• Hi.

    I’ve been getting a lot of requests for login to my site.

    I’ve decided to use CloudFlare to block wp-admin, but I’m still getting notifications on mail that people is still trying to log in.

    I’ve blocked on CloudFlare:

    /wp-admin/
    wp-login.php
    xmlrpc.php
    wp-cron.php

    Is there any route/file that should I disable?

Viewing 1 replies (of 1 total)
  • Make sure the rules you applied actually work. Try to access those pages from a not allowed IP and see if it works. It’s not uncommon that the rules are not complete. Also, make sure you don’t have any other login gateways provided by some plugins like Woo or Ultimate Members.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.