Hide Login Area Does Not Hide /WP-LOGIN

@mamaslt

Duplicate of this topic.

Website hosted at 1&1 UK ?

dwinden

@mamaslt

Ok so let’s try and get a better understanding of this.

In a vanilla WP env the WP Dashboard login screen can only be accessed using the following default slugs:

• wp-admin
• wp-login.php
• login
• admin
• dashboard

Notice wp-login is not included in the list.

So where does that slug come from ? Perhaps you can ask your hosting provider … Unfortunately there was no definitive answer to this question in the other topic …
But it seems it is related to the Apache env as configured at your hosting provider … I’m not saying it is but it would fit the picture …

dwinden

@mamaslt

It’s not. Check in the wp-includes/canonical.php file:

/**
 *
 * @global WP_Rewrite $wp_rewrite
 */
function wp_redirect_admin_locations() {
	global $wp_rewrite;
	if ( ! ( is_404() && $wp_rewrite->using_permalinks() ) )
		return;

	$admins = array(
		home_url( 'wp-admin', 'relative' ),
		home_url( 'dashboard', 'relative' ),
		home_url( 'admin', 'relative' ),
		site_url( 'dashboard', 'relative' ),
		site_url( 'admin', 'relative' ),
	);
	if ( in_array( untrailingslashit( $_SERVER['REQUEST_URI'] ), $admins ) ) {
		wp_redirect( admin_url() );
		exit;
	}

	$logins = array(
		home_url( 'wp-login.php', 'relative' ),
		home_url( 'login', 'relative' ),
		site_url( 'login', 'relative' ),
	);
	if ( in_array( untrailingslashit( $_SERVER['REQUEST_URI'] ), $logins ) ) {
		wp_redirect( wp_login_url() );
		exit;
	}
}

As you can see ‘wp-login’ is not recognized as a default WP Dashboard URI.

dwinden