REALLY Protect your Wordpress instalation(s)

[cziv]

If you run Wordpress, then you should do the following if you want to be safe and also lower your resources usage.

 

1. BLOCK wp-login.php if no users are using it for login/registration. And just whitelist your IP(s).

 

<Files wp-login.php>
order deny,allow
Deny from all
# whitelist IP address
allow from your.ip.address.here
</Files>

 

or (or both)

 

2. Best thing to do is to install ZB BLOCK from here:

 

http://www.spambotsecurity.com/zbblock.php

 

Needs only ONE line of code on top of your wp-load.php and that's it. You can't imagine how well it works and it is completely free. Almost every attack or hostile bot is stopped before entering Wordpress core. Also one installation can control all your websites in your plan.

[brent]

#1 is too much of a hassle if your IP is dynamic