cool :) hope i dint miss som places where wp-login.php is

Tip: try bbpress .. think its really great ;) http://bbpress.org/

I've now added your tip to this page:

http://www.theblog.ca/wordpres.....e-comments

However, consider this: if you access /wp-admin, it automatically redirects to wp-login.php. So if you change all references to wp-login.php, spambots can still figure out that address by accessing /wp-admin. What would be effective is to rename only the references that affect the login functionality, but allow it to break the /wp-admin redirecting reference...

No, my city has a rival team :)

My team:
http://www.skellefteaaik.se/
Maybe you know this player? Lee Goren
http://www.skellefteaaik.se/sp.....?number=37

Sedin, Naslund, Forsberg etc. team
http://www.modohockey.se/

Yeah, the Canucks are my hometown team! I guess that makes them sort of your hometown team by association? Hehehe...

your update to 2.9.7 .. does 2.10 beta have to be fixed to ?

OT: could see your a canuck fan .. the Sedin brothers lived and played in a town not so far away from me, before NHL :)

It is a good tip. I should lump it together with renaming wp-trackback.php and wp-comments.php, although they are probably a lot less effective at blocking comment spambots than renaming wp-login.php is at blocking account registration spambots. The reason is that the comment spambots got smart and started looking at where the comment form posts to. I don't think the registration spambots have a way of finding out what you've renamed wp-login.php to unless you link to it :D

im using ultraedit editor and if i choose "replace" wp-login.php.. its done within a couple of seconds.

Edit: found of course wp-login.php in comments.php

However, wouldn't it be better to rename wp-register.php instead? After all, the bots can't cause as much trouble if they can't even get an account...

You need to change all places where wp-login.php is to ex. othername.php.

do it in following files..

wp-login.php
wp-admin/admin-header.php
wp-includes/general-template.php
wp-includes/pluggable.php

To test the registration form protection, set $cas_reg_protection equal to "true".

Note that the beta only runs on WordPress 2.1 and higher.

Click here to test out the beta version.