Hiding the logon page

There seems to be a few ways to do this.

One of the more interesting ones seems to be to password protect wp-login.php which while I’m sure it would accomplish what I want, my web hosting company doesn’t allow this. There policy is only for folders.

Another way to do this seems to use a plugin which will, “Hide” the backend. Meaning you can’t browse to domain/wp-login.php anymore and get the logon page. Instead you surf to domain/login and it knows to send you the logon screen.

The plugins that do this work except for the backdoor logon page.

Surfing to domain/wp-login.php?loggedout=true will still give you a logon page.

I was wondering why after I setup a plugin and used a logon page some people “Just Knew” how to still get a logon page for my site and are still trying to use it to logon, with admin no less. At least they aren’t all that bright.

So how does one stop access to domain/wp-login.php?loggedout=true so that only the slug works, or is there still yet another way to accomplish this or go to yet another url which will also allow a backdoor type logon screen?

thanks in advance,
alan