Addressing wp-admin Security Issues
-
I was wondering whether WP developers are considering to address wp-admin security issues in future rebuilds of the script.
I would like to see wp-admin only accessible to who it’s supposed to be accessible – administrators. Right now, if you are running a busy blog and opted to limit comments to registered users only to retain your sanity (dealing with 500+ comments a day can be a hassle) you have no means to further secure your wp-admin folder as it would mean that you would restrict access to the profiles of all of your registered users.
With a busy blog that I run, the security of my installation is fundamental for me and I would like to take additional precautions in securing my blog but current structure doesn’t allow for that. I would for example like to have access to wp-admin IP limited with apache .htaccess. I would also further like to secure it with apache password. However none of these are an option as I would have to add an IP of each of my registered user in the .htaccess file and provide them with apache password as well. No new registration would be possible though.
Anyway – any chance the developers would consider redoing the structure WP uses so it’s possible to secure administrator area with use of powerful apache security measures?
The topic ‘Addressing wp-admin Security Issues’ is closed to new replies.