Title: redirection bug exposing security
Last modified: December 24, 2019

---

# redirection bug exposing security

 *  Resolved [wordpresserror](https://wordpress.org/support/users/wordpresserror/)
 * (@wordpresserror)
 * [6 years, 5 months ago](https://wordpress.org/support/topic/redirection-bug-exposing-security/)
 * iam using this htaccess rule so that i can move my wordpress installation under
   publicl_html to foldername folder that is in public_html
 *     ```
       RewriteEngine on
       RewriteCond %{HTTP_HOST} ^domain-name.com$ [NC,OR]
       RewriteCond %{HTTP_HOST} ^www.domain-name.com$
       RewriteCond %{REQUEST_URI} !foldername /
       RewriteRule (.*) /foldername /$1 [L]
       ```
   
 * till now i was using wp-admin as my admin login link but as i changed it to something
   else now when i go to domain-name.com/wp-admin it shows not available but thats
   not the problem it shows bot available with the link [https://domain-name.com/folder/wp-admin](https://domain-name.com/folder/wp-admin)
   
   thus exposing my website folder name to which i have moved the data from public_html

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * (@mbrsolution)
 * [6 years, 5 months ago](https://wordpress.org/support/topic/redirection-bug-exposing-security/#post-12268633)
 * Hi, thank you for contacting us.
 * I understand your issue above but I am not sure why you think this issue is related
   to our plugin? Can you provide more information to show that the issue is somehow
   linked to our plugin.
 * Thank you
 *  Thread Starter [wordpresserror](https://wordpress.org/support/users/wordpresserror/)
 * (@wordpresserror)
 * [6 years, 5 months ago](https://wordpress.org/support/topic/redirection-bug-exposing-security/#post-12268772)
 * i figured it out that this is not related to your plugin as even if i go to [https://domain-name.com/wp-includes](https://domain-name.com/wp-includes)
   it takes me to [https://domain-name.com/folder/wp-includes/](https://domain-name.com/folder/wp-includes/)
   
   but this only happens when the url is without slash [https://domain-name.com/wp-includes](https://domain-name.com/wp-includes)
   if i use url with slash [https://domain-name.com/wp-includes/](https://domain-name.com/wp-includes/)
   then it doesnt show the folder name
 *  Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * (@mbrsolution)
 * [6 years, 5 months ago](https://wordpress.org/support/topic/redirection-bug-exposing-security/#post-12269034)
 * Hi, unfortunately there is not much I can do to help you since the issue is not
   related to our plugin. You need to open a new support ticket in a different forum
   area. Please view the link below.
 * > [Support Forums](https://wordpress.org/support/)
 * Kind regards

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘redirection bug exposing security’ is closed to new replies.

 * ![](https://ps.w.org/all-in-one-wp-security-and-firewall/assets/icon-256x256.
   png?rev=2798307)
 * [All-In-One Security (AIOS) – Security and Firewall](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/)
 * [Active Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * Last activity: [6 years, 5 months ago](https://wordpress.org/support/topic/redirection-bug-exposing-security/#post-12269034)
 * Status: resolved