Title: SeCWurity WP Login
Author: Selim Şimşek
Published: <strong>3. nowembra 2014</strong>
Last modified: 9. julija 2026

---

Tykace pytaś

![](https://ps.w.org/secwurity-wp-login/assets/banner-772x250.png?rev=1038202)

![](https://ps.w.org/secwurity-wp-login/assets/icon-256x256.png?rev=1019131)

# SeCWurity WP Login

 Wót [Selim Şimşek](https://profiles.wordpress.org/slmsmsk/)

[Ześěgnuś](https://downloads.wordpress.org/plugin/secwurity-wp-login.3.0.zip)

 * [Drobnostki](https://dsb.wordpress.org/plugins/secwurity-wp-login/#description)
 * [Pógódnośenja](https://dsb.wordpress.org/plugins/secwurity-wp-login/#reviews)
 *  [Instalacija](https://dsb.wordpress.org/plugins/secwurity-wp-login/#installation)
 * [Wuwiśe](https://dsb.wordpress.org/plugins/secwurity-wp-login/#developers)

 [Pódpěra](https://wordpress.org/support/plugin/secwurity-wp-login/)

## Wopisanje

Is there any doubt the security of your site? Do you think that your computer has
keylogger virus? Do you think someone has stolen your password? None of this is 
important when you get this plugin 🙂
 SeCWurity WP Login is coded for your sites
against brute force attacks, keylogger viruses and more..

Features:

 * **Security code protection:** In addition to your WordPress password, the login
   form asks for randomly selected characters of a secret security code. Because
   only a few random characters are asked on each attempt, a keylogger cannot capture
   the whole code.
 * **Login page URL protection:** Your login page is only reachable with a secret
   URL parameter (for example `wp-login.php?param=value`). Visitors without the 
   correct parameter are redirected to the home page.

## Screenshots

[⌊Plugin Settings⌉⌊Plugin Settings⌉[

Plugin Settings

[⌊Password Settings⌉⌊Password Settings⌉[

Password Settings

[⌊Security with URL Settings⌉⌊Security with URL Settings⌉[

Security with URL Settings

[⌊Example of login page with password security⌉⌊Example of login page with password
security⌉[

Example of login page with password security

[⌊Another example of login page with password security⌉⌊Another example of login
page with password security⌉[

Another example of login page with password security

## Instalacija

 1. Upload folder of plugin to the `/wp-content/plugins/` directory
 2. Activate the plugin through the ‚Plugins‘ menu in WordPress
 3. Go to Settings > SeCWurity WP Login and make the settings by yourself.
 4. Do not forget to change your security code. The default code is `cw-pass`.

## FAQ

### I forgot my security code. What should I do?

You can change it by editing the `SCWL_sifre` option in the database, or disable
the plugin by renaming its folder via FTP.

### I enabled URL protection. What is my new login address?

It is shown on the plugin settings page, in the form `https://yoursite.com/wp-login.
php?param=value`. Save it somewhere safe.

## Reviews

There are no reviews for this plugin.

## Sobustatkujuce a wuwijarje

„SeCWurity WP Login“ jo software wótwórjonego žrědła. Slědujuce luźe su pśinosowali
k toś tomu tykacoju.

Sobustatkujuce

 *   [ Selim Şimşek ](https://profiles.wordpress.org/slmsmsk/)

[Translate “SeCWurity WP Login” into your language.](https://translate.wordpress.org/projects/wp-plugins/secwurity-wp-login)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/secwurity-wp-login/),
check out the [SVN repository](https://plugins.svn.wordpress.org/secwurity-wp-login/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/secwurity-wp-login/)
by [RSS](https://plugins.trac.wordpress.org/log/secwurity-wp-login/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 3.0

 * Security: fixed an information disclosure where the secret login URL was revealed
   to anyone requesting the login page with the site admin e-mail address as a parameter.
 * Security: the characters asked on the login form are now bound to a signed, expiring
   token, so an attacker can no longer choose which character positions to answer.
 * Security: settings form is now protected with a nonce and capability checks; 
   all inputs are sanitized and all outputs are escaped.
 * Security: character comparison now uses timing-safe checks.
 * Fixed URL protection running after output was already sent; it now runs on `login_init`
   and uses a proper redirect instead of a broken 404 page.
 * Fixed login form submissions being blocked by URL protection; the secret parameter
   is now preserved during form submission.
 * Multibyte (UTF-8) security codes are now handled correctly.
 * Removed the bundled jQuery copy; scripts are now enqueued the WordPress way and
   the login script no longer needs jQuery at all.
 * Removed promotional admin pages and external hotlinked images; the plugin now
   adds a single page under Settings.
 * Plugin settings are no longer deleted on deactivation; they are removed only 
   when the plugin is uninstalled.
 * Admin interface is now in English and fully translatable (Turkish translation
   can be provided via language packs).
 * Tested up to WordPress 7.0 and PHP 8.4.

#### 2.1

Performance is increased by reducing the number of files.

#### 2.0

New features were added.
 Interface design was updated.

#### 1.0

Some bugs were fixed.

## Meta

 *  Version **3.0**
 *  Last updated **3 mjasece**
 *  Active installations **10+**
 *  WordPress version ** 5.0 abo nowša **
 *  Tested up to **7.0.7**
 *  PHP version ** 7.4 abo nowša **
 *  Language
 * [English (US)](https://wordpress.org/plugins/secwurity-wp-login/)
 * Tags
 * [attack](https://dsb.wordpress.org/plugins/tags/attack/)[Brute Force](https://dsb.wordpress.org/plugins/tags/brute-force/)
   [keylogger](https://dsb.wordpress.org/plugins/tags/keylogger/)[login](https://dsb.wordpress.org/plugins/tags/login/)
   [security](https://dsb.wordpress.org/plugins/tags/security/)
 *  [Rozšyrjony naglěd](https://dsb.wordpress.org/plugins/secwurity-wp-login/advanced/)

## Pógódnośenja

 5 out of 5 stars.

 *  [  1 5-star review     ](https://wordpress.org/support/plugin/secwurity-wp-login/reviews/?filter=5)
 *  [  0 4-star reviews     ](https://wordpress.org/support/plugin/secwurity-wp-login/reviews/?filter=4)
 *  [  0 3-star reviews     ](https://wordpress.org/support/plugin/secwurity-wp-login/reviews/?filter=3)
 *  [  0 2-star reviews     ](https://wordpress.org/support/plugin/secwurity-wp-login/reviews/?filter=2)
 *  [  0 1-star reviews     ](https://wordpress.org/support/plugin/secwurity-wp-login/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/secwurity-wp-login/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/secwurity-wp-login/reviews/)

## Sobustatkujuce

 *   [ Selim Şimşek ](https://profiles.wordpress.org/slmsmsk/)

## Pódpěra

Got something to say? Need help?

 [Forum pomocy pokazaś](https://wordpress.org/support/plugin/secwurity-wp-login/)

## Donate

Would you like to support the advancement of this plugin?

 [ Donate to this plugin ](https://selimsimsek.com.tr)