Issue with “Custom login URL”

  • Resolved wprobbiewp

    (@wprobbiewp)


    9 years, 5 months ago

    Hello.

    I installed Cerber a few weeks ago. I have set up a “Custom login URL” but people still manage to access my login screen as I can see that some people have tried to login. I am wondering how they can still find out my username and also the custom login URL when nobody else has been given these particular details?

Viewing 12 replies - 1 through 12 (of 12 total)
  • Plugin Author gioni

    (@gioni)

    9 years, 5 months ago

    Hi!

    To completely hide your Custom login URL this checkbox om the Main Settings page must be checked: Disable automatic redirecting to the login page when /wp-admin/ is requested by an unauthorized request.

    If it is, how do you figure out that those people know your Custom login URL?

    Thread Starter wprobbiewp

    (@wprobbiewp)

    9 years, 5 months ago

    That box is already checked.

    I know that other people are trying to login because the Cerber activity log shows that people have made unsuccessful attempts to login using my username.

    I’m also wondering how they found out my username since I have never told anyone else and it is not a sequence that would be seen anywhere else.

    Plugin Author gioni

    (@gioni)

    9 years, 5 months ago

    Did you check Stop user enumeration on the Hardening tab?

    If it is checked, I think there is something that shows your login (username) on the website, so it’s easy to find out it. It may be some specific feature of the active theme like “About the author” block (or widget).

    Thread Starter wprobbiewp

    (@wprobbiewp)

    9 years, 5 months ago

    “Stop user enumeration” box is already checked. My user name does not appear anywhere on the website and there is no information about the author of the site.

    So I am wondering how they can find out:
    (1) What my custom login URL is, and
    (2) What my username is.

    Any other ideas?

    Thread Starter wprobbiewp

    (@wprobbiewp)

    9 years, 5 months ago

    .

    • This reply was modified 9 years, 5 months ago by wprobbiewp.
    • This reply was modified 9 years, 5 months ago by wprobbiewp.
    Plugin Author gioni

    (@gioni)

    9 years, 5 months ago

    Are all those attempts coming from some specific IP addresses? Probably your login has been discovered earlier? Can you change your current Custom login URL to something else and check how this change affect attempts?

    Thread Starter wprobbiewp

    (@wprobbiewp)

    9 years, 5 months ago

    The logins were from different IP’s and were not on the same day. I’ll change the login URL now and we’ll see what happens.

    Thread Starter wprobbiewp

    (@wprobbiewp)

    9 years, 5 months ago

    Someone just now tried to login from a new IP address.

    Plugin Author gioni

    (@gioni)

    9 years, 5 months ago

    Did you change your Custom login URL according to my last post?

    Thread Starter wprobbiewp

    (@wprobbiewp)

    9 years, 5 months ago

    I did change the custom login URL but they still manage to make a login attempt. They also have some way to find out what my username is.

    Plugin Author gioni

    (@gioni)

    9 years, 5 months ago

    Please, submit URL of your website here: http://wpcerber.com/support/

    Thread Starter wprobbiewp

    (@wprobbiewp)

    9 years, 4 months ago

    Gioni, thanks for your help. No further issues since I made the changes you suggested via email.

Viewing 12 replies - 1 through 12 (of 12 total)

The topic ‘Issue with “Custom login URL”’ is closed to new replies.