DevOrbit Login Shield
| 开发者 | nitspatel |
|---|---|
| 更新时间 | 2026年7月29日 15:06 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
/wp-login.php to a slug you choose, such as /my-login/. Requests to wp-login.php, and requests to /wp-admin/ from anyone who is not logged in, are redirected to the home page (or shown a 404, your choice) instead of reaching a login form.
This does not change any core files, database table, or rewrite rules. It intercepts the request early and serves WordPress's own login logic at your chosen URL, so every feature of the normal login screen, including lost password, registration, and logout, continues to work exactly as before, just at a different address.
Features
- Choose any custom slug for your login page.
- Direct requests to wp-login.php are blocked, and wp-admin is blocked for logged-out visitors.
- Blocked requests are intercepted before WordPress can redirect to the login screen, so your custom slug is never exposed in a Location header.
- Optionally removes the "Log in" and "Register" links themes show to logged-out visitors, so the custom URL stays out of your public HTML.
- Choose whether blocked requests are redirected home or shown a 404.
- Logged-in users, AJAX, cron, and WP-CLI are never affected.
- No rewrite rules, no .htaccess changes, no database schema changes.
- Settings are removed cleanly on uninstall.
/wp-login.php by default. It is not a replacement for strong passwords, two-factor authentication, or a login rate-limiting plugin, and it should be used alongside those, not instead of them.
安装:
- Upload the
devorbit-login-shieldfolder to/wp-content/plugins/, or install directly through Plugins > Add New in your WordPress admin. - Activate the plugin through the Plugins screen.
- Go to Settings > DevOrbit Login Shield and choose your custom slug.
- Decide whether to keep public login links, using the "Public login links" setting on the same screen.
- Bookmark the new login URL shown on that screen before navigating away.
常见问题:
I got locked out. How do I get back in?
Connect to your site via FTP/SFTP or your hosting file manager and delete or rename the devorbit-login-shield folder inside /wp-content/plugins/. This deactivates the plugin immediately and restores normal access to /wp-login.php and /wp-admin/.
Why has the "Log in" link disappeared from my site?
Because the "Public login links" setting is on. Those links are generated from your login URL, so any page that renders one, such as the Meta widget or a comment form set to require registration, would print your custom URL in its HTML for anyone to read. With the setting on, the links are removed instead. Turn it off under Settings > DevOrbit Login Shield if your site needs a visible login link.
Do password-protected posts still work?
Yes. The password form posts to wp-login.php?action=postpass, which only sets a cookie and redirects, so that one request is allowed through. It never renders a login form.
Does this work with multisite?
It works on a per-site basis. Network admin (/wp-admin/network/) access is not restricted by this plugin.
Will this break plugins that use AJAX or handle form submissions while logged out?
No. Requests to admin-ajax.php and admin-post.php are always allowed through, whether or not the visitor is logged in.
Does this change my database or add rewrite rules?
No. It stores two small options (your chosen slug and your preferred blocked-request behaviour) and removes them automatically when the plugin is deleted.
更新日志:
- Initial release.