[Blog Tip] Securing your Wordpress admin

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Jace
    FBOP Class Of 2013
    • Jan 2004
    • 35562

    #1

    [Blog Tip] Securing your Wordpress admin

    http://www.justjace.com/2007/09/10/s...rdpress-admin/

    The best way I have found is to secure it by limiting to your ip only. This is a simple solution and you just add this

    order deny,allow
    allow from 123.45.67.123 # This is your IP Address
    deny from all

    to your wp-admin .htaccess file

    What this does is tell your server to not let ANY other ip addresses but yours into the wp-admin folder. This requires an update every once and a while unless you have a static ip, but worth the extra effort.
  • dissipate
    The Dirty Frenchman
    • Nov 2005
    • 8904

    #2
    pain in the ass if you have a cable modem that you have to reset every few days ;-)

    Comment

    • tenderobject
      Need Designs? 312352846
      • Dec 2004
      • 11688

      #3
      wow nice jace. thanks for shaaring!


      NEED DESIGNS?!?

      Comment

      • Jace
        FBOP Class Of 2013
        • Jan 2004
        • 35562

        #4
        Originally posted by dissipate
        pain in the ass if you have a cable modem that you have to reset every few days ;-)
        yeah, that would be a pain in the ass

        in that case you can just set up a htaccess username/password similar to that of a paysite

        Comment

        • st0ned
          Confirmed User
          • Mar 2007
          • 8437

          #5
          Nice tip, Thanks!
          Conversion Sharks - 1,000+ adult dating offers, traffic management, and consistently high payouts.
          We will guarantee and beat your current EPC to win your dating traffic!
          Skype: ConversionSharks || Email: info /@/ conversionsharks.com

          Comment

          • pornguy
            Too lazy to set a custom title
            • Mar 2003
            • 62910

            #6
            good tip.
            PornGuy skype me pornguy_epic

            AmateurDough The Hottes Shemales online!
            TChicks.com | Angeles Cid | Mariana Cordoba | MAILERS WELCOME!

            Comment

            • tranza
              ICQ: 197-556-237
              • Jun 2003
              • 57559

              #7
              Nice solution indeed....
              I'm just a newbie.

              Comment

              • Profits of Doom
                Monster Rain
                • Feb 2004
                • 4978

                #8
                I was searching through blog resource sites today and I found this, http://www.blogworldexpo.com/, a blogging convention in Vegas November 8-9. I guess that shows you how far blogging has come...
                “My Free Cams Affiliate Program by CrakRevenue”

                Comment

                • Jace
                  FBOP Class Of 2013
                  • Jan 2004
                  • 35562

                  #9
                  Originally posted by Profits of Doom
                  I was searching through blog resource sites today and I found this, http://www.blogworldexpo.com/, a blogging convention in Vegas November 8-9. I guess that shows you how far blogging has come...
                  woah, nice

                  might be worth it to check it out for sure

                  Comment

                  • Tanker
                    Confirmed User
                    • Nov 2000
                    • 9287

                    #10
                    thanks for the tip and the convention

                    Tanker
                    ICQ 3427575


                    CCBTools Now featured in the CCBill.com APP STORE

                    Comment

                    • Sosa
                      In Tushy Land
                      • Oct 2002
                      • 40149

                      #11
                      pain in the ass if you travel and forget about it lol! but nice tip

                      Comment

                      • TeenCat
                        Too lazy to set a koala
                        • Jan 2007
                        • 16131

                        #12
                        good idea, thank you, but what about to rename the folder to "-my-h1dd3n-admin-" or similar? i think it will be working well as in the folder wp-admin and nobody will find it ;) but its another newbies thanks for sharing your useful tips, respect!

                        6bot
                        / Coming again very soon!
                        Svit Zlin Radio 24/7!

                        Comment

                        • NinjaSteve
                          Too lazy to set a custom title
                          • Dec 2003
                          • 11089

                          #13
                          Originally posted by Profits of Doom
                          I was searching through blog resource sites today and I found this, http://www.blogworldexpo.com/, a blogging convention in Vegas November 8-9. I guess that shows you how far blogging has come...
                          Whoa that's crazy!
                          ...

                          Comment

                          • candyflip
                            Carpe Visio
                            • Jul 2002
                            • 43073

                            #14
                            Originally posted by Sosa
                            pain in the ass if you travel and forget about it lol! but nice tip
                            Remote Desktop

                            Spend you some brain.
                            Email Me

                            Comment

                            • Jace
                              FBOP Class Of 2013
                              • Jan 2004
                              • 35562

                              #15
                              Originally posted by TeenCat
                              good idea, thank you, but what about to rename the folder to "-my-h1dd3n-admin-" or similar? i think it will be working well as in the folder wp-admin and nobody will find it ;) but its another newbies thanks for sharing your useful tips, respect!
                              you can do that, but you have to let wordpress know you are doing that

                              found this htaccess hack to accomplish just that

                              Code:
                              RewriteEngine On
                              RewriteBase /
                              ##### ABOVE THIS POINT IS ALREADY INSERTED BY WORD PRESS
                              ##### Michi?s code is BELOW #####
                              RewriteCond %{REQUEST_URI} wp-admin/
                              RewriteCond %{QUERY_STRING} !YOURSECRETWORDHERE
                              RewriteRule .*\.php [F,L]
                              RewriteCond %{QUERY_STRING} !YOURSECRETWORDHERE
                              RewriteRule ^ADMINFOLDER/(.*) wp-admin/$1?%{QUERY_STRING}&YOURSECRETWORDHERE [L]
                              ##### Michi?s code is ABOVE #####
                              ##### BELOW THIS POINT IS ALREADY INSERTED BY WORD PRESS
                              RewriteCond %{REQUEST_FILENAME} !-f
                              RewriteCond %{REQUEST_FILENAME} !-d
                              RewriteRule . /index.php [L]

                              Comment

                              • OzMan
                                Confirmed User
                                • Sep 2003
                                • 9162

                                #16
                                Originally posted by Profits of Doom
                                I was searching through blog resource sites today and I found this, http://www.blogworldexpo.com/, a blogging convention in Vegas November 8-9. I guess that shows you how far blogging has come...
                                aah cool Vanessa Fox will be there. I need to talk to her about monetizing her blog more effectively

                                Comment

                                • Bro Media - BANNED FOR LIFE
                                  MOBILE PORN: IMOBILEPORN
                                  • Jan 2004
                                  • 16502

                                  #17
                                  good tips jace!

                                  Comment

                                  • TeenCat
                                    Too lazy to set a koala
                                    • Jan 2007
                                    • 16131

                                    #18
                                    Originally posted by Jace
                                    you can do that, but you have to let wordpress know you are doing that

                                    found this htaccess hack to accomplish just that

                                    /cut
                                    thank you for explanation, now that code is quite complicated for me ... ;) keep up the great work, respect!

                                    6bot
                                    / Coming again very soon!
                                    Svit Zlin Radio 24/7!

                                    Comment

                                    • paymeback
                                      Confirmed User
                                      • May 2005
                                      • 1478

                                      #19
                                      Nice tip Jace!
                                      ICQ:36-43-49-11

                                      Comment

                                      • teenfeetcash
                                        Confirmed User
                                        • Jun 2007
                                        • 527

                                        #20
                                        Cool tip, never thought about using .htaccess for the admin folder - can I just secure the folder without if affecting the operation of the blog?
                                        Got Foot Traffic?

                                        http://www.teenfeetcash.com

                                        Comment

                                        Working...