Brute force url slug does not work in wordpress personal data export

  • Resolved neoset

    (@neoset)


    4 years, 1 month ago

    Hello, you should see this option since in addition to showing the slug in the email and it should not, also when clicking on the confirmation link it does not work and the confirmation never reaches the administrator.
    In short, hide the slug in the url of the email to export data and delete data, that the links work doing their job and redirect to the home page and not to the login.php / slug to the index of the page.
    I know that I shouldn’t name other plugins but I can’t find another way to put an example, WPS Hide Login does it perfectly but if I can have AIOSF all in one I save the other plugin.
    I see this error as very necessary, it has been bad for a long time and should be solved as soon as possible since for a website with users the AIOSF slug option does not work as it shows the slug in emails and redirects.
    A greeting.

    • This topic was modified 4 years, 1 month ago by neoset.
    • This topic was modified 4 years, 1 month ago by neoset.
    • This topic was modified 4 years, 1 month ago by neoset.
Viewing 8 replies - 1 through 8 (of 8 total)
  • Thread Starter neoset

    (@neoset)

    Thank you.

    • This reply was modified 4 years, 1 month ago by neoset.
    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    you should see this option since in addition to showing the slug in the email and it should not, also when clicking on the confirmation link it does not work and the confirmation never reaches the administrator.

    Can you clarify the above further. Maybe provide an example of what you mean. I want to make sure I understand your issue correctly.

    Thank you

    Thread Starter neoset

    (@neoset)

    If you activate the slug with a word and try to export personal data from wordpress and delete personal data from wordpress you will see that it does not work well.
    In the case of tools / export personal data if we send the confirmation email, the link in the email does not work because it sends you to the url without a slug and it does not find the page, although the url in the email is well written, the link does not work.
    In the case of tools / delete personal data, the url in the confirmation email shows the slug and reveals which slug we have put, the link works but it sends you to the thank you page that also shows the slug.
    The idea is that the slug is not shown anywhere and it is revealed in various sites even in user creation and all sites that lead you to wp-login.php.
    I don’t know if your idea is to change the slug or hide the wordpress login url from all sides, I think the last case should be correct.
    The only problem I have with exporting and deleting personal data since in all other cases I use a custom login type Ultimate member that has all types of emails except these 2.
    A greeting.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, thank you for clarifying your issue further. I am wondering if you have a conflict with another plugin. This issue was fixed in the following version.

    4.3.8

    Added ability to hide secret rename login page link when sending emails to people asking for personal data export.

    Can you disable all other plugins and only have our plugin active. Then carry out a test.

    Let me know what happens.

    Thank you

    Thread Starter neoset

    (@neoset)

    Hello, with a clean wordpress without any plugin, only with the AIOSF plugin and the slug created and activated, neither export personal data, nor delete personal data, no confirmations arrive to the administrator, also the email to delete data shows the slug created.
    Tested with various themes such as Astra, Oceanwp, Twenty Seventeen, etc and different emails, gmail, temporary emails, etc.
    I have tried all the possible options and several clean worpress.
    Thank you.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Thank you for providing more information. Just one more question. Can you share your server specs?

    Regards

    Thread Starter neoset

    (@neoset)

    I suppose that in my case it must be the server, I have tested it locally with XAMPP and with the https://trincheradev.com/ server which is testing.
    Thank you very much for the help. I will continue investigating what my mistake may be.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Please let me know what you find out. I am curious to know.

    Thank you

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Brute force url slug does not work in wordpress personal data export’ is closed to new replies.

Tags