7. Some security measures

define( 'FORCE_SSL_LOGIN', true );
define( 'FORCE_SSL_ADMIN', true );

define( 'EMPTY_TRASH_DAYS', 7 );

A more widely used option is to lock down your wp‐admin directory. This means that only IP addresses you specify can access your admin dashboard URLs. This makes it much harder for anyone else to try to hack your WordPress back end. To accomplish this, create a separate.htaccess fi le in your wp‐admin directory with the preceding code.