Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I administer a server with lot of wordpress installations.

Is there a way to block all admin-accounts with one script, or to add an extra password in the global apache configuration?

I would like to block all sites on my server until this is resolved:
http://www.heise.de/security/meldung/Botnet-attackiert-Wordpress-Installationen-weltweit-1841419.html

I use debian and syscp. I used the default installation on Hetzner 2009 and updated it ever since

for example: How would a global apache redirect directive look like that redirects all wp-admin calls to an errorpage?

or better a script like this: How do I rename all files like wp-admin/index.php?

share|improve this question
    
You could probably use e.g. mod_security, or mod_rewrite, or AliasMatch, to do this. The exact implementation would depend on how your server is configured. –  Jenny D Apr 17 '13 at 8:29
1  
The exact implementation would depend on how your server is configured. –  Jenny D Apr 17 '13 at 8:46
    
Would it be possible for you to maybe post your actual apache configuration? –  Jenny D Apr 17 '13 at 8:53
    
yes, which files do you need? It is all default (i added the installation from hetzner to the question) –  rubo77 Apr 17 '13 at 8:58
    
let us continue this discussion in chat –  rubo77 Apr 17 '13 at 8:59

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.