Take care of : by-pass protection difficulty allowing an unauthenticated person for getting login site by environment a random referer string by way of curl request. This circumstance can come from plugins modifying your .htaccess documents so as to add or adjust procedures, or from an previous WordPress MU configuration https://penzu.com/public/95e4c19f80480fd3