Linux 软件免费装

在这里免费安装WordPress以及其他软件

Banner图

Mask My Admin - WordPress Login Security & URL Protection

开发者 dropalshosting
更新时间 2026年3月28日 01:16
捐献地址: 去捐款
PHP版本: 7.4 及以上
WordPress版本: 6.9
版权: GPLv2 or later
版权网址: 版权信息

标签

custom login login security secure login hide wp-admin whitelist IP

下载

1.2.2 1.2.3 1.2.0 1.2.1

详情介绍:

MaskMyAdmin is a lightweight WordPress plugin designed to enhance your login page security by: – Replacing the default wp-admin and wp-login.php URLs with a custom login path of your choice – Enforcing IP-based access controls for the WordPress dashboard and login screen – Preventing unauthorized access or brute-force attempts by obscuring default login endpoints Designed for site owners and developers who want to hide their admin panel from bots, attackers, or curious users. Whether you're running a blog, WooCommerce store, or enterprise WordPress install — MaskMyAdmin gives you a simple, intuitive way to lock down your admin entry points. Features:

屏幕截图:

  • IP whitelist management with proxy/CDN configuration
  • Activity log showing login attempts and settings changes

升级注意事项:

1.2.0 Critical security update. Fixes IP spoofing vulnerability, removes debug backdoor, and adds activity logging, email notifications, WP-CLI support, and progressive brute-force protection. 1.2.1
  • Updated plugin title for improved clarity and SEO.
1.2.2
  • Fixed character encoding issue in plugin title.

常见问题:

How do I change the admin URL?

After activating the plugin, go to MaskMyAdmin in the admin menu and enter your desired login slug (e.g., my-login). Your admin URL will become yourdomain.com/my-login.

What happens to wp-login.php and wp-admin?

Both wp-login.php and /wp-admin access will redirect to the homepage or a custom URL (configurable), effectively hiding them from bots or attackers.

How do I enable IP whitelisting?

Under the plugin settings (Advanced Security tab), you can enable IP whitelisting and enter allowed IP addresses. Only visitors from these IPs will be able to access the login page.

I'm behind Cloudflare / a proxy. How do I get the correct IP?

Go to Advanced Security → Proxy / CDN Configuration and select the appropriate header for your setup (e.g., "Cloudflare" for CF-Connecting-IP).

What if I get locked out?

You have several recovery options:

  1. WP-CLI: Run wp maskmy disable to disable all protections
  2. wp-config.php: Add define('MASKMY_DISABLE', true); to bypass the plugin entirely
  3. FTP: Rename the plugin folder via FTP or your hosting File Manager

Does this work with Nginx?

Yes. The plugin uses PHP for all URL masking and IP enforcement, which works on any server. The .htaccess rules are an additional layer for Apache servers only.

How long are activity logs kept?

Log entries older than 30 days are automatically cleaned up daily via WP-Cron.

What WP-CLI commands are available?

MaskMyAdmin registers the wp maskmy command namespace with the following subcommands:

  • wp maskmy status — Show current configuration (login slug, redirect mode, IP whitelist status, allowed IPs, proxy header)
  • wp maskmy reset — Reset the login URL back to the WordPress default (wp-login.php)
  • wp maskmy add-ip <ip> — Add an IP address or CIDR range to the whitelist (e.g., wp maskmy add-ip 192.168.1.100 or wp maskmy add-ip 10.0.0.0/24)
  • wp maskmy remove-ip <ip> — Remove an IP address or CIDR range from the whitelist (auto-disables whitelist if the list becomes empty)
  • wp maskmy disable — Disable all protections immediately (resets login slug, redirect, and IP whitelist — useful for emergency recovery)
  • wp maskmy enable --slug=<slug> — Re-enable protections with a custom login slug (e.g., wp maskmy enable --slug=my-login). If --slug is omitted, re-enables with the previously saved slug.

更新日志:

1.2.0 1.1.0 1.0.0