HIdeMyWP is not blocking wp-login or wp-admin

This topic is: not resolved

Tagged: wp-login

This topic has 4 replies, 2 voices, and was last updated 7 years, 2 months ago by Suman M..

Viewing 5 posts - 1 through 5 (of 5 total)

Save

Author

Posts
May 30, 2018 at 1:23 pm #21867

Jean-Francois
Post count: 2

Hello, after several years of not using your plugin, it is time to test it. May be not on the best theme (Jupiter).

After installation, it seems to do a good job to hide /wp-content/, but it seems to not block wp-login or wp-admin. Can you confirm that?

Hide wp-login.php option is selected. Hide wp-admin folder option’s is selected.

Will send you the debug report on reply.

Regards,

May 30, 2018 at 1:24 pm #21868

Jean-Francois
Post count: 2

This reply has been marked as private.

May 30, 2018 at 3:29 pm #21871

Suman M.
Post count: 12480

Hi, I’ve renamed wp-login.php (you’ll need to enter new name in “Change Login URL” option in Permalinks & URLs tab)

To rename wp-admin path, you’ll need to add new name in “New wp-admin Path” field (please follow this tutorial (http://support.wpwave.com/videos/change-wp-admin-to-myadmin)

The new login URL is http://i73x.com/login/

May 30, 2018 at 4:54 pm #21878

Jean-Francois
Post count: 2

It works, but since activated (we renamed the wp-login.php to wp-protected), we are receiving suspicious process on wp-login.php from our firewall.

Command Line (often faked in exploits):
/opt/cpanel/ea-php56/root/usr/bin/php-cgi /home/username/public_html/wp-login.php

130 notifications, only in the last hour.

Why is that, what can we do, where to look for?

Regards,

May 31, 2018 at 4:37 am #21887

Suman M.
Post count: 12480

From where is that suspicious process originated? May be you can block that IP itself.
Author

Posts

Viewing 5 posts - 1 through 5 (of 5 total)

Save

You must be logged in to reply to this topic.