Does it actually help keep a site more secure to deny all access to WP admin and make changes directly on the FTP only?
Our WP has been hacked twice now. It seems that everyone has a different idea on how to keep WP secure and as a part of the security services we received one of the consultants recommended blocking all admin access.
Fast forward a few months and it's hard to manage guest content because we end of having to do it (guest writers don't know how to use the FTP, also we worry about providing access).
So we have 3 options: - Keep blocked to all - Allow only certain IPs - Open access to all
I'm grateful for any guidance.