I have a "rule" in
httpd.conf to pop-up a windows if somebody tries to access
wp-admin section of any domain where wordpress is installed. With this rule I prevent boots for accessing wp-admin folder and to stop brute forces attacks.
# BEGIN BLOCK-WP-ADMIN-ATTACK <Files wp-login.php> AuthType basic AuthName "EN: Human Check - U: human P: letmein" AuthBasicProvider file AuthUserFile /home/wp-admin-attack-htpasswd-file Require valid-user ErrorDocument 401 "<center><h1>Warning!</h1>You failed to authenticate.<p><br />Extra security has been temporarily enabled due to an ongoing attack against Wordpress logins on this server.<br /> <b>If you are a real user, please refresh the page and enter the username and password that are provided on the pop-up.</b><p>If you are still having troubles, please contact your hosting provider.</center>" </Files> # END BLOCK-WP-ADMIN-ATTACK #
This rule is working as it should but now I want to "allow" a domain so this rule will not apply for that domain.