Jilino1 xyz withdrawal.Claim Your Free 999 Pesos Bonus Today

Resolved mesmerizedchild
(@mesmerizedchild)

9 years, 2 months ago

Hi,

I’ve just installed the plug in, so I’m on version 1.5, together with WP 4.3.1.

I have the option “Disable wp-login.php” ticked, and indeed if I enter <WP URL>/wp-login.php I get the theme’s 404 page. Excellent!

However, if I enter <WP URL>/login or <WP URL>/login/, then I’m redirected to the URL specified in “Custom Login URL”. I would expect [and rather prefer] that those 2 URL’s be disabled too, considering that a bot will probably attempt those ones as well.

I’ve tested this on a rather out-of-the-box installation of WP, so I imagine that you should be able to replicate this on any of your machines; if that is not the case, then let me know and I’ll set up something that you can access too.

Thanks.
Roberto.

https://www.ads-software.com/plugins/wp-cerber/

Viewing 8 replies - 1 through 8 (of 8 total)

Plugin Author gioni
(@gioni)

9 years, 2 months ago

Hi, Roberto!
Very unusual issue. I’ll check it right now.
Thank you for telling me.

Plugin Author gioni
(@gioni)

9 years, 2 months ago

Wow! That’s all about WordPress. No my plugin involved.
Try to disable WP Cerber and repeat your experiment with login. That’s too bad. I’ll think how to protect site from such weird behavior of WordPress.

Thread Starter mesmerizedchild
(@mesmerizedchild)

9 years, 2 months ago

Ok, thanks ?? …

Plugin Author gioni
(@gioni)

9 years, 1 month ago

Fixed! Please, reinstall plugin to get it work.

Plugin Author gioni
(@gioni)

9 years, 1 month ago

I also wrote some informational post here: https://wpcerber.com/how-to-find-hidden-entrance-in-wordpress/

Thread Starter mesmerizedchild
(@mesmerizedchild)

9 years, 1 month ago

I can confirm it’s fixed.
Thanks ?? !!

jo.de.leeuw
(@jodeleeuw)

9 years ago

This seems to disable my “redirect” url:

mysite.com/login
(as noted in the screenshot you provided)
https://wpcerber.com/how-to-hide-wp-admin-and-wp-login-php-from-possible-attacks/

I cannot login to my own WP now…
can i disable the plugin through FTP ?

Plugin Author gioni
(@gioni)

9 years ago

Hi!
First of all, try to use URL with slash at the end of the URL in the address bar in your browser.

Like this: https://www.mysite.com/LOGIN/

Yes, you can disable plugin through FTP.
1. Find and open the plugin folder (wp-content/plugins/wp-cerber/).
2. Rename wp-cerber.php file to wp-cerber.xxx.
3. Login to the site using defaul wp-login.php.
4. Rename file back to wp-cerber.php.

P.S. I tried to send an email to your mailbox, but letter has returned and has been marked as “Under investigation for spam abuse.”

Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘/login and /login/ redirect to "Custom Login URL"’ is closed to new replies.