Spam Company Targeting WordPress Blog Dashboards

~sigh~

Yes, the defensive effort never ends.

If you don’t need users to register .. delete wp-register.php

I’ve password protected the wp-admin directory after a hacker broke last April. Now they have to guess the directory user name and password before they can even start trying to register as a user or hack into my user account.

podz: You can just disable registration. ??