As with most Joomla sites we get a lot of hits to wp-login.php. I understand that this URL is treated as a security exception via the 404 Shield in Admin Tools, but I'm curious if it would be more beneficial to associate the URL with a 403 response. I'm unsure if one approach is better than the other and what your thoughts are on this.
#30232 404 Shield / WP-Login or Redirect to 403
Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a
Latest post by on Friday, 12 October 2018 17:17 CDT
Tuesday, 11 September 2018 23:47 CDT
nicholas
Akeeba Staff
Manager
No, the HTTP status code does not matter. These are blind attacks by people who didn't bother check if the site is WordPress to begin with. They are not going to check the HTTP status code.
Also, technically, the correct response is 404 since they are trying to access a resource which does not exists.
In the end of the day it doesn't matter. After a few tries their IP will get automatically banned. The HTTP status code is something that only you and them know and only one of your cares to even think about it.
Also, technically, the correct response is 404 since they are trying to access a resource which does not exists.
In the end of the day it doesn't matter. After a few tries their IP will get automatically banned. The HTTP status code is something that only you and them know and only one of your cares to even think about it.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Friday, 12 October 2018 17:17 CDT
System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.