We have our WP installs in folders on the server. We created folders called wp-admin and login to thwart hackers. However, incredulously, when you type in /wp-login.php it REDIRECTS to our mysite.com/folder.
I cannot believe WP is making it this easy.
How to disable anyone accessing wp-login.php through the address bar?