What is the best method to close off the backend?

If you know the sub-net of your VPN you could restrict access to /wp-admin via .htaccess using standard Apache rules.

<Directory /var/www/wp-admin/>
  Order deny,allow
  Allow from 192.168.1.0/24
  Allow from 127
</Directory>

Obviously you’d need to adjust the directory and IP address subnet to suit your needs.

To restrict access to a specific file:

<Files _FILE_.php>
    Order allow,deny
    Deny from all
    Allow from 127.0.0.1
</Files>

Again you can use a sub-net mask to suit your VPN.

Related Posts:

  1. Can I rename the wp-admin folder?
  2. Change Login URL Without Plugin
  3. Share same domain for wp-admin but for different website
  4. Securing wp-admin folder – Purpose? Importance?
  5. Can I rename the wp-admin folder?
  6. Options for restricting access to wp-admin
  7. How to change “wp-admin” to something else without search-replacing the core?
  8. Block access to wp-admin
  9. Change WP-Login or WP-Admin
  10. Should I add the IP of the server that hosts my sites to the list of authorized IPs in the wp-admin/.htaccess?
  11. FORCE_SSL_ADMIN not working
  12. Limit access to wp_admin
  13. I want to disable login of admin (/wp-admin) with email and make it accessible only with username
  14. password reset link being sent as HTTP?
  15. How to Change The WordPress Login URL Without Plugin
  16. 404 redirect wp-login and wp-admin after changing login url [closed]
  17. Logout USER form backoffice after 30 minutes of inactivity [closed]
  18. Do I have to face security problems if I changing default role to Contributor
  19. Hide username discovery
  20. Efficient way to check local WordPress php files and Database for malicious code? [duplicate]
  21. Renaming wp-admin without hard-coding it. Is it really possible?
  22. Need help for WordPress User Session Management?
  23. Developer/Designer asking for admin access
  24. Is WordPress secure enough for a multi-user article directory?
  25. Can I rename the wp-admin folder?
  26. CSRF attack to create USER
  27. Can I rename the wp-admin folder?
  28. Why WordPress not logout after I have close my browser?
  29. How to protect wp-admin from third party access?
  30. Couple questions about .htaccess, login page, updates
  31. is exposed wp-admin site a serious security vulnerability
  32. Changing the ‘wp-admin’ URL to whatever I want
  33. Unit testing in the WordPress backend (is_admin() is true)
  34. Best way to present options for home page in admin?
  35. How can I improve the line break handling in the WYSIWYG editor?
  36. How do I change the login logo URL and hover title?
  37. js error on post editing page
  38. Remove “From computer” media tab for posts with existing attachments?
  39. Upgrade to SSL Breaks Admin Dashboard
  40. Disable slow media queries?
  41. Make sub menu items a main link in the admin menu using fuctions.php
  42. .htaccess rewrite rule for removing .php extension with exception of wp login and wp-admin
  43. Too many datadabse connections – upper ceiling mysql
  44. I can’t access my admin page after changing main url
  45. Redirect users away from Admin breaks ajax
  46. SSL Partially breaking admin panel and elementor
  47. From 403 error to 500 internal server error
  48. Woocommerce: Add column to ORDERS admin page with items purchased
  49. How to declutter admin columns
  50. Post Bulk Update
  51. wp_comments table really big casuing /wp-admin/edit-comments.php to slowly load
  52. How to make the front-end RTL without changing the admin panel language?
  53. sort tags by tag ID in admin panel
  54. WP admin user search doesn’t return all users
  55. Where are screen options when in admin on mobile?
  56. post-new.php?post_type=product is not loading properly
  57. wp-admin redirects to 404
  58. Generate PDF using tcpdf from WordPress admin side custom page [closed]
  59. Editor’s role in WP
  60. Minimum version for WordPress Backbone
  61. I accidentally deleted an admin user and all their content is now gone from the site. [closed]
  62. Is wp-admin/about.php required? Can i omit it from my website
  63. Site Crashes When Updating to WordPress (Version 3.6)
  64. can’t access backend while frontend works perfect
  65. How to add Extra Column of post Status in All post page
  66. WordPress Child theme fails to override parent theme css
  67. How can I control which plugins run in the dashboard?
  68. WP Admin Login keeps redirecting to login
  69. Admin menu success message
  70. CPU overload spam – redirect link to wp-admin and new post
  71. define two login page url
  72. Users can login to Website from wp-admin prior to confirmation email
  73. Admin Page access
  74. On Users (user.php) in wp-admin disable/hide “Bulk Actions” and “Change Role To”
  75. Add HTML to custom post type edit page
  76. WP site after login keeps redirecting to looped url [closed]
  77. How can I can I make changes to a WP project I pulled from GItHub?
  78. WordPress critical error on wp-admin page with 100% permissions
  79. WordPress Redirects to a cancelled domain, need to change it but can’t get to the admin portal
  80. WordPress Admin Login Issue
  81. Edit “Not Available” Page
  82. admin-ajax and external service interaction
  83. Add admin page to the top of the admin panel
  84. Add item to admin panel – w/o plugin & theme
  85. Wp-admin Redirection loop after moving to subdirectory
  86. Remove menu item dashboard for a unique user
  87. Reestablishing Automatic and Secure FTP Connection, Primary Domain Change
  88. Show only childs and grandchilds of certain post in admin
  89. WordPress logged in but no access to wp-admin
  90. Changed the path to wp-login and now can’t access WPress dashboard
  91. Why my login panel has a wrong language?
  92. Creating another wordpress site as sub-domain of a wordpress site
  93. Mixed content and expired session issues with SSL and wp-admin
  94. Limit access to wp-admin but still be able to log in from different locations?
  95. How to Filter in the “Add Media Popup” to show only “unattached” Media
  96. $current_screen if condition for a specific page in admin
  97. Working with post values in the admin panel
  98. wordpress login blank screen [closed]
  99. wp-admin blank page after admin login and all security off
  100. Can a wordpress admin see my failed Login attempts?

Leave a Comment