• If I approach wp-login.php without protection key after activating the plugin and setting the key. I get the login screen.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author alvego

    (@alvego)

    Thank you for your feedback.

    You led me to an interesting thought.

    Add an option to completely hide / lock the login form if the key is not set.

    Thank you.

    As for the plug-in, at the moment, the basic idea is that it is not an effect attacker. Thereby increasing safety.

    For example, an attacker still picked the correct password. But without a key, it still will not let on. And it will continue to search, noting that combination is incorrect. Thus, the idea of ??busting meaningless. But note this attacker knows nothing ??

    Perhaps the description of the plugin, not exactly correct. And it misled you. If you can offer the best option, I will be grateful to you.

    When you fully hide the login form, you have a problem – will not be processed and routine inquiries, activation of the user, password recovery, etc.

    I need to think about it yet.

    pieterg, you get the login screen but you cannot login even if you type the correct login/password. You are allowed to login only when you supply the secret key in the url. It works for me.

    wp-admin/wp-login.php?sk=my_secure_key – you can login.
    wp-login.php/wp-login.php – you cannot login even if you login with the correct login and password.

    The login screen is shown in any way.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘not working’ is closed to new replies.