[ad_1]
We have a regular monolithic WordPress that we use for Ecommerce (Woo). We are coding a Headless version made with ReactJS + NextJS.
Is there a way to turn OFF the Wp-Admin and turn it back on when we need to access it? I want to prevent hackers and bad people from doing naughty things. I know there are many security plugins.
I wonder if we could code a script to toggle Wp-Admin on and off from our NextJS app.
Any tips would be great 🙂
[ad_2]
Disabling the admin interface in the UI wouldn’t stop hackers from attempting to send HTTP requests with admin credentials to the WordPress server directly.
If you control the web server itself you could set up a separate route for the /wp-admin url that just returns an HTTP 403 or something. But of course, a hacker could potentially change your web server configuration as well.
Basically, there are no shortcuts to security. If a hacker can get ahold of privileged user credentials then it’s too late.