PHPackages srtfisher/lockdown-wp-admin - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Admin Panels](/categories/admin) 4. / 5. srtfisher/lockdown-wp-admin ActiveWp-cli[Admin Panels](/categories/admin) srtfisher/lockdown-wp-admin =========================== WordPress Plugin to hide login and admin URLs when not logged into WordPress. 2.2(12y ago)471615[7 issues](https://github.com/srtfisher/Lockdown-WPAdmin/issues)GPL-2.0PHP Since Jul 7Pushed 10y ago7 watchersCompare [ Source](https://github.com/srtfisher/Lockdown-WPAdmin)[ Packagist](https://packagist.org/packages/srtfisher/lockdown-wp-admin)[ Docs](http://wordpress.org/plugins/lockdown-wp-admin/)[ RSS](/packages/srtfisher-lockdown-wp-admin/feed)WikiDiscussions master Synced 4w ago READMEChangelog (7)Dependencies (1)Versions (8)Used By (0) Lockdown WP Admin ================= [](#lockdown-wp-admin) [![Build Status](https://camo.githubusercontent.com/ddd49f97d10af0c641ea3537fbf99a948bfdc50d9545719e34e329b92feb4479/68747470733a2f2f6170692e7472617669732d63692e6f72672f7372746669736865722f4c6f636b646f776e2d575041646d696e2e706e673f6272616e63683d6d6173746572)](https://travis-ci.org/srtfisher/Lockdown-WPAdmin) Lockdown WP Admin conceals the administration and login screen from intruders. It can hide WordPress Admin (/wp-admin/) and and login (/wp-login.php) as well as add HTTP authentication to the login system. We can also change the login URL from wp-login.php to whatever you'd like: /login, /log-in-here, etc. ### Description [](#description) This plugin will hide WordPress Admin (/wp-admin/) when a user isn't logged in. If a user isn't logged in and they attempt to access WP Admin directly, they will be unable to and it will return a 404. It can also rename the login URL. Also, you can add HTTP authentication directly from WP Admin and add custom username/password combinations for the HTTP auth or use the WordPress credentials. This doesn't touch any .htaccess files or change the WordPress core files. All the CSS/Images under /wp-admin/ are still accessible, just not the .php ones. If you enable HTTP authentication, it will add HTTP authentication to the PHP files in /wp-admin/. ### Installation [](#installation) 1. Upload `/lockdown-wp-admin/` to the `/wp-content/plugins/` directory 2. Activate the plugin through the 'Plugins' menu in WordPress 3. Navigate to the "Lockdown WP" menu *Composer is not required to be setup for installation of this plugin! It is simply used for development purposes to provide unit testing.* ### FAQ [](#faq) **How can we add files to the white list to hide from the public eye? We want to have AJAX and use a custom file, but we can't because it hides it from the public.** You can add a file using the 'no\_check\_files' filter. Use this: ``` ``` Simple. **How can I get back in if Lockdown WP Admin locked me out?** You can create a .txt file named 'disable\_auth.txt' in your `wp-content/plugins/lockdown-wp-admin/` folder (The file location would be `/wp-content/plugins/lockdown-wp-admin/disable_auth.txt`). We don't care about the content but that will disable the HTTP Auth and whatever was locking you out of your site. ### Changelog [](#changelog) 1.0 - Initial release 1.0.1 - Fixed a link to a broken file 1.1 - Fixed a bug on activating the plugin network wide, we disabled network wide activation. - Cleaned up the plugin and prevented a double loop of the HTTP check, unnecessary. 1.2 - Cleaned up more code. - Security fixes that will prevent somebody from possibly hijacking your website. (Props Jon Cave) 1.3.1 - Added the ability to change the login URL entirely. It will disable /wp-login.php and give it whatever you want to make it. 1.4 - Fixed a bug with user's with a index.php base - Added stats for us to collect about about URL setup and server configuration for our users. This will let us make the plugin even better. - Fixed bug for having private user management in WP Admin = 1.4.2 = - Bug fixes - Added `admin-ajax.php` to the files that we permit to be access in wp-admin. 1.6 - Added way to get back into WP-ADMIN if locked out (See the FAQ) 1.7 - Removed the stats that were collected to that we could understand the issues that users were having with the plugin. 1.8 - Finally discovered why so many users had HTTP authentication errors. Fixed it to support almost 80% of hosts out there. - If you still have problems, shoot me an email. 1.9 A very late update, sorry! Worked to fix many issues with the admin bar and the "get\_current\_screen()" error. If you still see issues, please contact me! 2.0 - Provided a system dump to help in debugging issues that may arise. - Fixes a issues on the 404 page under 3.5.1 (`get_current_screen()`) - Cleanup, cleanup! 2.0.1 - Bug fix by [Michal Krause](https://github.com/michal-krause) 2.0.2 - Query string detection bug fix by [James Bonham](http://wordpress.org/support/profile/jamesbonham) - Issues with WordPress in a sub-directory 2.1 - Unit Testing! Unit Testing ensure more reliable code going forward - Support for WordPress 3.6 - General Cleaning 2.2 - Fixing issues with other plugins - Support tested for 3.9 - Large code structure changes. If you are extending the `Lockdown_Manager` at all, you should basically check the class anew since it was seperated into Admin and Application services. 2.3 - Fixing issues with latests WordPress Version - Cleaning of code, enhancements. - Localizing all the strings. ### Health Score 33 — LowBetter than 72% of packages Maintenance17 Infrequent updates — may be unmaintained Popularity20 Limited adoption so far Community18 Small or concentrated contributor base Maturity68 Established project with proven stability Bus Factor1 Top contributor holds 96.2% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~62 days Recently: every ~77 days Total 6 Last Release 4432d ago ### Community Maintainers ![](https://www.gravatar.com/avatar/338d27065b1074f2d66d049d742f22996dd137eef6f91bc8f75350ceee1e8ef2?d=identicon)[srtfisher](/maintainers/srtfisher) --- Top Contributors [![srtfisher](https://avatars.githubusercontent.com/u/346399?v=4)](https://github.com/srtfisher "srtfisher (75 commits)")[![michalkrause](https://avatars.githubusercontent.com/u/675425?v=4)](https://github.com/michalkrause "michalkrause (1 commits)")[![voskobovich](https://avatars.githubusercontent.com/u/4508703?v=4)](https://github.com/voskobovich "voskobovich (1 commits)")[![zensimilia](https://avatars.githubusercontent.com/u/1010963?v=4)](https://github.com/zensimilia "zensimilia (1 commits)") --- Tags wordpresssecurityadmin ### Code Quality TestsPHPUnit ### Embed Badge ![Health badge](/badges/srtfisher-lockdown-wp-admin/health.svg) ``` [![Health](https://phpackages.com/badges/srtfisher-lockdown-wp-admin/health.svg)](https://phpackages.com/packages/srtfisher-lockdown-wp-admin) ``` ### Alternatives [wecodemore/current-admin-info Displays info about the current admin screen and its globals, contextual hooks, etc. 842.7k](/packages/wecodemore-current-admin-info) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)