wp-login.php still accessible

  • Resolved gabriel85

    (@gabriel85)


    4 years ago

    I installed the plugin so that /wp-admin/ is not used and instead another new path is used.
    However I found that you can still go to /wp-login.php which redirects to the new admin login URL by it self.

    What would you recommend in this case? since otherwise they just go straight to /wp-login.php and go around the plugin.

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Support MaximeWPS

    (@seinomedia)

    4 years ago

    Hello,

    Thanks for using WPS Hide Login !

    I’ve never seen this kind of redirection with the plugin. Have you got any other security or redirection plugin ? Have you emptied every caches ?

    Thread Starter gabriel85

    (@gabriel85)

    4 years ago

    I’m not using extra plugins for security.
    I do have Plesk WP-toolkit, but I couldn’t find something related.

    In the apache log I do see 301 redirects, not sure where it could come from.
    Cache is empty and I tried it with a new browser that was never used as well.

    Plugin Support MaximeWPS

    (@seinomedia)

    4 years ago

    Hello,

    What is your URL, please ?

    Thread Starter gabriel85

    (@gabriel85)

    4 years ago

    http://www.prepaidzero.com/wp-login.php

    Plugin Support MaximeWPS

    (@seinomedia)

    4 years ago

    Hello,

    Actually, there is a redirection from your home URL to /en.

    Then, I think there is a conflict between WPS Hide Login and a translation plugin.

    Which one are you using on you WordPress ?

    Thread Starter gabriel85

    (@gabriel85)

    4 years ago

    It’s translatepress.
    Is it possible to remove the website from my previous post?
    I can’t seem to edit it.
    Thanks.

    • This reply was modified 4 years ago by gabriel85.
    Plugin Support MaximeWPS

    (@seinomedia)

    4 years ago

    Ok.

    This issue has already been solved in the previous post :
    https://ww.wp.xz.cn/support/topic/dontt-work-with-translatepress-subdirectory-functionality/

    When the plugins will be correctly configured, you wp-login.php slug will redirect to 404 as expected.

    Thread Starter gabriel85

    (@gabriel85)

    4 years ago

    I found that if you also exclude /wp-login.php as path in translatepress then it works correctly.

Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘wp-login.php still accessible’ is closed to new replies.