Title: https://127.0.0.1/
Last modified: June 9, 2025

---

# https://127.0.0.1/

 *  Resolved [onocomp](https://wordpress.org/support/users/onocomp/)
 * (@onocomp)
 * [11 months, 3 weeks ago](https://wordpress.org/support/topic/https-127-0-0-1/)
 * How do I resolve the blockage that the all-in-one-wp-security-and-firewall plugin
   does in WordPress and blocks going to [https://127.0.0.1/](https://127.0.0.1/)
   even though I am the main administrator?
   I deactivate the plugin by renaming 
   the folder and then in WordPress, but then when I reactivate the folder name 
   it blocks again.Is there a way I can deactivate the option in the database that
   I activated to go to [https://127.0.0.1/](https://127.0.0.1/)
 * Thanks
 * como resolver o bloqueio que o plugin all-in-one-wp-security-and-firewall faz
   no wordpress e bloqueia indo para [https://127.0.0.1/](https://127.0.0.1/) mesmo
   eu sendo o administrador principal?
   eu desativo o plugin renomeando a pasta e
   logo no wordpress, mas depois quando reativo o nome da pasta ele bloqueia de 
   novo.Há como eu desativar a opção no banco de dados que ativei para ir para [https://127.0.0.1/](https://127.0.0.1/)
 * Obrigado

Viewing 1 replies (of 1 total)

 *  Plugin Support [hjogiupdraftplus](https://wordpress.org/support/users/hjogiupdraftplus/)
 * (@hjogiupdraftplus)
 * [11 months, 3 weeks ago](https://wordpress.org/support/topic/https-127-0-0-1/#post-18505392)
 * Hi [@onocomp](https://wordpress.org/support/users/onocomp/),
 * 127.0.0.1 wp-admin being redirected means you have enabled cookie-based brute
   force.
 * You should try accessing with the secret word so {site_url}?{secret_word}=1. 
   It will save a cookie in your browser for 24 hrs the again after 24 hrs, it will
   start redirecting to 127.0.0.1, and you can access with {site_url}?{secret_word}
   =1 only.
 * If you have enabled and forgot the {secret_word} define AIOS_DISABLE_COOKIE_BRUTE_FORCE_PREVENTION
   true in wp-config.php and try access with wp-login.php ( or renamed login page)
   it will disable the cookie based brute force
 *     ```wp-block-code
       define('AIOS_DISABLE_COOKIE_BRUTE_FORCE_PREVENTION', true);
       ```
   
 * Once you logged in please go to WP Security > Brute force > Cookie based brute
   force prevention there check secret_word and remove the defined constant.
 * Regards

Viewing 1 replies (of 1 total)

The topic ‘https://127.0.0.1/’ is closed to new replies.

 * ![](https://ps.w.org/all-in-one-wp-security-and-firewall/assets/icon-256x256.
   png?rev=2798307)
 * [All-In-One Security (AIOS) – Security and Firewall](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/)
 * [Active Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [hjogiupdraftplus](https://wordpress.org/support/users/hjogiupdraftplus/)
 * Last activity: [11 months, 3 weeks ago](https://wordpress.org/support/topic/https-127-0-0-1/#post-18505392)
 * Status: resolved