Hide wp-admin and wp-login

Hi,

S2Member is working great on my site, and I’m about to install it for a new client as well.
http://911discounts.ca

Regarding security issues, I’m wondering if there is an S2Member setting to hide wp-admin and wp-login as well.
Doesn’t make sense to have both. (Unless there’s a benefit I’m not aware of)

Thanks

Hello Derek, thanks for your inquiry.

wp-login and wp-admin are required by WordPress, wp-admin serves as the home of the dashboard, in a way it’s where you go once you log in as an admin. wp-login is what WordPress uses to login the user to his account, you cannot disable this, but you can ignore it by using a login widget or something of that sort.

One note about s2Member for your client, if you’re gonna install the pro version, please remember that the client has to have his own s2Member Pro license.
http://www.s2member.com/prices/#s2-terms-license-types

Hope this helps. :)

• This reply was modified 4 years, 9 months ago by  Cristián Lávaque.

Can you suggest a plugin that hides wp-login that does not conflict with S2Member?

Hi Derek.

I don’t know if there are plugins that do that, haven’t searched for them, but I don’t think they’d conflict with s2Member.

You could create a redirection away from wp-login.php using .htaccess with mod_rewrite. The problem is that even if you have a login widget and a registration form elsewhere, WordPress only provides the lost password recovery from [hilite mono]wp-login.php?action=lostpassword[/hilite], so keep that in mind to leave it avaialble there or make it available some other way.