EasyEngine / site-type-wp

Adds 'wp' site type to EasyEngine
12 stars 14 forks source link

prevent brute force attack xmlrpc.php #181

Open viracochaIT opened 4 years ago

viracochaIT commented 4 years ago

Hi guys

i have the follow consideration abount preventing brute force attack on xmlrpc.php and not only wp-login.php

now i insert into user.conf a new location directive but maybe i suggest to change the rules into main.conf directly

this is the line into templates: https://github.com/EasyEngine/site-type-wp/blob/develop/templates/config/nginx/main.conf.mustache#L119

this is my suggestion: location ~ (wp-login|xmlrpc).php

regards and good wok