=== SPP Custom Login URL Obfuscator ===
Contributors: spp
Tags: login, security, custom login url, hide login, wp-login
Requires at least: 6.0
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Hide default WordPress login and admin entry points behind a configurable custom slug.

== Description ==

SPP Custom Login URL Obfuscator intercepts requests to default WordPress login and admin paths during the `init` hook. When a custom slug is configured, direct access to `wp-login.php` and unauthenticated `wp-admin` requests receive a clean 404 response unless the request matches your configured login slug.

= Features =

* Configurable custom login slug via Settings → Custom Login URL
* Blocks direct access to `wp-login.php` and legacy `wp-register.php`
* Optional blocking of unauthenticated `/wp-admin/` access
* Rewrites generated login URLs across the site
* Uses WordPress Settings API and coding standards

== Installation ==

1. Upload the `spp-custom-login-url-obfuscator` folder to `/wp-content/plugins/`.
2. Activate the plugin through the **Plugins** menu in WordPress.
3. Go to **Settings → Custom Login URL** and save a custom login slug.
4. Bookmark your new login URL before logging out.

== Frequently Asked Questions ==

= What happens if I forget my custom slug? =

Deactivate the plugin from the filesystem or database to restore the default `wp-login.php` URL, then log in and configure a new slug.

= Does this replace real authentication security? =

No. Obfuscating the login URL reduces automated probing of default paths but does not replace strong passwords, two-factor authentication, or server hardening.

== Changelog ==

= 1.0.0 =
* Initial release.

== Upgrade Notice ==

= 1.0.0 =
Initial release.
