I have about 50 websites, most of which have no users who would need to use password reset. I have been having numerous attacks of people trying to login to my sites using password reset so I added the following to my functions.php files for each site.
function remove_lostpassword_text ( $text ) {
if ($text == ‘Lost your password?’){$text = ”;}
return $text;
}
add_filter( ‘gettext’, ‘remove_lostpassword_text’ );
This has improved the situation but I am still having attacks, especially on my multisite sub-domains (link to page needing help).
I use custom login page URLs so I’m not sure how they are finding the password reset page.
Do you have any suggestions?
Thank you
The page I need help with: [log in to see the link]
