DrMosko

hello,
the test page wont show the correct times – maybe in the future, the only purpose of the test page is to show u how the site will look like when its closed, so u be able to add or disable css classes.

about the second comment – pls explain to me what u trying to do.

the isuue has been fixed in version 2.0

the isuue has been fixed in version 2.0

wp_loaded action is triggered in admin and in frontend no matter what user visits the site, it is triggered even for guest users.

by adding this to config.php

add_filter('xmlrpc_enabled', '__return_false');

no attacks/bots tried to login anymore!!!

thanks to all of u guys

so if i only update the wordpress site content from the site itself, there should be no problem.

by the way no attacks yet ??

hello digico
Im still testing it, ill get back to u with that,

can u pls explain to me what is xml-rpc for?

now i tried to disable xmlrpc
by adding this to config.php

add_filter('xmlrpc_enabled', '__return_false');

I got another mail “A lockdown event has occurred due to too many failed login attempts or invalid username:
Username: Admin
IP Address: 195.154.243.31

IP Range: 195.154.243.*

Log into your site’s WordPress administration panel to see the duration of the lockout or to unlock the user
” after the all changes

Great tx, did it solve the attacks for u?

i created htacces file in wp-admin folder with this code:
order deny,allow
allow from *.*.*.*
deny from all

@juggledad
I found that in the root folder www/public_html there are two files that may be the problem and grant access to all:

wp-signup.php
wp-login.php

there for limit the access as so:

<Files wp-login.php>
order allow,deny
deny from all
allow from <ur ip>
</Files>
<Files wp-signup.php>
order allow,deny
deny from all
allow from <ur ip>
</Files>

tx,
how can i block the whole folder wp-admin?

@ songdogtech

we tried this method, but the problem is Hackers bypass .htaccess security by using GETS rather than GET

@juggledad

it’ll be a lot of blacklisting the hackers change their ip, so purchase static ip and allow only that and deny all the others