Printable View
Hi,
I noticed that since few days ago, someone trying to access my WP site using my custom User - before the attempts where with the regular admin, site url and such...
I've created a new user and disabled the previous one, but my question is how someone discovered it? (it doesn't appear as the author in posts).
Thank you
YOAST SEO Plugin has a way to hide it, but if you have ever made a post via that user then its easy for someone to find.. The easiest option is to use a Strong password.. When I say stron I mean long, with symbols, characters..
Well, from the wonderpunter's post you already know how it is possible to find the wp user name. Also I guess you know some security plugins existent on the net, so I'll mention only one very usefull tool from "all in one wp security" plugin; Brute Force - Rename Login Page Feature. By this feature you can change the login URL, for example www. xxxx.com/wp-login to www. xxxx.com/choosewhatyouwant.
Regards.
Is it so easy? even if it's not used as the nick name or as author name?
I've had it happen a few times, usually from IPs in Russia, China or the Ukraine.Quote:
Is it so easy? even if it's not used as the nick name or as author name?
Yes, it's very easy, even if it's not used as the nick or author name. Try to find my site's login page (it was the doman name + /wp-login.php), it will redirect you to another page of the site.Quote:
Originally Posted by MMM
I think he was saying they had the username of the admin, not the login page location..
If so make sure your login name is not used for any aff accounts / email ext...
I wouldn't even make the wp-login.php file available in order to minimize the number of hack attempts.
You can also rename the WP login page too, I did this for my site but it can still be accessed, just another precaution.
Could they of guessed it? Is it added to your email? it depends how obvious it is.
You can also password protect the /wp-admin/ folder.
Yep, considering to do that.Quote:
Originally Posted by sweetbet
no, not obvious at allQuote:
Originally Posted by WagerPod