Masking URL Login Causing Registration Problem
-
Hello. Thank you for all the effort put in on this great plugin. While upgrading my version of Defender, I ran into a problem with how the registration page is working. In particular, the Masking Login URL Slug that is set in Defender is not being used during the very last step of registration. I am testing this in a WordPress clone area. For example: Clone URL = https://example.com/clone123 Login = https://example.com/clone123/maskingslug Register URL = https://example.com/clone123/maskingslug?action=register On this page, the new user can register, and it puts the new user information correctly in the database. It also correctly sends an email to the user to set the password for the first time. It then automatically takes the user, incorrectly, to = https://example.com/clone123/wp-login.php?checkemail=registered This correctly displays the error: "This feature is forbidden temporarily for security reason. Try login again." The problem is that it should not use "wp-login.php", but instead use "maskingslug". For completeness, the link to change the password works correctly and does use the masking slug. And then the user is able to log in correctly - the login page also uses the masking slug. I'm not a WP programmer. I did turn masking off, and then on again. No change. By installing different versions of Defender, I discovered that the problem seems to exist for Defender versions starting with 4.1.0, up to and including the latest 4.5.0 version. Here are the specific Defender versions I tested: Registration worked correctly: 2.6.5 - 2.8.3 - 3.12.0 - 4.0.2 Registration last step not working: 4.1.0 - 4.3.1 - 4.4.2 - 4.5.0 I have been able to replicate this problem on a test WP website 5.6.13 that looks like a clone (but was a new installation) with no plugins except for Defender 4.5.0. Again, the last registration step gives an error. Here are the settings on my website: WordPress Version = 5.6.13 PHP Version = 7.4.33 Redirect Traffic = off 2FA is not used Permalinks under WP Settings = Post name I'm happy to upgrade to Defender 4.0.2 for now. In the future, once the above works, I'll upgrade to the newest version. Many thanks. Doug
Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)
- The topic ‘Masking URL Login Causing Registration Problem’ is closed to new replies.