WordPress.org

1. Chuck777
   Member
   Posted 4 months ago #

   Hello!
   I'm brand new to WordPress and lovin' it so far. I'm a total novice and I know very little about CSS, PHP, etc. but I think I have things running ok including bbPress with WP.
   I'm trying to "harden" WP a bit more with an .htaccess password restriction in the wp-admin folder.
   It works great for me but it also blocks the regular users when they try to register or log in.
   I have the same .htaccess file in the bb-admin folder and it's working perfectly there for the forums. Users can register and login with no problem and I get the extra login when I go the admin page. bbPress is in subdirectory of the WP install.

   I'm using the 2011 theme.

   Any advice on how to make the .htaccess work for the wp-admin restriction without restricting user registration?

   Thanks!

2. jonradio
   Member
   Posted 4 months ago #

   I'd stick to proven hardening techniques for WordPress (rather than your .htaccess method for wp-admin). As you will see, they even have one for wp-admin:
   http://codex.wordpress.org/Hardening_WordPress#Securing_wp-admin

Reply

You must log in to post.