wp-admin htaccess – deny from all | WordPress.org

freshdan
(@freshdan)

9 years, 11 months ago
Hello !
I use wordpress + woocommerce.
My web-shop is under a massive brute force attack every second. My customers would be affected if I put in wp-admin folder a htaccess rule that deny all except my ip ?
```
order allow,deny
allow from myip
deny from all
```
https://wordpress.org/plugins/woocommerce/

Viewing 1 replies (of 1 total)

Caleb Burks
(@icaleb)

Automattic Happiness Engineer

9 years, 11 months ago

Ehh, may not want to disable all of wp-admin (for ajax reasons). You could disable access to the admin login page though unless it’s your IP. Or you can move the location of the admin login page, or add a captcha, etc.

There are lots of security plugins that can help with this.

Jetpack security module: https://wordpress.org/plugins/jetpack/
Wordfence Security: https://wordpress.org/plugins/wordfence/
iThemes Security: https://wordpress.org/plugins/better-wp-security/

Here is a helpful blog post on WooCommerce security: https://woocommerce.com/2016/02/woocommerce-security-first-steps/

Viewing 1 replies (of 1 total)

The topic ‘wp-admin htaccess – deny from all’ is closed to new replies.

Tags

1 reply
2 participants
Last reply from: Caleb Burks
Last activity: 9 years, 11 months ago
Status: not resolved