Hello,
Thank you for the feedback.
By default we exclude the default WordPress login page http://example.org/wp-login.php from showing the coming soon page. We also exclude any url with the term login, admin, dashboard and account in it.
If we will not exclude the login URL you might get locked out to the site.
Really? The plugin may be passed through on any other page. Thanks for letting me know about the login whitelisting, which is pretty logical.
No problem.
Let us know should you have any other questions.
What questions? YOU ARE ALLOWING REDIRECT to a hidden login option ppl usually pay for to be installed with other plugins or rewrite in the .htaccess. YOU SHOULD leverage your security and do not make people think they have their website secured by “hiding” a few pages. Do secure your plugin. TO WHOEVER READS THIS, do NOT install the plugin until this issue is SOLVED.
@i4963154364 This is a feature and not an issue. This is so people don’t get locked out of their website. Like Francis said it can be disabled.
NOTE: We are NOT a security plugin. If you are using this plugin to secure a login page you are using the wrong plugin.
Also /login is a built-in WordPress shortcut and not something we added.
