[wordpress插件] Block wp-login阻止wp登录

Block Access to wp-login.php

阻止访问wp-login.php

This plugin does the following:

此插件执行以下操作：

1) Locates wp-login.php in your WordPress installation and duplicates it

1）在您的WordPress安装中找到wp-login.php并将其复制

2) Locates .htaccess and inserts lines to block the default wp-login.php and creates a new secret address to use for legitimate login

2）找到.htaccess并插入行以阻止默认的wp-login.php，并创建一个新的秘密地址以用于合法登录

3) Allows you to reduce load on the server by optionally blocking admin-ajax.php, wp-cron.php, xmlrpc.php and robots.txt

3）允许您通过选择性地阻止admin-ajax.php，wp-cron.php，xmlrpc.php和robots.txt来减少服务器上的负载

When installed your server will return “403 Forbidden“ when attempts are made to access the default wp-login.php file.

在安装后，尝试访问默认的wp-login.php文件时，服务器将返回“ 403 Forbidden”。

This has two benefits;

这有两个好处：

it prevents hackers from using brute force methods to hack your website and it reduces the load on the server when such brute force attacks are launched on your site as WordPress isn’t run at all.

它可以防止黑客使用蛮力方法来入侵您的网站，并且可以减少由于根本不运行WordPress而在您的站点上发起这种蛮力攻击时服务器上的负载。

Easily prevent access to the default wp-login.php file:

轻松阻止访问默认的wp-login.php文件：

1) Install Block wp-login automatically or by uploading the ZIP file.

1）自动安装或通过上传ZIP文件来安装Block wp-login。

2) Activate the plugin through the ‘Plugins’ menu in WordPress.

2）通过WordPress中的“插件”菜单激活插件。

3) Once activated, visit “Settings – Permalinks” in the admin menu.

3）一旦激活，请访问管理菜单中的“设置-永久链接”。

4) At the bottom of the page tick the box next to “Block wp-login”

4）在页面底部，选中“阻止wp登录”旁边的框。

5) Make sure you make a note of the new address you will need to use to sign in and confirm

5）确保记下用于登录并确认所需的新地址。

6) Choose if you would also like to block admin-ajax.php, wp-cron.php, xmlrpc.php and robots.txt

6）选择是否还要阻止admin-ajax.php，wp-cron.php，xmlrpc.php和robots.txt

6) Save the settings

6）保存设置

Although this plugin now detects when WordPress has been upgraded and re-installs itself, when upgrading WordPress core, you should still make sure you deactivate this plugin first.

尽管此插件现在可以检测到WordPress何时升级并重新安装，但是在升级WordPress核心时，您仍应确保先停用此插件。