Protecting WordPress login page

1 comment

1. You can make it so no one can register by clicking off “Anyone can register” in your Admin.

   Furthermore, you can choose a really good password, install a login lockdown plugin and enable logins over https. In most cases this is secure enough.

   If your really paranoid you can allow access to only your IP by using .htaccess.

   <Files wp-login.php>
       order deny,allow
       deny from all
       allow from 11.11.111.111 (your IP)
   </Files>
   

   To do a re-direct you can try something like this in your .htaccess.

   RewriteEngine On
   RewriteBase /
   RewriteCond %{REMOTE_HOST} !^127.0.0.1 (Your IP)
   RewriteCond %{REQUEST_URI} !/wp-login.php$ 
   RewriteRule .* http://www.yourhomepage.com [R=403,L]
   # 403 is a "forbidden", you can change this to another status code
   

   Log in to Reply