[ad_1]
Hi all.
Been playing about with Ubuntu and managing my own server as a learning project and it made me wonder.
Would it be beneficial to make wp-admin/wp-login inaccessible unless the admin uses an SSH tunnel?
I know hiding wp-admin alone isn’t enough to protect users against brute force attacks, but rather than whitelisting IPs, I want to try this on my own personal blog.
Any thoughts?
[ad_2]