Hiding The Admin URL Via wordpress prevent hackers?
 

would that help eliminate any hacking?

so my wordpress admin used to be domain.com/wp-admin/

now its domain.com/*******

tnx

why you posted the new url here? :)

You can set up IP restriction for the login page. This way only IP's that you allow will be able to access the login page. Ask your web host how to do this.

htaccess to allow only your ip

agreed, plus disable wp-admin for subscribers, redirect users to main.

just rename login page.

99% of the time you get fucked by an automatic scanner.

solutions:
-change wp-admin directory
-remove readme.html and licence.txt
-remove the "powered by wordpress" part in the footer

This. Also utilize .htaccess to allow only your IP and disallow everything else. That should make it pretty secure. :2 cents:

I recommend you make the wp-admin directory an obscure name. There is a tool that will scan like 1000+ different login directorys.
Make it something like wp-pooface and you should be ok.

why not install plugin to lock the fraud logins ?

CyberSEO linked to a plugin a little while ago, but I'm not sure what thread it was. Here's the plugin he mentioned http://codecanyon.net/item/hide-my-w...dpress/4177158

Most hack happes due to plugins with bad security and script weaknesses in WP itself.

yeah I also limit IP to my IP. It sucks if it changes a lot though.

u can stop logins (well, whitelist it against ips). it wont stop all hacks at all (most are plugin ones) but it stops people trying to login and brute force guess pws...

<Files wp-login.php>
order deny,allow
deny from all
allow from 123.123.123.123
allow from 456.789.456.789
</Files>