• Anonymous User 11187416

    (@anonymized-11187416)


    Hey,

    So I have customised my admin login urls (and put other settings in place to block the defaults) so that brute force attempts are more or less impossible.

    However, I’ve had a few attempts recently, leading me to check how on earth they could have found the URL. It’s then I spotted that FP includes it in the Ignore List whether it’s manually there or not. Taken from this part of your inject-js.php.

    ignoreKeywords: '.json_encode(get_option('flying_pages_config_ignore_keywords'), true).',

    Now, caching/minifying etc is a multilayer beast so there’s a chance that, although it’s your code, it’s not FP itself causing the exposure. But as it’s your JS I wanted to start there.

    Is there any way to modify your code to exclude the admin URLs from appearing publicly in the ignore list (or at all, preferably)?

    Thanks!

  • The topic ‘FP Printing Admin URL in Source Code’ is closed to new replies.