How Do I Make My Wordpress Login Secure On A WIFI Connection!

12 replies
I'm trying to find a way to login to my wordpress blog when I'm at
some internet cafes my web host issues free SSL certificates.

My host is not helping much & is saying I have to edit my wp-config.php
and gave me this wordpress address to do it, isn't there an easier way.

Changing The Site URL « WordPress Codex
#connection #login #make #secure #wifi #wordpress
  • Profile picture of the author CDarklock
    Originally Posted by meakerseeker View Post

    My host is not helping much & is saying I have to edit my wp-config.php and gave me this wordpress address to do it, isn't there an easier way.
    No. That is how you do it. The internet is full of people who will do it for you, if you pay them... because it is not easy and they don't want to do it any more than you do.
    Signature
    "The Golden Town is the Golden Town no longer. They have sold their pillars for brass and their temples for money, they have made coins out of their golden doors. It is become a dark town full of trouble, there is no ease in its streets, beauty has left it and the old songs are gone." - Lord Dunsany, The Messengers
    {{ DiscussionBoard.errors[7181961].message }}
  • Profile picture of the author locke815
    Do you want an SSL?
    {{ DiscussionBoard.errors[7182000].message }}
  • Profile picture of the author meakerseeker
    I'll go ahead & do it myself I manually installed wordpress & my sql database
    so it shouldn't be all that hard, I already did try editing my wp-config.php
    and it did not work.

    Locke815, I do want a SSL I already have a SSL certificates. I have Core FTP
    setup to login using SSH/SFTP now I'm just trying to setup wordpress
    {{ DiscussionBoard.errors[7182564].message }}
  • Profile picture of the author dengkane
    HTTPS should be enough, or you can use a VPN service, it can help.
    {{ DiscussionBoard.errors[7182907].message }}
  • Profile picture of the author Tom Brownsword
    I second dengkane's suggestion. Just use a VPN service. The added benefit is that all traffic -- not just your WP blog traffic -- will go through the encrypted tunnel.
    Signature

    Tom Brownsword, CISSP®, GCIA, ITILv3
    Certified Computer Security Pro
    http://ProtectorSupport.com
    http://BusinessActionSteps.com
    ------------------------------

    {{ DiscussionBoard.errors[7183653].message }}
  • Profile picture of the author meakerseeker
    I'll just use a vpn after one last try using https.
    {{ DiscussionBoard.errors[7184692].message }}
  • Profile picture of the author BillyParadise
    you will need a dedicated static ip for your ssl cert, which requires you to work with your hosting company.
    {{ DiscussionBoard.errors[7185852].message }}
  • Profile picture of the author phil838
    There are easier ways to secure your login without getting a VPN or SSL.

    Just use a security table plugin, like this one...

    WordPress › More Secure Login « WordPress Plugins

    You will print out a card with a table of 4 digit codes on it. When you log into Wordpress you will be asked for one of those codes. They aren't stored in the Wordpress database and they change every time you login, so even if someone gets your username and password they still can't log in.
    {{ DiscussionBoard.errors[7186156].message }}
    • Profile picture of the author seasoned
      Originally Posted by phil838 View Post

      There are easier ways to secure your login without getting a VPN or SSL.

      Just use a security table plugin, like this one...

      WordPress › More Secure Login « WordPress Plugins

      You will print out a card with a table of 4 digit codes on it. When you log into Wordpress you will be asked for one of those codes. They aren't stored in the Wordpress database and they change every time you login, so even if someone gets your username and password they still can't log in.
      That is BUNK! It can *****NOT***** work! And that is why NO BANK or credit card acceptor worth its salt will rely on it!!!!!!!

      nother password? ******WHOOPEE******! The guy next to you(within about 2000feet) will simply sniff it, and you might as well have NO password!

      FORGET about it being wordpress! Wordpress has NOTHING to do with it!

      The SIMPLEST WAY? Used by paypal, bank of america, american express, amazon, ebay, clickbank, etc.... I could probably list THOUSANDS of companies. Sears, Bodybuilding.com, etc.....

      The SIMPLEST way is:

      1. Get a STATIC IP!
      2. Get a cert REQUEST from there.
      3. Use it to get a cert.
      4. install it on the host.
      5. Change the http to https on the page. ftp becomes ftps, telnet becomes ssh etc...

      ENJOY!

      Steve
      {{ DiscussionBoard.errors[7186881].message }}
      • Profile picture of the author phil838
        Originally Posted by seasoned View Post

        nother password? ******WHOOPEE******! The guy next to you(within about 2000feet) will simply sniff it, and you might as well have NO password!
        It's not bunk, you simply don't understand how it works.

        It's not just another password. The guy next to you can sniff it, but it won't do him any good because it will be a different code every time. He would have to attempt to login hundreds of times to get the same code, and he will be locked out WAY before that happens.

        The US Treasury Department uses the same type of technology to secure it's TreasuryDirect accounts.
        {{ DiscussionBoard.errors[7188346].message }}
      • Profile picture of the author meakerseeker
        I'm going to be traveling down to Florida on a sailboat & will be using
        wifi at some marina's will this work at different ones I won't be just
        stationed at one.


        Originally Posted by seasoned View Post

        That is BUNK! It can *****NOT***** work! And that is why NO BANK or credit card acceptor worth its salt will rely on it!!!!!!!

        nother password? ******WHOOPEE******! The guy next to you(within about 2000feet) will simply sniff it, and you might as well have NO password!

        FORGET about it being wordpress! Wordpress has NOTHING to do with it!

        The SIMPLEST WAY? Used by paypal, bank of america, american express, amazon, ebay, clickbank, etc.... I could probably list THOUSANDS of companies. Sears, Bodybuilding.com, etc.....

        The SIMPLEST way is:

        1. Get a STATIC IP!
        2. Get a cert REQUEST from there.
        3. Use it to get a cert.
        4. install it on the host.
        5. Change the http to https on the page. ftp becomes ftps, telnet becomes ssh etc...

        ENJOY!

        Steve
        {{ DiscussionBoard.errors[7189933].message }}
  • Profile picture of the author seasoned
    BTW VPN ALSO requires a server component, and many are difficult to setup on newer windows implementations! Take it from a guy that has setup ***THREE***! The last one being one from a little company called CISCO.

    Steve
    {{ DiscussionBoard.errors[7186890].message }}

Trending Topics