“Block direct access to wp-login” is missing

  • Resolved eitanc

    (@eitanc)


    4 years ago

    Hi,

    I am at WP 5.7 and WP Cerber 8.8.3.

    I enabled “Custom login URL” and it works fine, I was also able to log out and login again using it.

    The problem is I don’t see the UI item of “Block direct access to wp-login.php and return HTTP 404 Not Found Error”, it looks like it is missing… I tried to log out and clear my browser’s cache and then login again – but it is still missing… – so the default wp-login.php page is still accessible, alongside the new custom login URL.

    Can you check this?

Viewing 9 replies - 1 through 9 (of 9 total)
  • Bobby

    (@bigboppa)

    I set the “Processing wp-login.php authentication requests” to “Block access to wp-loging.php” but access is not blocked and keeps available (WP 5.7)

    edit:
    sorry, my mistake. I tested with a whitelisted IP. – now it works fine.

    • This reply was modified 4 years ago by Bobby.
    Plugin Author gioni

    (@gioni)

    Hi! When you test WP Cerber’s security features, you have to test them either from a different computer or in an incognito window in your browser. Also, you have to ensure that the IP address (or subnet) of the computer you’re using for tests is not in the White IP Access List. Check this on the Access Lists admin page.

    Thread Starter eitanc

    (@eitanc)

    I don’t see the connection to my source ip. There is an on/off UI configuration feature that is missing

    Bobby

    (@bigboppa)

    the on/off switch has been replaced with a pulldown. See some lines above ““Processing wp-login.php authentication requests” ??

    Plugin Author gioni

    (@gioni)

    The setting you’re looking for is moved to the “Login Security” section above. Please read more: https://wpcerber.com/wordpress-login-security/

    Thread Starter eitanc

    (@eitanc)

    Thanks for the direction. It is working fine now.

    This post was created because of https://wpcerber.com/how-to-rename-wp-login-php/ … – please either remove it or fix it to have text and images that match the current plugin’s UI.

    Thanks.

    Plugin Author gioni

    (@gioni)

    Sure! It’s in the works, actually.

    I did a test following your recommendations and the same failure happens. I tested it from a different pc and also from a phone.
    when someone accesses the address: mysite/wp-login.php the login form appears. ??

    Ok.. It’s working now.
    There was a cache plugin on the way. ??
    Thanks guys!

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘“Block direct access to wp-login” is missing’ is closed to new replies.