


Did you know you can secure WordPress admin URL without a plugin?
Jan 29, 2025 pm 04:07 PMMethods to enhance WordPress background URL security, no plug -in!
file, or use the code fragment plug -in to paste. functions.php
/your-url/
- Reset to directly visit wp-login.php
-
function redirect_default_login() { // 如果有人嘗試直接訪問(wèn)wp-login.php(未登錄或登出),則重定向他們。 if (strpos($_SERVER['REQUEST_URI'], 'wp-login.php') !== false && !isset($_POST['log']) && (!isset($_GET['action']) || $_GET['action'] !== 'logout')) { wp_safe_redirect(home_url()); // 將他們重定向到主頁(yè)(或您指定的其他頁(yè)面)。 exit; // 停止進(jìn)一步執(zhí)行。 } } add_action('init', 'redirect_default_login');Function: This function checks whether anyone tries to directly access the default WordPress login page (wp-login.php). If yes, and they are not actually trying to log in or cancel, they redirect them to the homepage (or other security URLs you specified).
- Advantages: help hide the default login page, and it is difficult for robots or attackers to find your login page to improve security.
- Use custom login URL
-
function handle_custom_login_url() { // 定義您的自定義登錄slug(例如,“your-url”)。 $custom_login_slug = 'your-url'; // 這是您要用于登錄的自定義URL。 // 檢查是否有人正在訪問(wèn)自定義登錄URL。 if (strpos($_SERVER['REQUEST_URI'], $custom_login_slug) !== false) { // 顯示W(wǎng)ordPress登錄頁(yè)面。 require_once ABSPATH . 'wp-login.php'; exit; // 停止進(jìn)一步執(zhí)行。 } } add_action('init', 'handle_custom_login_url');Function: This function creates a custom login URL (for example, yoursite.com/your-urll). When someone visits this URL, it will load the default WordPress login page (WP-Login.php), but the solid URL will be retained in the address bar.
- Advantages: Allows you to log in with a custom, unpalatable URL, thereby increasing the additional safety layer.
- Prevent the default login operation
-
function prevent_default_login_action($action) { // 如果有人嘗試使用默認(rèn)登錄操作并且他們不在自定義登錄頁(yè)面上,則重定向他們。 if ($action === 'login' && strpos($_SERVER['REQUEST_URI'], 'your-url') === false) { wp_safe_redirect(home_url()); exit; // 停止進(jìn)一步執(zhí)行。 } } add_action('login_init', 'prevent_default_login_action');Function: This function ensures that the default login operation (for example, submitting the login form) is only valid when the user is on the custom login page (YOUR-URL). If they try to log in from the default WP-Login.php page, they will be redirected to the homepage.
- Advantages: Force use your custom login URL and prevent access to the default login page.
- Custom cancellation and redirection to
-
function custom_logout_redirect() { // 注銷后,將用戶重定向到自定義登錄頁(yè)面。 wp_safe_redirect(home_url('/your-url')); // 將他們發(fā)送到自定義登錄頁(yè)面。 exit; // 停止進(jìn)一步執(zhí)行。 } add_action('wp_logout', 'custom_logout_redirect');Function: When the user cancels, this function will redirect it to your custom login URL (you-urll) instead of sending it to the default cancellation page.
- Advantages: After the cancellation of the user's custom login page after the cancellation is always to ensure the consistent user experience.
- Code function summary:
Hidden the default login page (wp-login.php), if the user tries to access it directly, then redirect it to the homepage.
Create a custom login URL (for example, yoursite.com/your-urll), which is used to display the WordPress login page.
Prevent the default login operation, unless the user is on the custom login page.
After the user is canceled, it redirects it to the custom login page.
In short, this setting makes the attacker more difficult to find and use your login page to improve security, and at the same time provide seamless experience for legal users.
Thank you for reading and look forward to sharing more content with you in the future.
Follow my other platforms:
linkedin| Medium | Bluesky
The above is the detailed content of Did you know you can secure WordPress admin URL without a plugin?. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Common problems and solutions for PHP variable scope include: 1. The global variable cannot be accessed within the function, and it needs to be passed in using the global keyword or parameter; 2. The static variable is declared with static, and it is only initialized once and the value is maintained between multiple calls; 3. Hyperglobal variables such as $_GET and $_POST can be used directly in any scope, but you need to pay attention to safe filtering; 4. Anonymous functions need to introduce parent scope variables through the use keyword, and when modifying external variables, you need to pass a reference. Mastering these rules can help avoid errors and improve code stability.

To safely handle PHP file uploads, you need to verify the source and type, control the file name and path, set server restrictions, and process media files twice. 1. Verify the upload source to prevent CSRF through token and detect the real MIME type through finfo_file using whitelist control; 2. Rename the file to a random string and determine the extension to store it in a non-Web directory according to the detection type; 3. PHP configuration limits the upload size and temporary directory Nginx/Apache prohibits access to the upload directory; 4. The GD library resaves the pictures to clear potential malicious data.

There are three common methods for PHP comment code: 1. Use // or # to block one line of code, and it is recommended to use //; 2. Use /.../ to wrap code blocks with multiple lines, which cannot be nested but can be crossed; 3. Combination skills comments such as using /if(){}/ to control logic blocks, or to improve efficiency with editor shortcut keys, you should pay attention to closing symbols and avoid nesting when using them.

AgeneratorinPHPisamemory-efficientwaytoiterateoverlargedatasetsbyyieldingvaluesoneatatimeinsteadofreturningthemallatonce.1.Generatorsusetheyieldkeywordtoproducevaluesondemand,reducingmemoryusage.2.Theyareusefulforhandlingbigloops,readinglargefiles,or

The key to writing PHP comments is to clarify the purpose and specifications. Comments should explain "why" rather than "what was done", avoiding redundancy or too simplicity. 1. Use a unified format, such as docblock (/*/) for class and method descriptions to improve readability and tool compatibility; 2. Emphasize the reasons behind the logic, such as why JS jumps need to be output manually; 3. Add an overview description before complex code, describe the process in steps, and help understand the overall idea; 4. Use TODO and FIXME rationally to mark to-do items and problems to facilitate subsequent tracking and collaboration. Good annotations can reduce communication costs and improve code maintenance efficiency.

ToinstallPHPquickly,useXAMPPonWindowsorHomebrewonmacOS.1.OnWindows,downloadandinstallXAMPP,selectcomponents,startApache,andplacefilesinhtdocs.2.Alternatively,manuallyinstallPHPfromphp.netandsetupaserverlikeApache.3.OnmacOS,installHomebrew,thenrun'bre

In PHP, you can use square brackets or curly braces to obtain string specific index characters, but square brackets are recommended; the index starts from 0, and the access outside the range returns a null value and cannot be assigned a value; mb_substr is required to handle multi-byte characters. For example: $str="hello";echo$str[0]; output h; and Chinese characters such as mb_substr($str,1,1) need to obtain the correct result; in actual applications, the length of the string should be checked before looping, dynamic strings need to be verified for validity, and multilingual projects recommend using multi-byte security functions uniformly.

TolearnPHPeffectively,startbysettingupalocalserverenvironmentusingtoolslikeXAMPPandacodeeditorlikeVSCode.1)InstallXAMPPforApache,MySQL,andPHP.2)Useacodeeditorforsyntaxsupport.3)TestyoursetupwithasimplePHPfile.Next,learnPHPbasicsincludingvariables,ech
