A while ago, Jodo implemented a Wordpress attack workaround. You employed a new login URL for wordpress admin pages. That was good, and worked fine (after notifying all relevant clients, and dealing with customizing some internal links, etc.)
Now, when people update their WP, that method breaks, and people need to use the old standard admin login URL.
Should we be tweaking it back to the jodo-customized method? Is that threat still present?
If so, what should be done to tweak an updated WP install to use the customized URL?
Should we be tweaking it back to the jodo-customized method?Is that threat still present?
Yes, we have again disabled all default wordpress admin login on few Linux web servers due to recent botnet attack on wordpress sites.So, you should use customized method for admin login if default doesn’t work.
If so, what should be done to tweak an updated WP install to use the customized URL?
You just need to make a copy of "wp-login.php file with some other name, replace all default login name entries with that customized name in the new file.That’s all.
Alternatively open a support ticket, we will do for you.