Timeline for Should I redirect login / admin pages to the home page?
Current License: CC BY-SA 3.0
14 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 6, 2018 at 22:12 | comment | added | zod | I agree with @user2320464 we had a bunch of sites that were not even Wordpress, there were so many hits on WP Login pages on these sites we created fake WP Login pages - it just made them more determined than ever. | |
| Mar 2, 2018 at 0:07 | vote | accept | Coomie | ||
| Mar 1, 2018 at 22:27 | comment | added | Emirodgar | Thanks for the comments, it is appreciated to learn something new | |
| Mar 1, 2018 at 19:48 | comment | added | user2320464 | By hosting fake files, the bots/strangers will only spend more time on your application either investigating it or trying to login. Further, these requests will need to travel the entire application stack which consumes unnecessary resources. A better approach is application white-listing and block these superfluous requests as early as possible. Whether that's at a load balancer, CDN, or WAF. | |
| S Mar 1, 2018 at 13:17 | history | suggested | CommunityBot | CC BY-SA 3.0 |
Fixed grammar
|
| Mar 1, 2018 at 13:16 | comment | added | Emirodgar | It could take two minutes to set up everything. Using a CDN service like Cloudflare will deal with your resources concern. | |
| Mar 1, 2018 at 13:13 | review | Suggested edits | |||
| S Mar 1, 2018 at 13:17 | |||||
| Mar 1, 2018 at 12:57 | comment | added | MrWhite | But you don't need a "fake file" to implement a "honey pot", when the trigger to block the request is accessing the URL itself. Keeping the "bots and strangers occupied" is just a waste of your time and resources. | |
| Mar 1, 2018 at 12:24 | comment | added | Emirodgar | @MrWhite, op said "..I don't like to have people try to hack my website...", what better way to keep them busy than with a honey pot? | |
| Mar 1, 2018 at 11:51 | comment | added | Stephen Ostermiller♦ | A honey pot of sorts | |
| Mar 1, 2018 at 11:17 | comment | added | Emirodgar | Yes, "200 OK response". The point is to make them believe it is the real access. | |
| Mar 1, 2018 at 11:16 | comment | added | MrWhite |
"keep a fake /administrator and /wp-login.php files" - and return a 200 OK?! You want to get rid of these "brute-force bots" as quickly as possible with the least amount of effort, not let them hang around using your resources for nothing. (?!)
|
|
| Mar 1, 2018 at 11:10 | history | edited | MrWhite | CC BY-SA 3.0 |
Removed quote formatting as this does not appear to be a quote, but an answer. Typo.
|
| Mar 1, 2018 at 7:43 | history | answered | Emirodgar | CC BY-SA 3.0 |