. Cannot log in to the admin, no error message [closed]
  65. Is wp-admin/about.php required? Can i omit it from my website
  66. Need help for WordPress User Session Management?
  67. wp cron, admin and updates questions
  68. Unable to properly login
  69. Is there a simple way to set wordpress site files back to out of the box?
  70. Remove header text option from the backend
  71. User Capabilities are not available in WP REST permission callback?
  72. How to check if it’s edit.php & post_type is set?
  73. Dashboard : remove Safari navigator message
  74. Contextual help in wp-admin for non admins
  75. Trying to create a page as a menu item in the admin while keeping the admen panel visible
  76. Weird urls after moving site from local env to a server
  77. Manage Admin permissions by URL GET parameters
  78. Set edit capability based on ACF relationship
  79. Step by step guide for new users on how to post content?
  80. Hook into form handle from admin users table
  81. Display Form in Admin Panel and Save data to Database
  82. Give wp-admin access for shop managers
  83. Cannot log in to WordPress admin or change password
  84. 403 Error when using save buttons
  85. Js errors in wp-admin
  86. Avoid executing a function (redirect) if I’m in the admin area
  87. Wp-admin loguts me. When sign with Wp_singon
  88. Localhost install: Administrator lost administrator access; cannot access Dashboard
  89. How to keep the plugin submenu open on viewing a custom version of users.php?
  90. Admin Panel issue
  91. sharing wp-include – wp-admin on same installation
  92. admin_print_styles incuding $_SERVER[‘DOCUMENT_ROOT’]
  93. Admin Scripts enqueue codes seems ok but not working
  94. admin-post.php results on white screen after form submission
  95. CSS not showing up in my website Only HTML Displaying
  96. Change height of Add New Post input box
  97. Anyone Can Register
  98. How to protect wp-admin from third party access?
  99. Unable to access my plugins [closed]
  100. Can admin-ajax.php be used for spam purposes? And if yes, how to prevent that?