wp-register.php exposes login URL

You should try that with an incognito window. I bet it’s just your browser autofilling.

No its not browser problem..problem is with script..tried different browsers as well.

Other users have also reported this..check old support threads..

It’s true, I can confirm this, it does give away the secret URL by means of wp-register.php
I tested under different browsers (all cache clear)

I am also facing the same problem. The author should fix it, the secret URL gets exposed by wp-register.php

I’m waiting for an update to fix this.

If you’re not able or willing to wait for the developers to implement a fix for this problem, the following will work as a temporary (or permanent) fix:
1) install Redirection plugin (https://en-ca.www.ads-software.com/plugins/redirection/)
2) create a redirect
Source URL: /wp-admin/wp-register.php
Target URL: index.php

Bit of a pain, but I tested it and it works.

Follow-up regarding Redirection: for the target URL you might have to specify the FULL path to your Home page (e.g. https://www.sitename.com/index.php) or the full path to wherever you want to direct the “visitor”.

I also constant the problem, I will find a fix.

You have to give the right url.

example: /login?action=register or /login?action=lostpassword

A fix for this ? I got hit by a vietnamese hacker. Don’t know how he found he secret URL…

• This reply was modified 6 years, 7 months ago by swissspaceboy.

* Fix : redirect wp-register.php

Version 1.3