How to rename the WordPress wp-login.php running on IIS6?

I wrote a blog post a while back, this is a quick and dirty hack to make hackers think your wp-login.php is a 404 page. http://dave.kz/hide-your-wp-login-page-from-hackers/.

(From blog post) Basically, I’ve added…

header("HTTP/1.0 404 File Not Found");

to the top of the wp-login.php page. Hopefully the attacker is looking for a 200 HTTP response.

In addition you could do something like…

if(!isset($_GET['allow']) || $_GET['allow']!='true'){
    echo "Sorry, you need to use the magic URL to login.";
    die();
}

again, at the top of wp-login.php. This method would require you to go to http://www.example.com/wp-login.php?allow=true