Dear Tagdiv,
I tried protecting my wp-admin directory with a password to protect my website (and stop the limit login attempts email spam, there are like 20 attempts per day). Unfortunately protecting the admin directory resulted in login credential popup when scrolling for additional posts on the frontpage. Is there a way to go around this issue?
regards
Suggestions:
http://codex.wordpress.org/Hardening_WordPress
Plugin – not tested:
https://wordpress.org/plugins/protect-wp-admin/
Older article:
http://www.wpbeginner.com/wp-tutorials/11-vital-tips-and-hacks-to-protect-your-wordpress-admin-area/
(check comments for article on feedback re opposing views/out of date warnings for DOA plugins or procedures)
——–
main items:
a) create new superuser; delete admin account
b) use ‘limit login attempts’ plugin
c) avoid plugins not updated for security fixes in WP 4.2 era (check Securi for list of bad plugins, for example; feedback on the support forum for any plugin on WordPress.org)
d) avoid plugins from ThemeForest/Envato unless very well documented, updated for security issues, and check feedback comments to see if malware/abandonware/bugs
e) consider turning off the pingback and XLMRPC stuff.
Already using limit login attempts, not using admin. My “issue” is the number of daily attempts and the emails resulting from that.
Both resources suggest protecting wp-admin with a password. Unfortunately this is exactly what is not possible in the theme :(.
Why not turn off the emails for limit login attempts? Q E D
That would be the ostrich method?:P
Anyway I have managed to solve the issue. I have found code that allows you to target ONLY the wp-login.php with a password:
## Protect login
<Files wp-login.php>
authentication code goes here
</Files>
Put that in public_html and it works like a charm :).
