milanchymcak

Regain access to WordPress installation without password or even username

Create a file anywhere in your WordPress installation and access the file directly through your browser. You will be redirected to the WP admin area without even having a password or username.

Please, delete the following lines from your production site after usage. Your website can be easily hacked or exploited with the following script.

/** Set up WordPress environment */

milanchymcak

Add using crontab -e

Replace /var/www/<domain> with the actual path to your WordPress directory

644 permissions for all files

# All files in our WordPress directory should have 644 permissions rw-r--r--
0 0 * * 0 find /var/www/<domain> -type f ! -perm  644 -exec chmod 644 {} \; >/dev/null 2>&1

milanchymcak

Hook for authentication protection

/*
 * Hook for authentication for login through transients options (stored in 'wp_options' table)
 * This hook passes three parameters: $user, $username and $password.
 * In order to generate an error on login, you will need to return a WP_Error object
 * Currently it will throw an error if we have >= 2 attempts
 * 
 * @link https://developer.wordpress.org/reference/hooks/authenticate/