{"id":5258,"date":"2014-02-26T14:18:25","date_gmt":"2014-02-26T13:18:25","guid":{"rendered":"https:\/\/www.creativejuiz.fr\/blog\/en\/?p=5258"},"modified":"2015-07-27T13:16:20","modified_gmt":"2015-07-27T11:16:20","slug":"wordpress-plugin-sf-move-login","status":"publish","type":"post","link":"https:\/\/www.creativejuiz.fr\/blog\/en\/wordpress-en\/wordpress-plugin-sf-move-login","title":{"rendered":"WordPress Plugin: SF Move Login"},"content":{"rendered":"

WordPress is the most popular CMS around the world, and its authentification page to access your administration area is really really easy to find, because I just have to add \/wp-admin<\/code> at the end of your domain to access the admin of a WordPress installation. Ok, so? Ready to move on?<\/p>\n

Spice up quotidian<\/h2>\n

There is an issue! The problem with this easy-to-find login page is that our little brut-forcer bots who are trying to authenticate themself with “admin” username (this is not yours? I hope so…) can put down your hosting\/server (DDOS, seen recently!).
\nAllowing you to change this authentification page is a good point for your website security. It become possible with this plugin by Gr\u00e9gory Viguier<\/a>.<\/p>\n

What is SF Move Login doing?<\/h2>\n

This plugin allows you to change the login page, the logout page, the reset-password page, and the register page URL of your WordPress installation.
\nFor example in my website, instead of https:\/\/www.creativejuiz.fr\/blog\/wp-login.php<\/code>, I will register as login page https:\/\/www.creativejuiz.fr\/blog\/lol-gin\/<\/code>
\nBut it’s not only a redirection, the access to the https:\/\/www.creativejuiz.fr\/blog\/wp-login.php<\/code> page will be forbidden. You will be able to customize this behavior via the settings page of the plugin.<\/p>\n

Why should I use SF Move Login ?<\/h2>\n

The first reason that can jump out at you is about aspect of URLs:\u00a0 easier to remember,\u00a0 more logical for some projects (with naming convention, for example), and who knows what.<\/p>\n

The best usefulness of the plugin, to me, is the fact that the login page (and the others) are moved to another URL. It’s a very good point, because the brut-forcer bots will never find by themself your authentification page. It’s a real brake for those bots, and an advantage for your website security.<\/p>\n

\"\"<\/p>\n

How to use it?<\/h2>\n

Install the plugin like any WordPress plugin, then activate it. That’s all!
\nIf you need to customize the URLs (and I advise you to do so), find the settings page of the plugin inside the Settings main menu of your admin.<\/p>\n

The little extras<\/h2>\n