Ralph Gonzalez

COMPACTO Secure Login Master enhances your WordPress site security by hiding the default login page (<code>wp-login.php</code>) and replacing it with a custom login URL of your choice. This makes brute-force attacks and automated bot scans significantly harder.
Features: 
* Custom Login URL — Replace <code>wp-login.php</code> with a personalized login path. 
* Block Unauthorized Access — Prevent access to <code>wp-login.php</code> and <code>wp-admin</code> for non-logged-in users. 
* Lightweight & Fast — No performance impact, no unnecessary overhead. 
* Easy Setup — Configure your login slug in seconds, no coding required. 
* Enhanced Security — Adds an extra layer of protection against automated login attempts.
<h3>License</h3>
This plugin is licensed under the GPLv2 or later.

COMPACTO Secure Login Master

Short Description: Hide wp-login.php and wp-admin, replace with a custom login URL for stronger security.

WPChef

This plugin resolves performance issues caused by brute force attacks described in the WordPress Codex here: <a href="https://codex.wordpress.org/Brute_Force_Attacks" rel="nofollow ugc">https://codex.wordpress.org/Brute_Force_Attacks</a>
<blockquote>
From WordPress Codex:
Due to the nature of these attacks, you may find your server’s memory goes through the roof, causing performance problems. This is because the number of http requests (that is the number of times someone visits your site) is so high that servers run out of memory.
A common attack point on WordPress is to hammer the wp-login.php file over and over until they get in or the server dies. You can do some things to protect yourself.
</blockquote>
Protection Against DDoS plugin addresses these issues very well.
It also allows to deny access to common WordPress features that get frequently attacked, like xmlrpc or RSS feeds pages.
CloudFlare users can allow or deny access for visitors from specified countries.
All checks are done via the .htaccess file so that bogus requests can’t even reach your WordPress site and get bounced at the web server level. You can also specify exactly where they can be bounced to.
<h4>Compatibility</h4>
<ul>
<li>Doesn’t have any known conflicts with any other security plugins.</li>
<li>Fully compatible with WordPress multisites.</li>
</ul>
Advanced users can get more technical information on the <a href="https://wordpress.org/plugins/protection-against-ddos/faq/" rel="ugc">FAQ page</a>.

Protection Against DDoS

We use this when a WordPress site gets bombarded with bogus traffic and see the results within minutes. We can see how HTTP requests drop right after the plugin is installed. This plugin should be a must for any site.



Works very well

Protects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain countries via CloudFlare.

COMPACTO Secure Login Master vs Protection Against DDoS