I've decided to take the advice of protecting the
/wp-admin directory using .htaccess on a website which keeps getting hacked.
Whenever I upload .htaccess to
/wp-admin, my browser says
/wp-admin has a redirect loop.
AuthUserFile /.../.htpasswd AuthType Basic AuthName “restricted” Order Deny,Allow Deny from all Require valid-user Satisfy any
A server redirection checker says there is a 302 (Moved Temporarily) redirect from
If I delete
/wp-admin/.htaccess, the redirect checker says there is still a 302 redirect from /wp-admin, but now it is to
Bare in mind the server redirect checker is not logged into Wordpress.
Why does the presence of
/wp-admin redirect to itself?
PS - I am also using
Better WP Security, but this made no changes to the site's
/.htaccess in terms of
/wp-admin. i.e. I didn't cloak