Khushal Login Path Guard

Khushal Login Path Guard is a WordPress security plugin that allows you to change your default login URL and protect your site from common attack vectors. The plugin blocks brute-force attempts, prevents user enumeration, secures sensitive files, and hides WordPress information from potential attackers. All blocked paths display 404 errors (Stealth Mode) instead of redirects, making your site invisible to attackers. Features Login Protection:

• Blocks 17+ common brute-force login paths
• Custom login URL (only you know the path)
• Shows 404 error instead of redirect (no hints to attackers)
• Protects /wp-admin, /login, /wp-login.php and more Advanced Security:
• Blocks XML-RPC (prevents brute-force via API)
• Prevents user enumeration via REST API
• Blocks author page enumeration (?author=1)
• Protects wp-config.php and sensitive files
• Blocks direct access to wp-includes PHP files
• Removes WordPress version information Security Headers:
• X-Frame-Options (prevents clickjacking)
• X-Content-Type-Options (prevents MIME sniffing)
• X-XSS-Protection (XSS attack protection)
• Referrer-Policy (privacy protection)
• Permissions-Policy (feature restriction) User-Friendly:
• Easy settings interface
• One-click URL copy
• Normal functionality for logged-in users
• Does not block AJAX requests
• Clean admin interface

Security Benefits

1. Brute Force Protection - 15+ login paths blocked
2. XML-RPC Disabled - Prevents API-based attacks
3. User Enumeration Blocked - Hides usernames from attackers
4. Sensitive Files Protected - wp-config.php, .htaccess secured
5. Security Headers - Industry-standard HTTP headers
6. WordPress Hidden - Removes version and generator tags

इस्तेमाल करना बेहद आसान है

1. Plugin activate करें
2. Settings > Login Path Security में जाएं
3. अपना custom login path enter करें
4. Settings save करें
5. नया login URL use करें

1. Upload the plugin folder to /wp-content/plugins/ directory
2. Activate the plugin through the 'Plugins' menu in WordPress admin
3. Go to Settings > Login Path Security to configure

OR

1. Go to Plugins > Add New in WordPress admin
2. Search for "Khushal Login Path Guard"
3. Install and Activate

2.4.1

• Fixed wp-admin redirect issue - now shows 404 when logged out
• Added multiple layers of protection for wp-admin access
• Improved logout functionality
• Enhanced user experience

2.4.0

• Changed wp-admin behavior - shows 404 instead of redirect when logged out
• Improved security by preventing information leakage
• Better stealth mode implementation

2.3.3

• Fixed dashboard access after login
• Removed wp-admin from directory blocking
• Improved logged-in user detection

2.3.2

• Fixed wp-admin access timing issue
• Changed hook from 'init' to 'wp' for better authentication detection
• Improved compatibility

2.3.1

• Fixed logout functionality
• Added proper logout URL filtering
• Improved redirect handling

2.3.0

• Added logout redirect to custom login page
• Enhanced logout URL handling
• Improved user experience

2.2.5

• Fixed wp-admin directory access
• Removed wp-admin from blocked directories list
• Improved functionality for logged-in users

2.2.4

• Fixed login.php blocking
• Added admin-login.php and adminlogin.php to blocklist
• Updated blocked paths count

2.2.3

• Fixed undefined variable warnings
• Initialized all required wp-login.php variables
• Improved login page compatibility

2.2.2

• Added comprehensive login path blocking
• Added /login, /signin, /administrator paths to blocklist
• Updated admin interface

2.2.1

• Changed redirect behavior to show 404 error
• Removed redirect URL setting
• Enhanced security by hiding WordPress

2.2.0

• Added XML-RPC blocking
• Added REST API user enumeration protection
• Added author page enumeration blocking
• Added sensitive file protection
• Added wp-includes PHP file protection
• Added comprehensive security headers
• Expanded blocked login paths

2.0.0

• Major security update
• Added multiple security features
• Enhanced protection mechanisms

1.0.0

• Initial release
• Custom login path functionality
• wp-login.php and wp-admin protection
• Admin settings interface
• Basic security features