mkormendy
10/20/2015 - 2:59 PM

Override your WordPress' failed login message with one that doesn't reveal the existence of accounts on the site (better for security).

Override your WordPress' failed login message with one that doesn't reveal the existence of accounts on the site (better for security).

custom-failed-login.php
content_copyfile_download
// Change the failed login message for extra WordPress Secruty

function failed_login() {

    return 'Incorrect login information.';

}

add_filter('login_errors', 'failed_login');