Mask Login Area

Hi @cddl

Hope you are doing fine!

Effectively, the “.” (dot) character is not allowed as a security protection to avoid unexpected files to be loaded instead of the wp-admin url. Since the Mask Login purpose is to provide an alternative url to the yourdomain.com/wp-admin path, any name ending with “.php” with be sanitized replacing the “.” by “-“.

Hope this information helps.

Kind regards

Luis

Hi @cddl

I’m not sure what do you want to achieve here. You say about “pointing to the file” – and that doesn’t site correct.

Mask Login is not for pointing to any physical/custom login file. It is to actually “mask” (or “rename”) the standard login URL of your site.

It doesn’t require any additional files.

The standard login form would be at “yoursite.com/wp-login.php” and Mask Login in Defender would let you change that to protect form bots. You basically need to put any single word – any made-up word, not filename of any file and not the slug of any existing page on your site – into Mask Login configuration and save it.

And that’s it. Let’s say you chose word “backoffice” and put it in Mask Login configuration. Now instead of “yoursite.com/wp-login.php” your login will be at “yoursite.com/backoffice” URL.

Note that if you want to customize e.g. how the login page/form looks, you need to use different tools for that, for example our own free Branda plugin or similar.

Kind regards,
Adam