Take the 2-minute tour ×
WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. It's 100% free, no registration required.

I would like to rename my wp-admin folder due to some security concerns. Is it really possible?

The less it looks/is built like default WP, the harder it is to attack known vulnerabilities. Being able to rename those directories can help stop an exploit dead in its tracks.

Otto mentioned in this thread its possible using "admin_url" filter. Is it really possible? If yes can someone give me some sample code. I hope this is a useful question

share|improve this question

1 Answer 1

up vote 3 down vote accepted

For a fully-working solution, you will need to modify certain hard-coded urls in core files, which is not fun to have to do each time WP is upgraded.

One easier option is to protect the wp-admin folder with an .htaccess file. You could basically deny all IP addresses and whitelist the few IP's that you or your editors might use. You could also use HTTP AUTH to add another layer of password protection. It will prevent unauthenticated users from viewing the wp-login page.

And regarding renaming your folder, I'm not sure that it will really make your site more secure. For example, if you use any AJAX plugins, a hacker will know your admin folder location right away! And there are other simple ways to determine it as well...

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.