I need to find which is the file that checks the DB for correct login (username, password)
wp_authenticate_username_password in wp-includes/user.php and wp_check_password in pluggable.php I would advise against meddling with these though unless you’re removing the wordpress user authentification and putting your own in, e.g. http://wordpress.org/extend/plugins/simple-ldap-login/. For the best part, not using the admin username, making the first account a non super admin, not using wp_ database prefix, putting salt values in … Read more