Beschrijving
GhostLock Hide Login is a lightweight WordPress security plugin that combines login URL protection and automatic brute-force attack prevention in a single plugin.
Unlike many security plugins that require manual configuration, GhostLock Hide Login starts protecting your website immediately after activation.
Features:
- Hide wp-login.php
- Protect wp-admin access
- Change the default WordPress login URL
- Automatic brute-force attack protection
- Automatically block suspicious IP addresses
- Detect attacker countries
- Security activity logs
- Whitelist trusted IP addresses
- Redirect attackers to custom 404 pages
- Show custom blocked access pages
- Lightweight and easy to use
- No complex configuration required
GhostLock Hide Login helps reduce unauthorized login attempts and improves WordPress website security with minimal setup.
Privacy
GhostLock Hide Login uses the third-party service ipwho.is (ipwhois.io) to detect attacker countries.
Data Sent:
– Visitor IP address
Purpose:
– Country detection for security monitoring and attack logging
Service URL:
https://ipwhois.io/
Terms of Service:
https://ipwhois.io/terms
Installatie
Install from WordPress Admin Dashboard
- Go to Plugins Add New in your WordPress admin dashboard.
- Click Upload Plugin.
- Upload the
ghost-hide-login.zipfile. - Click Install Now.
- Activate the plugin through the Plugins screen.
- Go to Settings GhostLock Hide Login.
- Configure your custom login URL and security settings.
Manual Installation
- Upload the plugin files to the
/wp-content/plugins/ghost-hide-logindirectory. - Activate the plugin through the ‘Plugins’ screen in WordPress.
- Go to Settings GhostLock Hide Login.
- Configure your plugin settings.
FAQ
-
Will this hide wp-login.php?
-
Yes. Direct access to wp-login.php and wp-admin can be restricted and protected using your custom login URL.
-
Does the plugin automatically protect against brute-force attacks?
-
Yes. GhostLock Hide Login automatically limits suspicious login attempts and blocks malicious IP addresses after activation without additional setup.
-
Can I unblock IPs manually?
-
Yes. You can manage and remove blocked IP addresses from the plugin settings page.
-
Does this plugin use third-party services?
-
Yes. Country detection uses the ipwho.is (ipwhois.io) service over HTTPS. Results are cached for 24 hours per IP address.
Beoordelingen
Er zijn geen beoordelingen voor deze plugin.
Bijdragers & ontwikkelaars
“GhostLock Hide Login” is open source software. De volgende personen hebben bijgedragen aan deze plugin.
Bijdragers
Vertaal “GhostLock Hide Login” naar jouw taal.
Interesse in de ontwikkeling?
Bekijk de code, haal de SVN repository op, of abonneer je op het ontwikkellog via RSS.
Changelog
1.0.4
- Fix Plugin Check warnings by prefixing local variables in the admin settings page.
- Shorten the readme short description to the WordPress 150-character limit.
1.0.3
- Stop trusting spoofable forwarding headers for client IP detection.
- Use REMOTE_ADDR by default for brute-force and country-cache keys.
- Add the
ghost_login_client_ipfilter for trusted reverse-proxy integrations.
1.0.1
- Initial release
- Hide wp-login.php
- Protect wp-admin
- Custom login URL support
- Automatic brute-force protection
- Automatic IP blocking
- Country detection
- Security logs
- IP whitelist
- Custom 404 redirect page
- Custom blocked page support