Password Reset Security Problem | WordPress.org

[ad_1]

I have about 50 websites, most of which have no users who would need to use password reset. I have been having numerous attacks of people trying to login to my sites using password reset so I added the following to my functions.php files for each site.

function remove_lostpassword_text ( $text ) {
if ($text == ‘Lost your password?’){$text = ”;}
return $text;
}
add_filter( ‘gettext’, ‘remove_lostpassword_text’ );

This has improved the situation but I am still having attacks, especially on my multisite sub-domains (link to page needing help).

I use custom login page URLs so I’m not sure how they are finding the password reset page.

Do you have any suggestions?

Thank you

The page I need help with: [log in to see the link]

 

This site will teach you how to build a WordPress website for beginners. We will cover everything from installing WordPress to adding pages, posts, and images to your site. You will learn how to customize your site with themes and plugins, as well as how to market your site online.

Buy WordPress Transfer