I wrote a blog post a while back, this is a quick and dirty hack to make hackers think your wp-login.php is a 404 page. http://dave.kz/hide-your-wp-login-page-from-hackers/.
(From blog post) Basically, I’ve added…
header("HTTP/1.0 404 File Not Found");
to the top of the wp-login.php page. Hopefully the attacker is looking for a 200 HTTP response.
In addition you could do something like…
if(!isset($_GET['allow']) || $_GET['allow']!='true'){
echo "Sorry, you need to use the magic URL to login.";
die();
}
again, at the top of wp-login.php. This method would require you to go to http://www.example.com/wp-login.php?allow=true
Related Posts:
- Remove special characters in a URL
- subdirectory install breaking existing links
- Fully mask *all* traces of WordPress installation subdirectory?
- How to add custom rewrite rule to .htaccess?
- Change Login URL Without Plugin
- How to remove “admin.php?page=” from wp-admin using .htaccess?
- SEO Friendly URLs for my plugin categories
- How do I remove a word from a url in WordPress using .htaccess?
- Hijacking the URL for filtering
- Rewrite rules in .htaccess get overwritten?
- Why did installing wordpress in url root jack up underlying WP sites?
- WordPress keeps writing rewrite rules to .htaccess
- WordPress Rewrite
- Dynamic URL, not a physical page within the database
- unexpected problem in url rewrite
- Prevent WordPress from automatically correcting URLs
- Server (WordPress) redirects files that are not supposed to (using htaccess)
- WordPress redirection to get url friendly
- Rewrite WordPress Custom URL
- htaccess: Remove trailing slash from URL ending with .xml/ only
- External/non-WP rewrite rule without QSA
- Remove all categories from URL
- Custom rewrite rule
- Add query string to url and display it as normal url part /folder/
- Alias ‘wp-content’ directory to something shorter (framework?)
- WordPress .htaccess – route other URLs to another app
- Map alt domain to specific section of website w/o MU
- Rewrite rule to load images from production does nothing
- Why does chrome keep downloading a file instead of running the site?
- WordPress SSL (https) is not working with custom permalink
- How to redirect http://mydomain/blog/blahblah/ to http://mydomain/blahblah/ in wordpress htaccess?
- Double domain name in category URL-s
- Access files at new location using old file paths
- NextGEN Gallery Lightbox – Social Share URL Redirect
- Url Rewriting a dynamic wordpress page
- WordPress .htaccess blocks mine?
- My WP_options db rewrite_rules Does Not Work
- Rewrite Preview URL to include index.php
- a one-off rewrite rule
- .htaccess rewrite
- How can I dynamically generate an image with a static image URL?
- Change htaccess to redirect to index.php in subfolder
- How to remove wordpress directory slash
- Cannot access wp-admin without trailing slash – .htaccess configuration for WordPress behind a nginx proxy
- Changed pagination URLS to use p= instead of paged=
- Wildcard forward all posts and pages with few exceptions
- React Router with WordPress
- joomla to wordpress migration and 404 errors issues [closed]
- Rewriting “pretty” blog category URL with htaccess / add_rewrite_rule() causes 404 page
- Replace specific middle part of url
- Rewriting a subdomain page on one WordPress installation to a parent domain on another
- Redirecting /px/?q=x to /px/x/
- URL redirect on updating the post date
- WordPress keeps writing rewrite rules to .htaccess
- Customise particular RSS permalink
- IIRF + IIS 6 + WordPress does not return 404 error
- Rewrite vs Redirect from ?p={ID}
- Is WordPress API visible from PHP file called in htaccess
- Having WordPress control only certain pages with .htaccess?
- ow to change cutsom page url of wordpress site using htaccess
- Help with a custom rewrite
- How can i ensure that SQL statements are not displayed if an enduser types the wrong variable name in the URL
- Rewrite specific action url
- 301 Rewriting htaccess
- WordPress .htaccess ignore path and subsequent .htaccess files in subfolders
- Overwrite WordPress’s URL rewrite not working
- 404 redirect based on url
- How to customize sub-URLs in a wordpress website (.htaccess)
- Proper way to set up rewrite with Wp
- Rewrite rule that wp-login.php?action=register is left alone
- Exclude subfolder in WordPress permalink
- WordPress is adding “category” word before my actual category name in url (and this is unsolicited)
- Point 404 pages to homepage
- WordPress pagination broken for page 2,3 with custom permalink. Redirects to baseurl
- Help with .htaccess setup to hide WordPress Directory
- Multiple permalink with and without category for same post
- Custom Params in URL
- Pretty URL via Rewrite
- Is it possible to rewrite a page URL from ID to name from an API?
- Rewrite URL to get rid of wp-content etc and change URL
- Rewrite URL for attachments
- Moved WordPress to Subdirectory, still hijacking requests to files outside of its directory
- How to add gallery slug to attachment url?
- Rewrite URL query string for all pages
- Url wordpress rewrite
- Add ReWrite from Old Pages to WordPress (remove .php)
- ModRewrite not working properly
- URL rewrite results in a 404, but everything should work!
- Rewrite Question
- Migration from old CMS to WordPress 301 redirection rules?
- Simple URL rewriting gone wrong
- What is the proper way to use add_rewrite_rule to remove the (question mark)?
- 404 for index.php
- WordPress total posts per page changed and now 404 Http error comes out [closed]
- Can’t get pretty permalinks to work without index.php
- How to redirect a virtual page (e.g. /blog) to the home page?
- how to rewrite folder name in url to another name
- Add rewrite endpoint and .htaccess
- Rewrite Page Parameters
- WP-Include rewrite directory