I uploaded a Wordpress site online but it is taking time to configure the server. In the meantime I deleted the table "users" so hackers cant access the site/backend, until I can secure the site properly at a future date. Will this work or can the site still be hacked through site.com/wp-login?
1 Answer
to answer your question yes without the user table no one will be able to login because the database holds no login information.
you may of been better off securing your /wp-login from brute fore attacks in a different way https://wordpress.org/support/article/brute-force-attacks/
i.e limiting the ip access to the login area
-
why would limiting IPs be better? That way it is possible that the login is hacked. If no one can login at all then it cannot be hacked, according to your answer. I do not understand what you are trying to say. With 1 click I prevented all logins? Or I did not and I should configure the server that I am trying to configure?– JonCommented Dec 19, 2017 at 8:06
-
securing your admin area is standard practice and something you may want to do and have in place for when your site is live so my point was yes what you have done is going to stop any logins but at some point you will have to login so how much server work is needed to protect your install, you may as well just followed standard practice because at some point you will have to do my suggestion anyway. Commented Dec 19, 2017 at 12:26
-
So your answer is yes. The bulk of your answer does not answer the question, and cannot be implemented for specific reasons. It can be confusing if you add spurious information to answers.– JonCommented Dec 19, 2017 at 13:21
-
you dont go into the specific reasons so question can not be answered in full Commented Dec 19, 2017 at 15:11
-
the question is - does removing users stop logins. You said yes. Why is that not fully answering the question?– JonCommented Dec 19, 2017 at 17:32
get_user_meta()work if there is no user table in your database?