# -------------------------------------------------------------
# Wordpress
# -------------------------------------------------------------
# Wordpressのログイン失敗を引っかける
# - Wordpress側にも以下の設定が必要
#   RewriteEngine On
#   RewriteRule ^/([_0-9a-zA-Z-]+/)?(wp-login\.php)$ /wp-login.php [PT,L]
SecRule SERVER_NAME "@rx ^wp\.example\.net$" \
    "id:1000202,\
    phase:3,\
    deny,\
    status:403,\
    log,\
    auditlog,\
    msg:'Wordpress Login Failed',\
    severity:'CRITICAL',\
    chain"
    SecRule REQUEST_METHOD "@streq POST" \
        "chain"
    SecRule REQUEST_URI "@endswith /wp-login.php" \
        "chain"
    SecRule RESPONSE_STATUS "@eq 200"