wp-admin on different subdomain
-
[ Moved to the Fixing WordPress sub-forum. ]
I’ve done some preliminary research with no promising results.
I have a WordPress site, let’s say https://www.example.com. Using nginx, I would ideally restrict access to /wp-admin and wp-login.php (maybe allowing wp-ajax.php). The public shouldn’t need access to those. I would have a second entry point called admin.example.com which would have access to that /wp-admin. This is all the same file system and database. This admin.example.com would be IP restricted and/or basic authentication and also ideally bypass any CDN caching mechanism.
The reasoning? It just makes sense to me for the admin portion to have additional restrictions and to be reasonably innaccessible to the public.
It surprises me that there isn’t a simple option for wp-config.php where one could do define(‘WP_ADMINURL’, ‘https://admin.example.com’), similar to how the WP_SITEURL and WP_HOME are.
I feel I can accomplish the same thing through Nginx on a single website, I just haven’t figured out the combination that works appropriately.
-
The admin area is limited based on what permissions each user has, so allowing the public to get to wp-admin doesn’t necessarily mean that the have access to admin functionality or that they can even see what the admin sees.
However, there are a number of plugins that have their own profile and login pages. They can change the login urls and let you create your own. Some will even ban lower level users from getting to the dashboard.
- The topic ‘wp-admin on different subdomain’ is closed to new replies.