WordPress Yönetici (wp-admin) Dizininizi Nasıl Parola ile Korursunuz?

204 yorumBir Cevap Bırakın

1. Syed Balkhi says

   Tem 6, 2024 2:24 pm'de

   Hey WPBeginner readers,
   Did you know you can win exciting prizes by commenting on WPBeginner?
   Every month, our top blog commenters will win HUGE rewards, including premium WordPress plugin licenses and cash prizes.
   You can get more details about the contest from here.
   Start sharing your thoughts below to stand a chance to win!

2. Onyenucheya Somto says

   Ağu 17, 2019 10:10 am'de

   please where can I find my main WordPress .htaccess file

   Yanıtla

   • WPBeginner Support says

     Ağu 19, 2019 11:08 am'de

     That would be where your WordPress folders are, you could either use FTP or your host’s file manager if they have one to get to your WordPress files.

     Yanıtla

     Yönetici

3. CHHRIS says

   Ağu 12, 2019 11:44 pm'de

   Please this settings works fine for me, but my problem is that am using woocommerce and yith woocoomerce my account page, so when ever users login to their my-account area they are often prompted to put the login details for my protected admin, how can i fix this?

   Yanıtla

   • WPBeginner Support says

     Ağu 13, 2019 10:26 am'de

     For that, you would want to remove this protection unless you wanted to give each user a login for the httpassword

     Yanıtla

     Yönetici

4. Jose says

   Haz 18, 2019 7:47 pm'de

   My wp-admin login page is broken after use that code.

   I set the ajax fixit, but, still broken.

   Yanıtla

   • WPBeginner Support says

     Haz 19, 2019 10:50 am'de

     It would depend on the specific error you are running into when trying to get to your admin area for how to solve the problem

     Yanıtla

     Yönetici

5. Rahul Yogi says

   May 20, 2019 11:00 am'de

   Hy buddy, i had tried cpanel method which doesnt work for me but manual method work as shown above.

   But i have one problem after going example.com/admin, i have to enter directory username and password but after after entering nothing happens means it does not redirect me to dashboard or anywhere. Just same page — shoing waiting for connection for example.com and get error too many redirect.

   Yanıtla

   • WPBeginner Support says

     May 21, 2019 9:53 am'de

     You may want to try the recommendations in our article: https://www.wpbeginner.com/wp-tutorials/how-to-fix-error-too-many-redirects-issue-in-wordpress/
     for the twoo many redirects, another option would be to make sure you fix the ajax issue using the method at the bottom of this article

     Yanıtla

     Yönetici

     • Rahul Yogi says

       Haz 10, 2019 10:05 pm'de

       Thanks buddy, everything is working fine.

       Yanıtla

       • WPBeginner Support says

         Haz 11, 2019 10:21 am'de

         Glad to hear

6. Brian says

   Nis 20, 2019 5:38 am'de

   Wow,

   You are a legend! Spent like 2hrs jumping from site to site to get this working… First site that mentioned the ErrorDocument 401 default. Works like a charm now

   Thanks

   Yanıtla

   • WPBeginner Support says

     Nis 22, 2019 12:50 pm'de

     Glad our guide could help

     Yanıtla

     Yönetici

7. Deb says

   Nis 20, 2019 2:28 am'de

   Thanks so much – this is the first place I have found with all 3 bits of code that was needed – (I had the redirect problem). The code worked like a charm. I now have an extra layer of protection without adding another potentially vulnerable plugin.

   Yanıtla

   • WPBeginner Support says

     Nis 22, 2019 1:22 pm'de

     Glad our article could help

     Yanıtla

     Yönetici

8. Garry says

   Nis 9, 2019 10:20 pm'de

   All I get after adding the above code in a .htacess file on /wp-admin folder is 500 internal server error.

   Yanıtla

   • WPBeginner Support says

     Nis 10, 2019 11:44 am'de

     If the htaccess method is not working you could remove the code and then use the cpanel method for password protecting the directory

     Yanıtla

     Yönetici

9. Colleen says

   Nis 1, 2019 11:43 am'de

   I did this, followed the link for the error message and for some reason I don’t have a .htaccess file!

   Yanıtla

   • WPBeginner Support says

     Nis 1, 2019 1:59 pm'de

     The .htaccess by default is a hidden file, are you showing hidden files? https://www.wpbeginner.com/beginners-guide/why-you-cant-find-htaccess-file-on-your-wordpress-site/

     Yanıtla

     Yönetici

10. Samwel says

    Şub 11, 2019 2:20 pm'de

    I followed the steps but i now can’t log in . It says “The server encountered an internal error or misconfiguration and was unable to complete your request.”

    even on refreshing the page the pop up to key in password does not re-appear help out

    Yanıtla

    • WPBeginner Support says

      Şub 12, 2019 11:18 am'de

      or resolving that error, you would want to take a look at our article here: https://www.wpbeginner.com/wp-tutorials/how-to-fix-the-internal-server-error-in-wordpress/

      Yanıtla

      Yönetici

11. maria hag says

    Şub 7, 2019 3:24 pm'de

    hi,

    i bought new name and i change the name of website and than save it . now i cant login to admin. it show me 404 erorr
    how can i change it
    please advise

    Yanıtla

    • WPBeginner Support says

      Şub 8, 2019 10:53 am'de

      You would want to reach out to your hosting provider and they should be able to help you have your new domain point toward where your site is currently

      Yanıtla

      Yönetici

12. taher says

    Şub 7, 2019 2:53 am'de

    I have activated password protection to wordpress directory via c-panel but wordfence is unable to scan my site. Due to ajax issue.

    I tried fixing it by updating my wp-admin/.htaccess file with the provided code by you but wordfence is still unable to start a scan. What do you suggest?

    Yanıtla

    • WPBeginner Support says

      Şub 7, 2019 11:32 am'de

      You may want to ensure your caching is cleared and if that error continues, reach out to Wordfence about their plugin

      Yanıtla

      Yönetici

13. Amit Mukherjee says

    Tem 3, 2018 4:03 am'de

    Enabling password protection of the wp-admin directory prevents me as logging in as the administrator. I get a page not found error. I cannot get to the login page. If I remove the password protection, I can login.

    What should I do. I am setting up a WordPress website for the first time.

    Yanıtla

    • WPBeginner Support says

      Tem 5, 2018 2:04 am'de

      Hi Amit,

      Yes you can remove password protection at anytime.

      Yanıtla

      Yönetici

14. mary-anne J. says

    Oca 10, 2018 6:33 am'de

    So how do you undo the password protect using the cPanel ..that is, I want to remove my password protection for the wp-admin directory

    Yanıtla

15. Keri says

    Oca 2, 2018 3:42 pm'de

    I followed the instructions to add the password protection using c_panel.

    It works fine in IE 11 but doesn’t work in: Edge; Firefox; Chrome; or Opera.
    Any ideas?

    Yanıtla

    • WPBeginner Support says

      Oca 2, 2018 7:01 pm'de

      Hi Keri,

      Please review your settings in cPanel to make sure you didn’t miss anything.

      Yanıtla

      Yönetici

      • Keri says

        Oca 4, 2018 3:16 pm'de

        I’m not sure what I missed, given that it worked in IE but not in the other browsers. I deleted the user to whom I had given access and added the same user back in and, “Voila!”, all is good.

        Yanıtla

16. Valentin says

    Kas 25, 2017 4:36 am'de

    > Upload this file outside your /public_html/ directory.

    Good advice—more generally: outside your DocRoot.

    > A good path would be: home/user/.htpasswds/public_html/wp-admin/passwd/

    That, however, doesn’t seem to be outside your DocRoot

    Yanıtla

17. Amigan says

    Kas 23, 2017 7:47 am'de

    How could we integrate this solution on IIs?

    Thanks in advance for your help!

    Yanıtla

18. pawan singh says

    Kas 4, 2017 3:03 am'de

    hi syed, i followed your tutorial as i do always whenever i find a problem but i am facing this error continiously.

    ERROR –

    “401
    Unauthorized

    Proper authorization is required to access this resource!”

    1. I made htpassword file properly with user name and password.
    2. Edited main .htaccess file with proper code.
    3. Implemented this line in .htaccess file on topas first line
    ErrorDocument 401 default
    4. Add AJAX functionality code

    After doing all this i see additional popup box which need login details for wp-admin. – Success here

    But i’m not able to access my home page like example.com. popupbox appears again without calling /wp-admin. Please tell how to remove this 401 Error. I see that many bloggers asked this issue in comment section, but you didn’t reply. I hope you will soon address the problem.

    Yanıtla

    • WPBeginner Support says

      Kas 5, 2017 11:03 pm'de

      Hello Pawan,

      This could be because the password your entered is incorrect or your server couldn’t find the .htpasswds file. We will recommend you to retrace your steps to figure out what went wrong.

      Yanıtla

      Yönetici

      • Robbiegod says

        Şub 7, 2018 10:07 am'de

        I am seeing the same issue. On subpages on my site, when I have my /wp-admin/ .htaccess password protecting my site, I get the user/pass pop-up box on pages on the front end.

        The temporary solution was to just remove the htaccess file from wp-admin. Now i am trying to put it back, so I’ll see what i can come up with and post back if i figure it out.

        Yanıtla

19. Arinze Ifeanyi says

    Eki 30, 2017 5:23 am'de

    Thank you for this. I worked really well especially that line “ErrorDocument 401 default” that prevented it from giving 404 error. I really dont miss tweet from you. My question now is, how can someone remove the password? And again, will the password be required upon users registration via a custom registration page?

    Yanıtla

20. Rony Ahamed says

    Ağu 17, 2017 11:34 am'de

    after using this method now when i try to go in wp-admin its says me maintenance mood ( this mode is on in my wp dashboard ) .. so how can i use it ?

    Yanıtla

21. Adrian says

    Ağu 10, 2017 1:35 am'de

    Do you have a method using IIS? I’ll be glad if you have. I’m very new to WordPress running in IIS server.

    Yanıtla

22. pawan says

    Ağu 7, 2017 9:17 am'de

    hi how to change my cpanel default url like “www.example.com/cpanel” to “www.example.com/customized”
    there is nothing on the internet about this topic.

    Yanıtla

23. Edgar says

    Ağu 4, 2017 2:27 am'de

    Hi my dear friends I have a problem. I want to make double autentification on my wordpress.But there is conflict in wordpress htacsess between wp default rules and this code:

    AuthType Basic
    AuthName “Password Protected”
    AuthUserFile path/to/.htpasswd
    Require valid-user
    Satisfy All

    I get error like 500 or error “this page is wrong”, but after delating wp default rules my code work.There is some conflict between wp code and my code! Can anyone take solution!

    Yanıtla

24. Aurangzeb says

    Tem 9, 2017 3:09 am'de

    A very nice approach, but I also suggest to go secure with https, because no matter how protected the admin panel is, with passwords, the passwords itself are not secure if it’s not https.

    Yanıtla

25. Daljit Singh says

    Haz 22, 2017 3:40 pm'de

    Hey guys, my issue is related to this post but it is little different too.
    I need to password protect my wp-content folder in my hosting.
    I called my godaddy hosting and they said that it is not possible.
    But i need to password protect it.
    Can someone help me out please?

    Yanıtla

26. Akhil says

    Haz 18, 2017 2:27 am'de

    Password Protecting WordPress Admin with Permalink “Post Name” gives error error login page( Redirect too many times). How to solve?

    Yanıtla

27. ianx says

    Haz 12, 2017 7:13 pm'de

    Hello sir,
    its mean “Basic Authentication” ?
    how do i using on newest Nginx?

    Yanıtla

28. Harmony A-E says

    May 29, 2017 11:05 am'de

    Can I do this for my wp-login?

    The wp-admin is password protected and gives out a 401 if some tries to exit the pop-up (so 0 access without the 1st password).

    But my wp-login allows access to a disfigured wp-login page if someone exits out of the pop-up.

    Yanıtla

29. Fabio says

    Nis 25, 2017 8:06 am'de

    Works fine in my blog. Thanks.

    Yanıtla

30. Frank says

    Mar 25, 2017 2:02 pm'de

    That’s a great article.

    However, I’d like to ask you how can I track the who visits the page (IP, etc) even though if they don’t type any username or password or type wrong ones. I can’t seem to find a way to do that.

    Please let me know.
    Thanks!

    Yanıtla

    • WPBeginner Support says

      Mar 25, 2017 9:05 pm'de

      Hey Frank,

      Check out our guide on how to monitor user activity in WordPress.

      Yanıtla

      Yönetici

      • Frank says

        Mar 27, 2017 11:23 am'de

        Thanks for the reply.

        I installed the Simple History plugin you recommend but it does not seem to track the http authentication either.

        Any ideas?

        Yanıtla

        • WPBeginner Support says

          Mar 30, 2017 12:15 am'de

          Hi Frank,

          Sorry for misunderstanding your question. You can track http authentication in your server logs. However, usually these logs contain all access and errors to your website. Some website hosts offer apps in cPanel that make it easier to browse those logs. On some hosting environments you can even create custom log files of your own.

31. Deivamoorthy says

    Ara 3, 2016 3:32 am'de

    Thanks for this article. It is really helped me lot save the login form anonymous person. But, i have an issue on my site. Whenever the user visits and entering to the single post page it asks the user enter the username password, Even though they have didn’t accessed the wp -admin. it happens only in Mozilla browser. How to solve this?

    Yanıtla

32. Toan says

    Kas 17, 2016 11:12 am'de

    I has finished setting protect password for wp-admin folder. But i can not registered new account for guest. Because it apperance pop-up login require username/password.

    Yanıtla

    • WPBeginner Support says

      Kas 17, 2016 4:55 pm'de

      Yes, you will have to either share the username password with the guest, or disable password protection.

      Yanıtla

      Yönetici

33. paras arora says

    Eki 14, 2016 12:47 pm'de

    sir actually i have changed my admin directory from example.com/wp-admin to example.com/abcde …how to password protect it now

    Yanıtla

    • WPBeginner Support says

      Eki 16, 2016 4:08 pm'de

      Just password protect abcde directory instead of wp-admin.

      Yanıtla

      Yönetici

34. Clecio says

    Ağu 2, 2016 1:14 pm'de

    Thank you !

    Yanıtla

35. Sarah says

    Haz 30, 2016 3:56 pm'de

    Thanks for this valuable info.I have question I want to setup limit login Attempts if users fails 1st time then try after 24 hrs latter how to I make this on cpanel?

    Yanıtla

36. RJ says

    Haz 16, 2016 2:51 am'de

    Hi there I do password protect my wp-admin directory and I did add that code to my htaccess …but…it is still asking for authorization.

    Any suggestions?

    Yanıtla

37. Sacha says

    Oca 22, 2016 2:53 am'de

    Thanks for the tip!

    Yanıtla

38. dipesh says

    Oca 21, 2016 6:08 am'de

    i dont ve set password for wp-admin folder but still it shows authorization dialog .
    how to solve the issue,

    Yanıtla

39. Fabio says

    Ara 4, 2015 10:54 am'de

    Hello, after the first login in wp-admin I got 500 “Internal Server Error”…

    Fabio

    Yanıtla

    • Fabio says

      Ara 4, 2015 11:18 am'de

      Solved, the problem was in server configuration

      Yanıtla

      • Gaurav Agrawal says

        Tem 27, 2016 4:58 am'de

        Hi, I am also facing the same problem. May I know what are the changes that have to be done in server configuration?

        Please let me know as soon as possible.

        Yanıtla

40. Cjay says

    Eyl 29, 2015 3:55 pm'de

    I recently added password protected my “wp-admin” directory and my “wp-includes” directory. Now each time i try to access my “wp-admin” page with it’s username and password that i created i get to dialogue box popping up for me to enter the username and password for that of the “wp-includes” directory before signing in to the main wordpress admin page.

    Have you encountered such issue with wordpress before?

    Yanıtla

41. Lissa says

    Eyl 7, 2015 4:17 am'de

    Thanx so much for this! After an extended break from blogging I installed a new blog today and as soon as I password protected the admin directory I got the redirect error. This fix worked flawlessly

    Yanıtla

42. abey says

    Tem 25, 2015 11:15 pm'de

    After setting this security. Server always ask for password with a popup even in a user visit the site home page. Is there any way to overcome this.

    Yanıtla

    • Abhimanyu says

      Mar 2, 2016 12:55 pm'de

      This gets resolved once you add the htaccess entry for admin-ajax.php. Follow the tutorial section towards the end.

      Yanıtla

43. Mariah Zuzuvecha says

    Tem 7, 2015 5:48 pm'de

    You saved me a lot of time .
    I was looking arrange the problem and you post save me !
    thanks again ¡

    Yanıtla

44. ece says

    Tem 5, 2015 8:38 am'de

    There is no htaccess file in my wp-admin folder! There is only one in var/www
    How do I fix the Ajax problem?

    Yanıtla

45. Ricardo says

    Haz 27, 2015 11:21 am'de

    It’s a good method but the problem is that regular users can’t recover their password if they click on “Lost your password?” link (/wp-login.php?action=lostpassword).

    How could I prevent that?

    Yanıtla

46. Daniel Papenfuß says

    May 5, 2015 3:04 pm'de

    Hey Bro,

    your hint for the ajax file helped me a lot – thx for that

    Bye,
    Daniel

    Yanıtla

47. ajakayetolu says

    May 5, 2015 11:20 am'de

    I recently install wordpress but mydomain/wp-admin/ keeps asking for username and password despite inputing the correct password and username its just as if it is refreshing itself.

    Yanıtla

    • WPBeginner Support says

      May 6, 2015 1:16 am'de

      Please take a look at How to fix WordPress login page refreshing and redirecting issue.

      Yanıtla

      Yönetici

48. 【Ƿ】 Fran Kee says

    Oca 7, 2015 5:03 am'de

    Good Tutorial. While admin-ajax.php might need extra enabling,
    there is one file on one level up (WP root level), that imho deserves extra disabling:

    require user

    Unless you truly have a blog where regular readers obtain WP accounts for commenting or such, this is not necessary. Extra-htpasswd-protecting this makes brute-forcing of WP accounts harder…

    Yanıtla

49. Jeff says

    Kas 28, 2014 6:13 pm'de

    Thanks! You just saved me a lot of time with that AJAX fix. I was looking everywhere and couldn’t figure out the problem!

    Yanıtla

50. dylanatstrumble says

    Eki 12, 2014 12:28 pm'de

    Hi,

    I have tried putting the ErrorDocument 401 default in many places in the main .htaccess file to no avail

    I am running W3 Total Cache and the first chunk of the code relates to that

    I have put it before the W3 code which results in a 500, I have tried putting it after the W3 code # END W3TC just before the # BEGIN WordPress

    I get a 500 there as well

    If only this would work, I would be a happy camper

    Hosted by Go Daddy and creating the protected folder via CPanel

    I am putting off calling Go Daddy for the fourth time. as on this particular issue, they have not been at their best

    Thanks in advance

    Yanıtla

51. WPBeginner Staff says

    Ağu 18, 2014 10:53 pm'de

    Are you certain that you are entering the correct username and password?

    Yanıtla

    • Rauf says

      Ağu 19, 2014 7:48 am'de

      yes…now i unclick the wp-admin password directory from c panel…and off it

      Yanıtla