WordPress.org

Ready to get started?Download WordPress

Forums

Rename wp-login.php
[resolved] wp-login.php is effectively renamed, but wp-login is still accessible (8 posts)

  1. HerveRenault
    Member
    Posted 8 months ago #

    Plugin version 1.7 installed today.
    Here is a workaround :
    RewriteRule ^wp-login.* - [F,L]
    in .htaccess

    http://wordpress.org/plugins/rename-wp-login/

  2. Janneke Van Dorpe
    Member
    Plugin Author

    Posted 8 months ago #

    wp-login.php should return a 404 page with this plugin. Is that what you mean by being accessible? Does it give you a 404? Thanks for the feedback!

  3. HerveRenault
    Member
    Posted 8 months ago #

    Hi Janneke, I really mean wp-login without .php extension.
    It gives me a 200 with actual login form.
    Maybe that's because my Apache is configured with MultiViews on.

  4. Janneke Van Dorpe
    Member
    Plugin Author

    Posted 8 months ago #

    Interesting. I could replace

    strpos( $_SERVER['REQUEST_URI'], 'wp-login.php' )

    with

    strpos( $_SERVER['REQUEST_URI'], 'wp-login' )

    Do you think that would solve your problem? Not entirely sure what MultiViews does.

  5. HerveRenault
    Member
    Posted 8 months ago #

    Yes, it does the trick.

    With MultiViews on, when you access wp-login (without .php) Apache tries to find a "wp-login" file with any extension (could be wp-login.html, wp-login.jpg, whatever) so it ends up with wp-login.php but request URI is just "wp-login".

  6. Janneke Van Dorpe
    Member
    Plugin Author

    Posted 8 months ago #

    Alright, I'll change this for you with the next version.

  7. Janneke Van Dorpe
    Member
    Plugin Author

    Posted 7 months ago #

    Resolved in version 1.8.

  8. HerveRenault
    Member
    Posted 7 months ago #

    It works. Thanks !

Reply

You must log in to post.

About this Plugin

About this Topic

Tags

No tags yet.