A simple script to lock down the Wordpress wp-login.php script, and a mechanism to temporarily unlock it when needed

INSTRUCTIONS:

Create a directory under your web root. Name it something hard to guess, since anyone (or any script) that can guess this directory name can unlock your login page.

In this directory, fetch the index.php file from this repo using this wget command, for example: wget https://raw.github.com/wesyah234/wplocklogin/master/index.php

Visit your website at: http://yourwebsite.com/yourcrypticdirname

Follow the instructions on that page to either unlock your login page to login, unlock your login page to logout, or unlock your login page for the purpose of a Wordpress upgrade. (since a wordpress upgrade will want access to your wp-login.php script and it must be available)

This script will automatically update itself from github whenever it is run!

TODOS: make main page more friendly...

add hyperlinks to the ip addresses, if clicked, will register that ip as a known ip, then if one is not linked, it can be flagged as suspect, keep a file of known ips and use to display whether we know the ip or not.