Plugin Author
gioni
(@gioni)
It seems you’ve disabled access to wp-admin for non-logged in users.
Go to the Main Settings page and uncheck: Disable automatic redirecting to the login page when /wp-admin/ is requested by an unauthorized request
Thread Starter
liewzy
(@liewzy)
Wondering why this is turned on by default?
Plugin Author
gioni
(@gioni)
I’m wondering why this should not be turned on by default? Do you want to help bots/hackers to reach your custom login page with no efforts? I don’t think so.
Thread Starter
liewzy
(@liewzy)
It blocked admin out using default setting, i think that’s something wrong.
If admin logged out and changed IP, the admin can’t log in back and have to submit ticket for help?
Plugin Author
gioni
(@gioni)
The URL /wp-admin/ is not a login page and normally you should not use it. The default WordPress login page is /wp-login.php. If you’ve set up a custom login page, then you need to use it.
The URL /wp-admin/ is a part of the admin dashboard and should not be exposed to hackers and bots neither logged out users. But if you’d like to increase a surface of attack and get related risks, let them attack it by unchecking that setting.
I can confirm that the latest version enabled several options, e.g. “Immediately block IP when attempting to login with a non-existent username” and “Disable automatic redirecting to the login page when /wp-admin/ is requested by an unauthorized request”.
That’s really not something that should be done IMO – our existing setting should be preserved. I had several angry clients not being able to log in since they’re used to go to /wp-admin/ not wp-login.php
Plugin Author
gioni
(@gioni)
Yes, I agree. There is no doubt that all settings must be preserved. I’ll find out the reason for that unexpected behavior.
Plugin Author
gioni
(@gioni)
It’s been fixed in the development version 5.7.2 https://wpcerber.com/development-version/
Yes, I can confirm this issue with the changes from checkboxes to toggle switches in the settings screen.
-
This reply was modified 8 years, 7 months ago by
leemon.
Hi Gioni,
Thanks for looking into this.
Quick question: if I install the dev 5.7.2 version, will it update automatically when you publish the ‘release’ 5.7.2? Or will I have to keep an eye and update manually?
Thanks again.
Plugin Author
gioni
(@gioni)
Yes, it will be updated the same way as any other versions from ww.wp.xz.cn.