rename wp login

[bill]

Rename WP Login plug-in

Your default WordPress login URL looks like this: "yourdomain.com/wp-admin"

If someone wants to break into your WordPress site, they will simply go to your admin login page and do their hacking there.

But what if you were to change your login page to another URL that only you know?

This plugin allows you to change your login URL from "wp-admin" to whatever name you want to give it.

This way, you make it harder for hackers to find your login page, adding an extra layer of security to your blog.



(also, or first, see "all in one wp security" thread in this "business chat" section)

[TheButcher]

That is a very good idea, and never use admin or administrator for the login user name

[Colmike7]

Also if you have pagination showing pages like site.tld/?page=2 you should change those to site.tld/page2/ especially on older versions of WP. Same with any variables in the url.

People will find WP that is set up like that, put a ` on the end, then if there's a MySQL error, the site is vulnerable. Then they can use the error data to find which table has the vulnerability and throw in an injection.

[bbwlover]

colmike7 can you explain how you go about doing that

[fetishnews]

Good topic, with good advice, wtg.

[urbanlegend]

Also if you have pagination showing pages like site.tld/?page=2 you should change those to site.tld/page2/ especially on older versions of WP. Same with any variables in the url.

People will find WP that is set up like that, put a ` on the end, then if there's a MySQL error, the site is vulnerable. Then they can use the error data to find which table has the vulnerability and throw in an injection.

what he said

[pornmafia]

Also if you have pagination showing pages like site.tld/?page=2 you should change those to site.tld/page2/ especially on older versions of WP. Same with any variables in the url.

People will find WP that is set up like that, put a ` on the end, then if there's a MySQL error, the site is vulnerable. Then they can use the error data to find which table has the vulnerability and throw in an injection.

You know your shit colmike

[calista]

Also if you have pagination showing pages like site.tld/?page=2 you should change those to site.tld/page2/ especially on older versions of WP. Same with any variables in the url.

People will find WP that is set up like that, put a ` on the end, then if there's a MySQL error, the site is vulnerable. Then they can use the error data to find which table has the vulnerability and throw in an injection.

where do you change setting to do this colmike7

[ingolinz]

I rename all admin login pages on my sites by nature

[viking]

It is a step towards stopping hackers, and a simple one worth doing.

[CanadianChick]

I never thought of this, thanks for telling us

[scotty]

Best way for little effort to thwart spam registrations

[pussylover]

Bots will look for files no matters what you name them