Zabezpiecz dostęp do wp-login.php za pomocą reguł .htaccess

Kod

# Block direct access to wp-login.php with .htaccess

To enhance the security of your WordPress site, you can restrict access to the `wp-login.php` file using `.htaccess`. This method allows you to limit access to specific IP addresses, effectively blocking unauthorized users and brute force attacks.

Here is a sample `.htaccess` configuration to achieve this:

```apache
<Files wp-login.php>
    Order Deny,Allow
    Deny from all
    # Allow from your IP address
    Allow from 123.456.789.000
</Files>
```

### Instructions:

1. **Access Your Server**: Use an FTP client or your hosting provider's file manager to access your WordPress installation directory.

2. **Edit .htaccess File**: Locate the `.htaccess` file in the root directory of your WordPress installation. If it doesn't exist, you can create a new file named `.htaccess`.

3. **Add the Code**: Copy and paste the above code snippet into your `.htaccess` file. Replace `123.456.789.000` with your actual IP address. If you need to allow multiple IP addresses, add additional `Allow from` lines for each IP.

4. **Save Changes**: Save the `.htaccess` file and upload it back to your server if you are using an FTP client.

### Important Notes:

- **Multiple IP Addresses**: To allow access from multiple IP addresses, add additional `Allow from` lines for each IP.
  
- **Dynamic IP Addresses**: If your IP address changes frequently, this method might not be suitable. Consider using a VPN with a static IP or another security plugin.

- **Testing**: After making changes, test the login page access from an allowed IP and a non-allowed IP to ensure the rules are working as expected.

- **Backup**: Always back up your `.htaccess` file before making changes to prevent accidental lockouts or site issues.

By implementing these `.htaccess` rules, you can significantly enhance the security of your WordPress login page and protect it from unauthorized access and brute force attacks.