Do not allow the creation of an administrator remotely
Here is a short script that prevents unapproved admins from logging in. Of course it is possible to add multiple login names. add_filter( ‘authenticate’, ‘auth_signon’, 30, 3 ); function auth_signon( $user, $username, $password ) { if( strtoupper($username) !== ‘MYLOGINNAME’ && in_array( ‘administrator’, (array) $user->roles )){ wp_logout(); return new WP_Error( ‘broke’, __( $username . “, good … Read more