Comments on: Who Else Wants to Hide Their WordPress Folder?

By: Freshcode

Freshcode — Tue, 11 Oct 2011 10:34:00 +0000

Had the same problem. Try this (thanks to Lazeg):

    RewriteEngine On
    RewriteBase /
    # wp-admin aanpassen
    RewriteCond %{REQUEST_URI} wp-admin/
    RewriteCond %{REQUEST_FILENAME} !load-styles.php
    RewriteCond %{QUERY_STRING} !YOURSECRETWORD
    RewriteRule .*.php [F,L]
    RewriteCond %{QUERY_STRING} !YOURSECRETWORD
    RewriteRule ^YOURSECRETROOM/(.*) wp-admin/$1?%{QUERY_STRING}&YOURSECRETWORD [L]
    # wp-admin aanpassen
    RewriteRule ^index.php$ – [L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]

By: Gustavo

Gustavo — Wed, 05 Oct 2011 02:50:00 +0000

I’m using WordPress 3.2.1. and everything is ok with this solution but the “themes page” seems not loading the css files.

By: Francis Rosário

Francis Rosário — Wed, 31 Aug 2011 19:45:00 +0000

Someone have a NginX version of this .htaccess?

By: Sailen Debnath

Sailen Debnath — Tue, 29 Mar 2011 11:41:00 +0000

Hi i am using this code but it not work nothing i can access.the code is
====
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_URI} wp-admin/
RewriteCond %{QUERY_STRING} !blablabla
RewriteRule .*.php [F,L]
RewriteCond %{QUERY_STRING} !kaboom
RewriteRule ^hidden/(.*)domen/ wp-admin/$1?%{QUERY_STRING}&blablabla [L]
# BEGIN WordPress
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . domen/index.php [L]
# END WordPress
====
can you help me why it not work…

By: Sailen Debnath

Sailen Debnath — Tue, 29 Mar 2011 11:23:00 +0000

By: Ronidhbd

Ronidhbd — Fri, 21 Jan 2011 14:58:00 +0000

Hi,
Everything is OK. But my password doesn’t work and I can’t log in. So, after adding the code, do I need to reset my admin user name and pass word via PHP-MyAdmin? Or please give the solution. Thank you.
Regards,
Roni

By: Lazeg

Lazeg — Tue, 21 Dec 2010 22:11:00 +0000

RewriteCond %{REQUEST_FILENAME} !load-styles.php
RewriteRule .*.php [F,L]

solved the css case.

By: thanh

thanh — Sun, 14 Nov 2010 06:17:03 +0000

i have a big problem ! it’s turn on 500 error when i try to redit the .htaccess file ! can any body help ? my host has problem ?

By: thanh

thanh — Sun, 14 Nov 2010 06:06:40 +0000

just say thanks much ! i will dig it !

By: project707

project707 — Sat, 13 Nov 2010 06:31:04 +0000

Actually it really seems that even the redirection bit itself isn’t functioning beyond just some assets not loading. It’s likely that is the issue undoo is facing though.

I now work for a company that would likely be considered more “enterprise”, and though we use our own framework for most applications, it makes some sense to have some kind of cms that everyone is familiar with and is easy to deploy for the blog and news related parts of our sites – thing is in that environment people are certainly a bit more concerned about security, and this obfuscation of admin files at the very least is considered a crucial step to making an application as well known as WP secure.

I kind of feel like this is something that should be possible on a more core app and admin-panel level, but maybe it means making it known that this is a concern for some of us who would still like to use the application…