JGA

I’ll See if it works, otherwise I will just disable the Filter suspicious query strings option for now.

Thanks so far.

Hi Barrettbass8,

What I mean with the salt generator, is that I use it as a “strong random password generator” as well as for it’s intended use off course.

The “Automatically ban “admin” user” is the last option of the brute force protection section.

Glad I could help.

@dwinden

To add to that, doesn’t commenting the string you mentioned above pretty much do the same as not enabling “Filter Suspicious Query Strings in the URL” option?

Is it possible to just enable “request” somehow? (allowing the calendar to work, while keeping things as much secure as possible)

Hi Chris,

If you don’t make any manual changes to the folder name (wp-admin that is), it should work fine even after a WP update. I’ve got WP and iThemes running on a few sites and so far none that use the “hide backend” feature (all of them) have had problems after updating WP to a newer version.

So if you update from version 4.3.1 to 4.4 and your backend url was changed using the hide backend feature from example.com/wp-admin to example.com/youllneverguessmyadminpage, it should remain example.com/youllneverguessmyadminpage.

Hope that answers your question.

Hi Barrettbass8,

Do you use the hide backend feature?
As an addition to the suggestions you already make, I would enable it if you haven’t already (preferably to something not admin related). It can’t completely prevent brute-force attacks but makes you login page at least a bit more difficult to find, specially for automated attacks.

As a suggestion for the password: I always use a string form the WordPress salt generator; it’s always random and I’d say that it’s pretty difficult to brute-force.

There should also be an option “immediately ban users that try to log in use the default “admin” username” (if you’re not actually using that, which is best practice anyway).

Hi Chrystl,

I hadn’t, works like a charm, thanks.

The permalink setting are set to default, as for some reason using the “pretty” permalinks results in 404 pages for every page.

The next page for the gallery works now so thanks for fixing that.

I will try it on another wp installtion and see how it works there.

So it was PayPal.
Ok Thanks, added a sandbox account, and it works now. ??