• I had some failed login attempts, despite the fact, that I was using WPS Hide Login. So I created a link with 19 characters with the help of a password generator. It took only a few minutes and I got the next message about 9 failed login attempts. Is it possible to find the link somewhere in my installation? I was thinking that it would only be stored in the database.
    What should I do?

    The page I need help with: [log in to see the link]

Viewing 3 replies - 16 through 18 (of 18 total)
  • The slug is viewable on the index page – at least it is on mine – https://petergreenwell.com right down the bottom (search for logout)

    @iiiiiiiv Yes, the slug is visible to people who are logged in – otherwise they could not have logged in in the first place.

    But it is not known to anyone who does not have the permission to log in.

    You are also not blocking xmlrpc, which will allow hackers to bypass the plugin.

    You need to add this to the bottom of your .htaccess file:

    # Block WordPress xmlrpc.php requests
    <Files xmlrpc.php>
    order deny,allow
    deny from all
    </Files>
    Thread Starter Frank Spade

    (@spade)

    I already did it and it works, thank you!

Viewing 3 replies - 16 through 18 (of 18 total)
  • The topic ‘Is it possible to find the link somewhere?’ is closed to new replies.