iThemes Security (formerly Better WP Security)
[resolved] Enabling hide backend breaks plugins with Ajax handler (8 posts)

  1. Pablo
    Posted 1 year ago #


    I have installed a new login plugin that needs /wp-admin/admin-ajax.php to work.

    When enabling hide backend in iThemes Security, it seems that this feature blocks the access to the /wp-admin directory for that plugin also.

    I have found this post regarding secure the admin area, but I donĀ“t know if this method would be compatible with iThemes Security.

    Anyone who knows how to hide the admin area but the /wp-admin/ or change it to (i.e.) myadmin/admin-ajax.php?

    I really want to hide the admin area, but I need the WP plugins working too.

    Thank you in advance.


  2. Blue Lotus Works
    Posted 1 year ago #

    +1 confirming hide backend still breaks front-end ajax on version 4.05. This is a bug, not a feature that was fixed back in version 3.0.10. It affects WooCommerce, numerous Event calendars and hundreds of plugins in the WordPress.org repository based on a simple search of "ajax"

    Please resolve quickly even if it means reverting to the htaccess method used in 3.6.6 temporarily.

  3. BookClubReader
    Posted 1 year ago #

    Same problem here ... Hiding back-end breaks plugins. Thanks.

  4. pboleo
    Posted 1 year ago #

    I have the same problem.

    If one is logged on, the page with [calendar] will show in the month calendar (front-end).

    If one is logged off, no calendar is shown in a page with [calendar] in it.

    The code snippet <?php echo do_shortcode('[eventlist]') ?> will work without problem in either situation, although clicking will only show details if one is logged on.

  5. Pablo
    Posted 1 year ago #

    Hi again,

    iThemes Security 4.0.7 was released and now the issue has gone (in my site at least).

  6. pboleo
    Posted 1 year ago #

    Yep. I just updated iThemes to the latest release and the calendar plugin now works like a charm.

  7. jinsley8
    Posted 1 year ago #

    Having this problem with the latest iThemes Security update. When plugin is activate i get a admin-ajax.php 503 error

  8. swatts
    Posted 11 months ago #

    I'm having this same issue with a calendar plugin not working due to the admin-ajax conflict with a hidden admin backend. Any progress on a fix yet?

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic