{"id":317363,"date":"2026-10-12T06:27:48","date_gmt":"2026-10-12T06:27:48","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/ghost-hide-login\/"},"modified":"2026-10-12T06:27:23","modified_gmt":"2026-10-12T06:27:23","slug":"ghost-hide-login","status":"publish","type":"plugin","link":"https:\/\/mg.wordpress.org\/plugins\/ghost-hide-login\/","author":23189272,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.4","stable_tag":"1.0.4","tested":"7.1.3","requires":"5.8","requires_php":"7.4","requires_plugins":null,"header_name":"GhostLock Hide Login","header_author":"Shubham Patil","header_description":"Advanced WordPress login protection with attack logging, country detection, IP blocking, custom redirect pages, and brute-force protection.","assets_banners_color":"5e6886","last_updated":"2026-10-12 06:27:23","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/wordpress.org\/plugins\/ghost-hide-login\/","header_author_uri":"https:\/\/profiles.wordpress.org\/iamshubhamsp\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":30,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.4":{"tag":"1.0.4","author":"iamshubhamsp","date":"2026-10-12 06:27:23","revision":3740604}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3740651,"resolution":"128x128","location":"assets","locale":"","width":1016,"height":1014}},"assets_banners":{"banner-772x250.png":{"filename":"banner-772x250.png","revision":3740651,"resolution":"772x250","location":"assets","locale":"","width":2203,"height":714}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.4"],"block_files":[],"assets_screenshots":[],"screenshots":{"1":"GhostLock Hide Login settings page","2":"Blocked IP management","3":"Security logs dashboard","4":"Custom login URL settings"}},"plugin_section":[],"plugin_tags":[46125,25642,15756,600,285975],"plugin_category":[54],"plugin_contributors":[285976,259798],"plugin_business_model":[],"class_list":["post-317363","plugin","type-plugin","status-publish","hentry","plugin_tags-brute-force-protection","plugin_tags-hide-login","plugin_tags-login-protection","plugin_tags-security","plugin_tags-wp-admin-security","plugin_category-security-and-spam-protection","plugin_contributors-iamshubhamsp","plugin_contributors-walstarmedia","plugin_committers-iamshubhamsp"],"banners":{"banner":"https:\/\/ps.w.org\/ghost-hide-login\/assets\/banner-772x250.png?rev=3740651","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/ghost-hide-login\/assets\/icon-128x128.png?rev=3740651","icon_2x":false,"generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>GhostLock Hide Login is a lightweight WordPress security plugin that combines login URL protection and automatic brute-force attack prevention in a single plugin.<\/p>\n\n<p>Unlike many security plugins that require manual configuration, GhostLock Hide Login starts protecting your website immediately after activation.<\/p>\n\n<p>Features:<\/p>\n\n<ul>\n<li>Hide wp-login.php<\/li>\n<li>Protect wp-admin access<\/li>\n<li>Change the default WordPress login URL<\/li>\n<li>Automatic brute-force attack protection<\/li>\n<li>Automatically block suspicious IP addresses<\/li>\n<li>Detect attacker countries<\/li>\n<li>Security activity logs<\/li>\n<li>Whitelist trusted IP addresses<\/li>\n<li>Redirect attackers to custom 404 pages<\/li>\n<li>Show custom blocked access pages<\/li>\n<li>Lightweight and easy to use<\/li>\n<li>No complex configuration required<\/li>\n<\/ul>\n\n<p>GhostLock Hide Login helps reduce unauthorized login attempts and improves WordPress website security with minimal setup.<\/p>\n\n<h3>Privacy<\/h3>\n\n<p>GhostLock Hide Login uses the third-party service ipwho.is (ipwhois.io) to detect attacker countries.<\/p>\n\n<p>Data Sent:\n- Visitor IP address<\/p>\n\n<p>Purpose:\n- Country detection for security monitoring and attack logging<\/p>\n\n<p>Service URL:\nhttps:\/\/ipwhois.io\/<\/p>\n\n<p>Terms of Service:\nhttps:\/\/ipwhois.io\/terms<\/p>\n\n<!--section=installation-->\n<h4>Install from WordPress Admin Dashboard<\/h4>\n\n<ol>\n<li>Go to Plugins \u2192 Add New in your WordPress admin dashboard.<\/li>\n<li>Click Upload Plugin.<\/li>\n<li>Upload the <code>ghost-hide-login.zip<\/code> file.<\/li>\n<li>Click Install Now.<\/li>\n<li>Activate the plugin through the Plugins screen.<\/li>\n<li>Go to Settings \u2192 GhostLock Hide Login.<\/li>\n<li>Configure your custom login URL and security settings.<\/li>\n<\/ol>\n\n<h4>Manual Installation<\/h4>\n\n<ol>\n<li>Upload the plugin files to the <code>\/wp-content\/plugins\/ghost-hide-login<\/code> directory.<\/li>\n<li>Activate the plugin through the 'Plugins' screen in WordPress.<\/li>\n<li>Go to Settings \u2192 GhostLock Hide Login.<\/li>\n<li>Configure your plugin settings.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"will%20this%20hide%20wp-login.php%3F\"><h3>Will this hide wp-login.php?<\/h3><\/dt>\n<dd><p>Yes. Direct access to wp-login.php and wp-admin can be restricted and protected using your custom login URL.<\/p><\/dd>\n<dt id=\"does%20the%20plugin%20automatically%20protect%20against%20brute-force%20attacks%3F\"><h3>Does the plugin automatically protect against brute-force attacks?<\/h3><\/dt>\n<dd><p>Yes. GhostLock Hide Login automatically limits suspicious login attempts and blocks malicious IP addresses after activation without additional setup.<\/p><\/dd>\n<dt id=\"can%20i%20unblock%20ips%20manually%3F\"><h3>Can I unblock IPs manually?<\/h3><\/dt>\n<dd><p>Yes. You can manage and remove blocked IP addresses from the plugin settings page.<\/p><\/dd>\n<dt id=\"does%20this%20plugin%20use%20third-party%20services%3F\"><h3>Does this plugin use third-party services?<\/h3><\/dt>\n<dd><p>Yes. Country detection uses the ipwho.is (ipwhois.io) service over HTTPS. Results are cached for 24 hours per IP address.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.4<\/h4>\n\n<ul>\n<li>Fix Plugin Check warnings by prefixing local variables in the admin settings page.<\/li>\n<li>Shorten the readme short description to the WordPress 150-character limit.<\/li>\n<\/ul>\n\n<h4>1.0.3<\/h4>\n\n<ul>\n<li>Stop trusting spoofable forwarding headers for client IP detection.<\/li>\n<li>Use REMOTE_ADDR by default for brute-force and country-cache keys.<\/li>\n<li>Add the <code>ghost_login_client_ip<\/code> filter for trusted reverse-proxy integrations.<\/li>\n<\/ul>\n\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Initial release<\/li>\n<li>Hide wp-login.php<\/li>\n<li>Protect wp-admin<\/li>\n<li>Custom login URL support<\/li>\n<li>Automatic brute-force protection<\/li>\n<li>Automatic IP blocking<\/li>\n<li>Country detection<\/li>\n<li>Security logs<\/li>\n<li>IP whitelist<\/li>\n<li>Custom 404 redirect page<\/li>\n<li>Custom blocked page support<\/li>\n<\/ul>","raw_excerpt":"Hide WordPress login URLs and protect against brute-force attacks with IP blocking, country detection, logs, and IP whitelisting.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/317363","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=317363"}],"author":[{"embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/iamshubhamsp"}],"wp:attachment":[{"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=317363"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=317363"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=317363"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=317363"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=317363"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=317363"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}