Chriswaterguy

They wouldn’t be successful because our plugin will detect that it’s a login to the wrong URL and ultimately return it a 404.

Great. And if they navigated away from the 404, to wp-admin, would they be in a logged-in state?

Sorry for the persistent questions. I’m a firm believer not only in doing security thoroughly, but also in Murphy’s Law :-).

Thanks, that’s helpful.

If the hacker got the correct login/password details, posting in this way to wp-login.php even though the login page has moved, would they successfully log in?

(I don’t want to assume.)

morestar: Actually yosh66 has got his answer. Admin > Privacy

I think for the login page it will have “<meta name=’robots’ content=’noindex,nofollow’ />” even if your blog is set to public. That’s okay – there should be a link to it from your sidebar. People don’t usually Google for a login page, I think.

I’m curious why it’s not in the WordPress repository (whatever it’s called). Is it not under an oper source/free license?

Looks promising though – I’ll give it a try.

Aha, found it – “Links” in the left sidebar in the admin section. I was looking for the wrong term.

Thanks!

whooami:

there are 2 lines of white space at the top of your blog. check your source.

Thanks – do you know how to fix it? I assume I need to edit
Main Index Template (index.php) – but when I tried removing excess line breaks from that file, it didn’t make a difference.

LenK:

even if you’re not legally obligated to do so it is still proper netiquette IMHO… You could always do something like “Based on blah theme by blah”

Agreed. I currently have:

“Thirteen” by Becca Wei, https://beccary.com.

…after the Theme info fields in the style.css. Does that seem reasonable?

The original website for the theme has been down for at least months. But I got it through WordPress so I gather that it’s on a GPL compatible license.

That’s great, thanks! And at least now it should show up on Google. ??