外掛說明

Secure Login Shield helps you lock down your WordPress login page.
By default, WordPress exposes /wp-login.php and /wp-admin/. Bots hammer these URLs every day.

This plugin gives you a private login slug (e.g. /dragon-lair) and hides the default login endpoint:

Defaults to /wp-login.php until you change it.
Once changed, only your custom slug works.
Direct access to /wp-login.php shows a 404 Not Found (stealth mode).
Logged-out visitors hitting /wp-admin/ are redirected to the homepage.
Deactivate the plugin everything reverts to normal.

Made with ❤️ by Ben Treder

Features

Private login slug (e.g. /dragon-lair, /control-center, /secret-gate)
Stealth 404 protection: Bots hitting /wp-login.php see “Not Found”
Homepage redirect: /wp-admin/ (logged out) homepage
Easy settings page under Settings Secure Login Shield
Safe activation/deactivation: no core hacks, auto-reverts when disabled

Contribute & Support

Website: BenTreder.com
Author: Ben Treder
Issues & Feature Requests: Please open a ticket on BenTreder.com
Like this plugin? ⭐ Leave a review and help spread the word!
☕ Support development: Buy Me a Coffee

螢幕擷圖

Settings page showing the default login slug (/wp-login.php)
Settings page with a custom private slug (/dragon-lair)

安裝方式

Upload the secure-login-shield folder to the /wp-content/plugins/ directory or install via Plugins Add New Upload.
Activate the plugin through the “Plugins” menu in WordPress.
Go to Settings Secure Login Shield.
Set your private slug (example: dragon-lair).
Go to Settings Permalinks Save Changes (refresh rewrite rules).
If you use a caching plugin or CDN, clear cache to avoid stale redirects.
Log in using https://yoursite.com/dragon-lair.

Important: Bookmark your new login URL! If you forget it, you’ll need to disable the plugin via FTP or database.

常見問題集

Will this break my site?: No. By default it uses /wp-login.php until you change it. Deactivating the plugin instantly reverts WordPress to normal behavior.
Can I completely block /wp-login.php?: Yes. Once you set a slug, /wp-login.php (and actions) return a 404 Not Found.
What if I forget my private slug?: Deactivate the plugin via FTP (delete or rename secure-login-shield). WordPress will go back to /wp-login.php.
Does this work with caching plugins or CDNs?: Yes, but after changing your slug, you should clear cache/CDN to avoid serving stale redirects.

使用者評論

urosjovanovic 2025 年 9 月 22 日

Secure Login Shield is a great plugin! Easy to use and very effective at protecting your site.

閱讀全部 1 則使用者評論

參與者及開發者

以下人員參與了開源軟體〈Secure Login Shield〉的開發相關工作。

Ben Treder

將〈Secure Login Shield〉外掛本地化為台灣繁體中文版

對開發相關資訊感興趣？

任何人均可瀏覽程式碼、查看 SVN 存放庫，或透過 RSS 訂閱開發記錄。

變更記錄

1.3.0

Rebrand to Secure Login Shield by Ben Treder
Default slug remains /wp-login.php (safe on first install)
Added activation notice: Save permalinks + clear cache after activation
Stealth 404 mode enforced when custom slug is chosen
Homepage redirect for logged-out visits to /wp-admin/

1.2.0

Added stealth 404 mode
Improved security enforcement

1.1.0

Redirected /wp-admin/ homepage for logged-out users

1.0.0

Initial release with custom login slug + wp-login.php block