Change your login url for something like http://example.com/login and stop login brute force attempts.
Problème réglé en 5min, et une extension qui dépote. Merci aux auteurs
This plugin does something that is so needed--change the location of the login page. As another colleague commented, it both enhances security against brute-force attacks, and gives a better user experience. Nice!
It is 'effortless' and it has made the "/wp-admin" page 'forbidden'. However, the new login page location is hardcoded as "/login". Not surprisingly, within an hour of installing, I'm seeing brute-force attackers now attempting this "/login" page (ie. an obvious page location for hackers). PLEASE, provide a configurable login page name. As is, this plugin is, in reality, useless (ie. hackers guess "login" as an alternate page).
Also, no screens have appeared in my admin section (contrary to those described under "Screenshots").
Also, some spurious error msgs appeared overwriting my screen when I logged in.
=> Uninstalling since no real benefit in current form. Please work on this - WordPress desperately needs a hidden (admin) login page.
With this and LoginLockdown combined I pretty much eliminated all brute force attempts to access our login page. But I agree that wordpress should allow us to configure these paths ourselves.
Thanks for this plugin.
On the one hand it enhances security, and on the other login URL becomes more intuitive for novice users :-)
I wish wordpress didn't need a plugin for this basic feature. At least they could let me move wp-admin.
That said, this plugin doesn't change wp-admin so it doesn't provide obscurity (yes yes we all know that obscurity isn't real security). It would be nice if it did but that's probably asking for more than a simple and light solution to blocking basic scripts.
So this blocks wp-login.php and it works. Good enough, I guess. Especially if you really don't want any options at all. If it ever became popular it might lose that usefulness.
This plugin is secure, light, well coded and do not need to setup anything, just activate it, it's done.
You must log in to submit a review. You can also log in or register using the form near the top of this page.