Title: iThemes Backend Issue
Last modified: September 1, 2016

---

# iThemes Backend Issue

 *  Resolved [spanizhfly](https://wordpress.org/support/users/spanizhfly/)
 * (@spanizhfly)
 * [9 years, 11 months ago](https://wordpress.org/support/topic/ithemes-backend-issue/)
 * Hi,
 * I’ve been using a Itheme for long time and it has been
    great and I’ve also recommended
   to tonnes of people.
 * But just this few days, I notice that I receive lockout msg.
 * Someone has found my **hidden backend** which only I know and the **username**,
   
   just they could not enter because of the **password**.
 * I’ve change the **username **and the change the **hidden backend **URL for almost**
   3 times**
    but still can be by the hacker but they just could not enter the site
   because of this **password** again.
 * I dont know how is it possible for them to find the hidden back end URL and the
   and the username.
 * **Need your help or else or my site will be effected.**
 * [https://wordpress.org/plugins/better-wp-security/](https://wordpress.org/plugins/better-wp-security/)

Viewing 5 replies - 1 through 5 (of 5 total)

 *  [dwinden](https://wordpress.org/support/users/dwinden/)
 * (@dwinden)
 * [9 years, 11 months ago](https://wordpress.org/support/topic/ithemes-backend-issue/#post-7463554)
 * [@spanizhfly](https://wordpress.org/support/users/spanizhfly/)
 * Do you actually see in the server log files that your secret backend slug is 
   being accessed repeatedly ?
 * Is your site offering a login link on the homepage that exposes your hidden backend
   slug ?
 * dwinden
 *  Thread Starter [spanizhfly](https://wordpress.org/support/users/spanizhfly/)
 * (@spanizhfly)
 * [9 years, 11 months ago](https://wordpress.org/support/topic/ithemes-backend-issue/#post-7463565)
 * Where can I find the server log?
 * I’m certain my site is not offering any other
    user except me.
 * I’ve never had other login links.
 * They get the login slug and the username easily
    but not the password.
 * Any idea?
 *  [dwinden](https://wordpress.org/support/users/dwinden/)
 * (@dwinden)
 * [9 years, 11 months ago](https://wordpress.org/support/topic/ithemes-backend-issue/#post-7463568)
 * [@spanizhfly](https://wordpress.org/support/users/spanizhfly/)
 * With all due respect, you THINK your secret login slug is being accessed.
 * But there are other ways of doing WordPress login attempts, like using XMLRPC.
   Is XML-RPC currently disabled under the WordPress Tweaks module ?
 * You HAVE to determin the login attempts method.
 * Otherwise you’re just guessing and you’ll never find a solution.
 * Contact your hosting provider and ask them to help you look at the server log
   file(s).
 * dwinden
 *  Thread Starter [spanizhfly](https://wordpress.org/support/users/spanizhfly/)
 * (@spanizhfly)
 * [9 years, 11 months ago](https://wordpress.org/support/topic/ithemes-backend-issue/#post-7463578)
 * Dwiden,
 * I notice the XML-RPC was not disable.
    I just disable it. I think i miss this
   potion on.
 * I’ll ask my hosting guys get the logs anyway.
 *  Thread Starter [spanizhfly](https://wordpress.org/support/users/spanizhfly/)
 * (@spanizhfly)
 * [9 years, 11 months ago](https://wordpress.org/support/topic/ithemes-backend-issue/#post-7463707)
 * Thanks dwinden,
 * Hopefully, its solved
 * Thank you for your kind assitance.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘iThemes Backend Issue’ is closed to new replies.

 * ![](https://ps.w.org/better-wp-security/assets/icon.svg?rev=3529351)
 * [Kadence Security – Password, Two Factor Authentication, and Brute Force Protection](https://wordpress.org/plugins/better-wp-security/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/better-wp-security/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/better-wp-security/)
 * [Active Topics](https://wordpress.org/support/plugin/better-wp-security/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/better-wp-security/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/better-wp-security/reviews/)

 * 5 replies
 * 2 participants
 * Last reply from: [spanizhfly](https://wordpress.org/support/users/spanizhfly/)
 * Last activity: [9 years, 11 months ago](https://wordpress.org/support/topic/ithemes-backend-issue/#post-7463707)
 * Status: resolved