hide wp-admin / wp-login

# this on top of .htaccess:
#----------------------------------

RewriteEngine On
RewriteRule ^login\.php?(.*) /wp-login.php?$1 [L]
RewriteRule ^admin/(.*) /wp-admin/$1 [L]


# this for functions.php:
#---------------------------------

add_filter('admin_url', 'wpadmin_filter');

function wpadmin_filter($url)
{
   $url = str_replace('wp-admin', 'admin', $url);
   return $url;
}

add_filter('site_url',  'wplogin_filter', 10, 3);

function wplogin_filter( $url, $path, $orig_scheme )
{
   $url = str_replace('wp-login.php','login.php', $url);
   return $url;
}

add_action( 'after_setup_theme', 'obfuscate_urls' );

function obfuscate_urls() {
 if( strpos($_SERVER['REQUEST_URI'], 'wp-login') ||
     strpos($_SERVER['REQUEST_URI'], 'wp-admin') )  {
   global $wp_query;
   $wp_query->set_404();
   status_header( 404 );
   include( get_404_template() );
   exit;
 }
}