Editing WordPress Installation Guidelines (section)

=== Installing WordPress in a non-standard location ===
How to install WordPress in a non-standard location to make it at least a little bit difficult for people to hack it.

* Install WordPress somewhere other than the location that you would ultimately like to have the public access it.
** The WordPress directory and the directory where the public will access the blog should be at the same level down from the website root directory.
** So the set up might be something like this:
<pre>
/blog (public address)
/wordpress/wp-admin (WordPress installation location with CMS)
</pre>
Copy the <code>index.php</code> file from the WordPress installation directory to the public blog location. <code>Index.php</code> basically just makes a call to the WordPress library to pull in all the content to render the page. As long as all the include directives resolve ok, that index.php file will work anywhere on the site, but bad people won’t be able to simply type <code>/blog/wp-admin</code> to try to get at the WordPress editor.