=== Block wp-login ===
Contributors: domainsupport
Tags: security, secure, security plugin, wordpress security, login security, block hackers
Requires at least: 3.0.1
Tested up to: 4.7.3
Stable tag: 1.1.4

This plugin completely blocks access to wp-login.php and creates a new secret login URL

== Description ==
= Block Access to wp-login.php =

This plugin does the following:

1) Locates wp-login.php in your WordPress installation and duplicates it
2) Locates .htaccess and inserts lines to block the default wp-login.php and creates a new secret address to use for legitimate login
3) Allows you to reduce load on the server by optionally blocking admin-ajax.php, wp-cron.php, xmlrpc.php and robots.txt

When installed your server will return “403 Forbidden“ when attempts are made to access the default wp-login.php file. This has two benefits; it prevents hackers from using brute force methods to hack your website and it reduces the load on the server when such brute force attacks are launched on your site.

== Installation ==

Easily prevent access to the default wp-login.php file:

1) Install Block wp-login automatically or by uploading the ZIP file.
2) Activate the plugin through the ‘Plugins’ menu in WordPress.
3) Once activated, visit “Settings - Permalinks” in the admin menu.
4) At the bottom of the page tick the box next to “Block wp-login”
5) Make sure you make a note of the new address you will need to use to sign in and confirm
6) Choose if you would also like to block admin-ajax.php, wp-cron.php, xmlrpc.php and robots.txt
6) Save the settings

When upgrading Wordpress core, make sure you deactivate this plugin first.

== Changelog ==

= 1.1.4 =
* Blocking admin-ajax.php now allows commands when inniated from /wp-admin/.
* Blank user or site owner emails won't break saving settings.
* Duplicate emails are not sent now when site owner and user email addresses are the same.
* Options to block admin-ajax.php, wp-cron.php, xmlrpc.php and robots.txt are disabled until wp-login.php block is activated.

= 1.1.3 =
* Plugin now emails all Administrators and the email set in General Settings with the new login URL.

= 1.1.2 =
* Added option to block admin-ajax.php, wp-cron.php, xmlrpc.php and robots.txt for the free plugin.

= 1.1.1 =
* Bug fixes.
* Option to block wp-cron.php, admin-ajax.php and robots.txt for upgraded plugin.

= 1.1.0 =
* Plugin re-written to make use of "Settings - Permalinks" so upgraded plugin can choose custom login slug.
* Plugin now reverses changes when deactivated.
* Plugin creates random login slug.

= 1.0.0 =
* First, beta version of the plugin.

== Upgrade Notice ==

= 1.1.4 =
* Bug fixes and blocking admin-ajax.php now allows commands from Wordpress core.

= 1.1.3 =
Administrators and site owners now receive and email when the login address changes.

= 1.1.2 =
Optionally block admin-ajax.php, wp-cron.php, xmlrpc.php and robots.txt to reduce load on the server.

= 1.1.1 =
Bug fixes.