Can't find log in area anymore

Hey Steve,

Try looking in your .htaccess and locate the the code in between the #HIDE BACKEND rules. If you can post that here we can take a closer look.

Thanks,

Gerroald

Thanks you for helping first off, Here is the whole .htaccess (not sure why its repeated 4 times) but this is a cut and paste from the ftp.

Thanks again for your time.

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

Hey Steve,

Lets see if we can try a couple of things to try and narrow this down.

1) Can you set WP_DEBUG to true in your wp-config.php and see if there are any errors?

2) Via FTP could you deactivate ITSEC by renaming it’s directory and see if you can access the login page at /wp-login.php?

Thanks,

Gerroald

Thank you again for your response, I have changed the WP_DEBUG to true, But I can not find the ITSEC could you give me some indication where i could locate this.

Thanks again

Hey Steve,

My apologies, we use ITSEC as a short for iThemes Security. If you rename the plugin via FTP it will deactivate. Then we can see if this helps. One of the odd things to me is there is no code referencing ITSEC features, including hide backend in your htaccess.

Thanks,

Gerroald

Hey Gerroald, I have done this and nothing has changed apart from my holding page has lots of error codes I really don’t know what to do now. Any other ideas ?

Thanks for you help btw

You have apparently renamed your back-end login function. First thing, try /mydomain.com/wpadmin/ if that doesn’t work, look in your database.

Find the table named wp_options and the option name itsec_hide_backend. It will have a big ugly string of text. Look for the word “slug”. The next “real word” will be the word that you append after your url. It might look like anything that you’ve set or was set automatically by ITSEC. Mine often reads “wpadmin”. Some might change it to things like login, _login, _myadmin, or whatever you think you might have set it to.

To access the page go to https://yourdomain.com/whatever-the-slug-is-in-your-db

Hope this helps.

First off, remove all but one of these.

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress

Unless you’ve done custom stuff and are very familiar with .htaccess, the only thing it should contain is one instance of the above. Once that is clean, you should be off to a fresh start.

Again, in your .htaccess file, make sure that this is wiped out

# BEGIN Hide Backend
# Rules to hide the dashboard
RewriteRule ^/wplogin/?$ /wp-login.php [QSA,L]
# END Hide Backend

To disable the plugin, find your plugins directory. You might have changed the name of the wp-content folder. Your plugins directory will be right next to your themes directory. Find the folder called better-wp-security and rename it something like XXX better-wp-security

Go to your wp-config.php file at the root of your installation and eliminate everything between

—
//Do not delete these. Doing so WILL break your site.
[Whatever you told ITSEC to put here when you were in the admin]
//The entry below were created by iThemes Security…
—

It should be at the very top of the wp-config.php page.

Or you can just comment out whatever lines are there. That should deactivate ITSEC and hopefully resolve some of your errors blarfing out.

Once that is done, you can re-install ITSEC, and choose the options carefully and knowingly, one at a time.

With familiarity, ITSEC is a joy to use, and one takes a perverse “F-U, hackers” pleasure every time one gets a report email.

Thank you all for your support but with my little knowledge about wordpress a the backend its was going downhill and i could not see the light at the end of the tunnel so I am going to start over again.. Thanks to all who has helped i do appreciate your help.