Protect WordPress Admin

Defeat attacks from eating up your server’s CPU and prevent attackers from getting access to your WordPress wp-admin directory with one simple htaccess entry.

If you don’t have a .htaccess file (yes that starts with a dot in front of htaccess) upload a new one.  If you do, add this entry to the top of your .htaccess file:

site.com/wp-admin/.htaccess

#Begin block
Order Deny,Allow
Deny from all
Allow from 55.55.55.55
Allow from 44.44.44.44
#End block

Replace the example IPs with your own. Two examples are provided to illustrate how to add more than one IP. These ips are real in general and are only provided as an example. Use of improper IPs will result in a server producing an internal error, such as > Allow from 444.444.444.444.

Keywords: attack, access, admin, CPU, details
  • 4 Users Found This Useful
Was this answer helpful?

Related Articles

htaccess and WordPress

We recommend the following to be included on your .htaccess file.order allow,denydeny from all#...

WordPress Cron-Scheduled Posts

To schedule your posts, add this simple crontab entry to your servers crontab entry:*/1 * * *...

WordPress Multisite Help

We highly recommend performing a back up of your site and ALL files PRIOR to creating your...

WordPress secure mode

Enjoying the peace of mind running WordPress in secure mode on the new M3XS 5 series...

WordPress User Roles

I often get these confused and wanted a quick how to for a self reminder.  Hopefully, this...