\n ErrorDocument 403 “Denied”<\/strong><\/p>\n
Please also make sure to allow \/wp-admin\/admin-ajax.php requests without password protection.<\/p>\n
click on password protect directories<\/p>\n
Under the Security section, click on Password Protect Directories.
\nselect document root click goSelect the Document Root for your domain, then click Go.
\nclick on wp adminClick on your wp-admin directory.
\ncheck password protect name directory click save<\/p>\n
Check Password protect this directory, give it a name, then click Save. You may encounter a re-direct loop at this point. If so, please ensure you’ve created the error documents mentioned earlier. Copy all the code in the .htaccess file.<\/p>\n While you still have the \/wp-admin\/.htaccess file open, also go ahead and add the code before AuthType Basic :<\/p>\n Now make sure to save the \/wp-admin\/.htaccess file with the added code in it. Because on the next step you’ll just be editing the \/public_html\/.htaccess file. Now paste the .htaccess code you copied, in-between some <FilesMatch> tags, so that it ends up looking like this:<\/p>\n Then click on Save Changes up at the top-right.<\/p>\n You should now have the \/wp-admin\/.htaccess file that password protects the \/wp-admin directory. You then copied that same password protection over to just your main .htaccess file, so that it can also password protect your wp-login.php script directly as well.<\/strong><\/p>\n \/public_html\/wp-admin\/.htaccess<\/p>\n \/public_html\/.htaccess<\/p>\n <\/p>\n Step test : Now if someone tries to directly login via wp-login.php they will be prompted for a valid user as well.<\/p>\n
\nclick go backNow click on Go Back.
\nclick on password generator and use passwordClick on Password Generator.<\/strong><\/p>\n![\"click-on-password-generator-and-use-password\"](\"http:\/\/www.extradrm.com\/wp-content\/uploads\/2014\/11\/click-on-password-generator-and-use-password.png\")
<\/a>
\nClick on Generate Password a few times, and copy your password.
\nCheck I have copied this password in a safe place.
\nThen click Use Password.
\nclick on add authorized userNow type in a Username, then click on Add\/modify authorized user.
\nauthentication required click on log inTry to access your \/wp-admin directory.
\nYour browser will prompt you for the password you just created.
\nType in your username \/ password, and click Log In
\nwordpress admin click on log inYour normal WordPress admin login page should now display.<\/p>\n
\nclick on file manager and goNow go back to cPanel.
\nUnder the Files section, click on File Manager.
\nSelect the Document Root for your domain.
\nCheck Show Hidden Files (dotfiles), then click Go.<\/strong><\/p>\n<\/a>
\nclick on wp admin and edit htaccess fileFrom the left-hand directory listing, expand public_html.
\nClick on wp-admin, then right-click on your .htaccess file.
\nThen click on Edit
\nFor the encoding pop-up, click on Edit again to bypass that.
\ncopy htaccess text<\/p>\nErrorDocument 401 \"Denied\"\r\nErrorDocument 403 \"Denied\"\r\n\r\n# Allow plugin access to admin-ajax.php around password protection\r\n<Files admin-ajax.php>\r\nOrder allow,deny\r\nAllow from all\r\nSatisfy any\r\n<\/Files>\r\n\r\nAuthType Basic\r\nAuthName \"Secure Area\"\r\nAuthUserFile \"\/home\/example\/.htpasswds\/public_html\/wp-admin\/passwd\"\r\nrequire valid-user<\/pre>\n
\nclick on public_html and edit htaccess fileFrom the left-hand directory listing, click on public_html.
\nRight-click on your .htaccess file, then click on Edit.
\nsave public_html htaccess file<\/p>\nErrorDocument 401 \"Denied\"\r\nErrorDocument 403 \"Denied\"\r\n\r\n<FilesMatch \"wp-login.php\">\r\nAuthType Basic\r\nAuthName \"Secure Area\"\r\nAuthUserFile \"\/home\/example\/.htpasswds\/public_html\/wp-admin\/passwd\"\r\nrequire valid-user\r\n<\/FilesMatch><\/pre>\n
Code review<\/h2>\n
ErrorDocument 401 \"Denied\"\r\nErrorDocument 403 \"Denied\"\r\n\r\n# Allow plugin access to admin-ajax.php around password protection\r\n<Files admin-ajax.php>\r\nOrder allow,deny\r\nAllow from all\r\nSatisfy any\r\n<\/files>\r\n\r\nAuthType Basic\r\nAuthName \"Secure Area\"\r\nAuthUserFile \"\/home\/example\/.htpasswds\/public_html\/wp-admin\/passwd\"\r\nrequire valid-user<\/pre>\n
ErrorDocument 401 \"Denied\"\r\nErrorDocument 403 \"Denied\"\r\n\r\n<FilesMatch \"wp-login.php\">\r\nAuthType Basic\r\nAuthName \"Secure Area\"\r\nAuthUserFile \"\/home\/example\/.htpasswds\/public_html\/wp-admin\/passwd\"\r\nrequire valid-user <\/FilesMatch><\/pre>\n