Login page hint to multisite

Is there a way to disable these hints to my multisite domain?

Not at this time, though we’re talking about adding in some filters. No sooner than 4.2 if that. Though why do you care?

Is there a way to disable the whole login-page for single sites?

No. Because then how will people log in?

You COULD redirect them but if you ever use mapped domains or subdomains, cookies would become a nightmare.

Oh wait!

I already set up a wp-multisite with subfolders (www.mymultisite.com) (Domain Mapping Plugin activated)

Yeah. Don’t. You will, one day, have a situation where you’re logged in on domain.com and logged OUT on mymultisite.com and if you disable the login pages, you will cry.

Hi,

thanks Ipstenu for your fast reply.

Is there a way to disable these hints to my multisite domain?

Not at this time, though we’re talking about adding in some filters. No sooner than 4.2 if that. Though why do you care?

I dont want hints to my Multisite domain, because if someone want to hack my website and he will find my multisite, he will have access to all websites. Thats why I care about the hints. I want my multisite domain so much invisible I can.

Is there a way to disable the whole login-page for single sites?

No. Because then how will people log in?

You COULD redirect them but if you ever use mapped domains or subdomains, cookies would become a nightmare.

Oh wait!

I already set up a wp-multisite with subfolders (www.mymultisite.com) (Domain Mapping Plugin activated)

What do you think about these lines in my htaccess?

RewriteCond %{HTTP_HOST} ^www.mydomain.com$ [NC]
RewriteRule ^(wp-login.*)$ 404.php [R=404,L]

RewriteCond %{HTTP_HOST} ^www.mydomain.com$ [NC]
RewriteRule ^(wp-admin.*)$ 404.php [R=404,L]

I can add the lines for every single domain or delete them if I need the admin access to a single domain.

Regards
Thomas

No one cares.

No, really. Hackers? DO NOT care.

You have two types of attacks to worry about:

1) BruteForce attacks, who will hit your site with their attack without looking to see if you’re on WordPress at all. Seriously. I work for a Webhost. They’re indiscriminate.

2) People who hate you, who are attacking you directly.

What you’re doing? Won’t impact either of them. I speak from experience. They just don’t care. If they hate you enough, they will use every script in the book. ‘Hiding’ the fact you’re on WP or Multisite is a waste of your time and effort. Don’t bother.

A better .htaccess would be this BUT…

RewriteCond %{HTTP_HOST} ^www.mydomain.com$ [NC]
RewriteRule ^(wp-login.php|wp-admin)$ 404.php [R=404,L]

Congratulations. Now you can’t get into wp-admin either ??

Like I said. Don’t.

I wrote https://halfelf.org/2013/wp-login-protection-htaccess/ about how to protect your login via .htaccess.

Hi Ipstenu,

ok you convinced me.
Ok I think i can rest easy now. ??

Regards and thanks for your reply.

Regards
Thomas