Support » Fixing WordPress » Password Protected Page not redirecting properly

  • We have a password protected page that was created using the wordpress interface, this is not custom code.

    About 2 weeks ago our badgercall employee resources page login stopped working for users who log in outside of our network. Example, if I am on a work computer I can log in fine, if I try on my phone or non work computer I receive error?action=postpass. We did move the site to https with secure ssl. The permalinks were changed to match. I checked with our IT department and they state there is nothing in the .htaccess files or anywhere else that would be blocking outside users. Note that no new plugins have been introduced.

    I have been scouring the internet looking for information but haven’t found anything to solve the problem. I am looking for information/direction if possible on what could potentially be causing a problem.

    Thank you in advance.

    The page I need help with: [log in to see the link]

Viewing 15 replies - 1 through 15 (of 17 total)
  • Hello, johannaa, & welcome. When I attempted this, I was asked to log in, which of course I can’t do, as I don’t know & don’t want to know your credentials. So I am receiving a login screen. Are you receiving that? Or does the problem occur after you enter your password to log in?

    I notice you’ve got some caching going on. Perhaps you might want to try clearing that cache & see if that’s at all helpful.

    Hi Jackie,

    The problem occurs after you login, instead of going to the page you get a redirect to error?action=postpass. We are using the Autoptimize plugin, I cleared the cache but it didn’t seem to have any impact. I am at a loss.

    Hi again, johannaa. Please go to ‘Settings > General’ of your site & ensure that the url structure is in fact https://www.supportuw.org.

    If that does not help or is already in place, can we please see your .htaccess file? Please enclose it in , ie,

    line 1
    line 2
    line 3

    I know your IT department says it’s fine, & it likely is, but I guess I’m from Missouri even though I’m not.

    It appears you’re hosting w/Network Solutions, unless my not yet having had coffee this morning is seriously impairing my investigative prowess. If I am indeed correct here, do you have facilities such as a control panel wherein you can see error logs?

    Hi Jackie,

    I double checked the site url and it is indeed set to https://www.supportuw.org.

    # protect the .htaccess file
    <Files .htaccess>
     Order deny,allow
     Deny from all
    </Files>
    
    # SECURE WP-CONFIG.PHP
    <Files wp-config.php>
     Order deny,allow
     Deny from all
    </Files>
    
    <Files xmlrpc.php>
     Order allow,deny
     Deny from all
    </Files>
    
    # protect the phpinfo.php file
    #<Files phpinfo.php>
    # Order deny,allow
    # Allow from 
    # Allow from 
    # Deny from all
    #</Files>
    
    # Fix white space issue in WordPress
    # php_value "auto_prepend_file" /var/www/wejnswpwhitespacefix.php
    
    # Compatitbility needed for IE7 and earlier
    # Needs to be added to stylesheet
    AddType text/x-component .htc
    
    ### COMPRESS SITE - JH 8/5/2016 ###
    Header unset Pragma
    FileETag None
    Header unset ETag
    
    ## EXPIRES CACHING ##
    <IfModule mod_expires.c>
    ExpiresActive On
    ExpiresByType image/jpg "access 1 year"
    ExpiresByType image/jpeg "access 1 year"
    ExpiresByType image/gif "access 1 year"
    ExpiresByType image/png "access 1 year"
    ExpiresByType text/css "access 1 month"
    ExpiresByType text/html "access 1 month"
    ExpiresByType application/pdf "access 1 month"
    ExpiresByType text/x-javascript "access 1 month"
    ExpiresByType application/x-shockwave-flash "access 1 month"
    ExpiresByType image/x-icon "access 1 year"
    ExpiresDefault "access 1 month"
    </IfModule>
    ## EXPIRES CACHING ##
    
    <FilesMatch "\\.(js|css|html|htm|php|xml)$">
     SetOutputFilter DEFLATE
    </FilesMatch>
    ### COMPRESS SITE ###
    
    Options +FollowSymlinks
    RewriteEngine On
    
    # disable directory browsing
    Options All -Indexes
    
    # Custom Error Pages
    ErrorDocument 403 /403.html
    ErrorDocument 404 /404.html
    ErrorDocument 410 "<title>410 Gone</title><h1>Gone</h1><br>The requested resource<br>/<br>is no longer available on this server and there is no forwarding address. Please remove all references to this resource."
    
    # Ultimate htaccess Blacklist from Perishable Press
    # Deny domain access to spammers and other scumbags
    # http://perishablepress.com/ultimate-htaccess-blacklist/
    RewriteBase /
    RewriteCond %{HTTP_USER_AGENT} almaden [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Anarchie [OR]
    RewriteCond %{HTTP_USER_AGENT} ^ASPSeek [OR]
    RewriteCond %{HTTP_USER_AGENT} ^attach [OR]
    RewriteCond %{HTTP_USER_AGENT} ^autoemailspider [OR]
    RewriteCond %{HTTP_USER_AGENT} ^BackWeb [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Bandit [OR]
    RewriteCond %{HTTP_USER_AGENT} ^BatchFTP [OR]
    RewriteCond %{HTTP_USER_AGENT} ^BlackWidow [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Bot\ mailto:craftbot@yahoo.com [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Buddy [OR]
    RewriteCond %{HTTP_USER_AGENT} ^bumblebee [OR]
    RewriteCond %{HTTP_USER_AGENT} ^CherryPicker [OR]
    RewriteCond %{HTTP_USER_AGENT} ^ChinaClaw [OR]
    RewriteCond %{HTTP_USER_AGENT} ^CICC [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Collector [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Copier [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Crescent [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Custo [OR]
    RewriteCond %{HTTP_USER_AGENT} ^DA [OR]
    RewriteCond %{HTTP_USER_AGENT} ^DIIbot [OR]
    RewriteCond %{HTTP_USER_AGENT} ^DISCo [OR]
    RewriteCond %{HTTP_USER_AGENT} ^DISCo\ Pump [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Download\ Demon [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Download\ Wonder [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Downloader [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Drip [OR]
    RewriteCond %{HTTP_USER_AGENT} ^DSurf15a [OR]
    RewriteCond %{HTTP_USER_AGENT} ^eCatch [OR]
    RewriteCond %{HTTP_USER_AGENT} ^EasyDL/2.99 [OR]
    RewriteCond %{HTTP_USER_AGENT} ^EirGrabber [OR]
    RewriteCond %{HTTP_USER_AGENT} email [NC,OR]
    RewriteCond %{HTTP_USER_AGENT} ^EmailCollector [OR]
    RewriteCond %{HTTP_USER_AGENT} ^EmailSiphon [OR]
    RewriteCond %{HTTP_USER_AGENT} ^EmailWolf [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Express\ WebPictures [OR]
    RewriteCond %{HTTP_USER_AGENT} ^ExtractorPro [OR]
    RewriteCond %{HTTP_USER_AGENT} ^EyeNetIE [OR]
    RewriteCond %{HTTP_USER_AGENT} ^FileHound [OR]
    RewriteCond %{HTTP_USER_AGENT} ^FlashGet [OR]
    RewriteCond %{HTTP_USER_AGENT} FrontPage [NC,OR]
    RewriteCond %{HTTP_USER_AGENT} ^GetRight [OR]
    RewriteCond %{HTTP_USER_AGENT} ^GetSmart [OR]
    RewriteCond %{HTTP_USER_AGENT} ^GetWeb! [OR]
    RewriteCond %{HTTP_USER_AGENT} ^gigabaz [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Go\!Zilla [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Go!Zilla [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Go-Ahead-Got-It [OR]
    RewriteCond %{HTTP_USER_AGENT} ^gotit [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Grabber [OR]
    RewriteCond %{HTTP_USER_AGENT} ^GrabNet [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Grafula [OR]
    RewriteCond %{HTTP_USER_AGENT} ^grub-client [OR]
    RewriteCond %{HTTP_USER_AGENT} ^HMView [OR]
    RewriteCond %{HTTP_USER_AGENT} ^HTTrack [OR]
    RewriteCond %{HTTP_USER_AGENT} ^httpdown [OR]
    RewriteCond %{HTTP_USER_AGENT} .*httrack.* [NC,OR]
    RewriteCond %{HTTP_USER_AGENT} ^ia_archiver [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Image\ Stripper [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Image\ Sucker [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Indy*Library [OR]
    RewriteCond %{HTTP_USER_AGENT} Indy\ Library [NC,OR]
    RewriteCond %{HTTP_USER_AGENT} ^InterGET [OR]
    RewriteCond %{HTTP_USER_AGENT} ^InternetLinkagent [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Internet\ Ninja [OR]
    RewriteCond %{HTTP_USER_AGENT} ^InternetSeer.com [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Iria [OR]
    RewriteCond %{HTTP_USER_AGENT} ^JBH*agent [OR]
    RewriteCond %{HTTP_USER_AGENT} ^JetCar [OR]
    RewriteCond %{HTTP_USER_AGENT} ^JOC\ Web\ Spider [OR]
    RewriteCond %{HTTP_USER_AGENT} ^JustView [OR]
    RewriteCond %{HTTP_USER_AGENT} ^larbin [OR]
    RewriteCond %{HTTP_USER_AGENT} ^LeechFTP [OR]
    RewriteCond %{HTTP_USER_AGENT} ^LexiBot [OR]
    RewriteCond %{HTTP_USER_AGENT} ^lftp [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Link*Sleuth [OR]
    RewriteCond %{HTTP_USER_AGENT} ^likse [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Link [OR]
    RewriteCond %{HTTP_USER_AGENT} ^LinkWalker [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Mag-Net [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Magnet [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Mass\ Downloader [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Memo [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Microsoft.URL [OR]
    RewriteCond %{HTTP_USER_AGENT} ^MIDown\ tool [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Mirror [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Mister\ PiX [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Mozilla.*Indy [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Mozilla.*NEWT [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Mozilla*MSIECrawler [OR]
    RewriteCond %{HTTP_USER_AGENT} ^MS\ FrontPage* [OR]
    RewriteCond %{HTTP_USER_AGENT} ^MSFrontPage [OR]
    RewriteCond %{HTTP_USER_AGENT} ^MSIECrawler [OR]
    RewriteCond %{HTTP_USER_AGENT} ^MSProxy [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Navroad [OR]
    RewriteCond %{HTTP_USER_AGENT} ^NearSite [OR]
    RewriteCond %{HTTP_USER_AGENT} ^NetAnts [OR]
    RewriteCond %{HTTP_USER_AGENT} ^NetMechanic [OR]
    RewriteCond %{HTTP_USER_AGENT} ^NetSpider [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Net\ Vampire [OR]
    RewriteCond %{HTTP_USER_AGENT} ^NetZIP [OR]
    RewriteCond %{HTTP_USER_AGENT} ^NICErsPRO [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Ninja [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Octopus [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Offline\ Explorer [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Offline\ Navigator [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Openfind [OR]
    RewriteCond %{HTTP_USER_AGENT} ^PageGrabber [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Papa\ Foto [OR]
    RewriteCond %{HTTP_USER_AGENT} ^pavuk [OR]
    RewriteCond %{HTTP_USER_AGENT} ^pcBrowser [OR]
    # RewriteCond %{HTTP_USER_AGENT} ^Ping [OR]
    RewriteCond %{HTTP_USER_AGENT} ^PingALink [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Pockey [OR]
    RewriteCond %{HTTP_USER_AGENT} ^psbot [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Pump [OR]
    RewriteCond %{HTTP_USER_AGENT} ^QRVA [OR]
    RewriteCond %{HTTP_USER_AGENT} ^RealDownload [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Reaper [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Recorder [OR]
    RewriteCond %{HTTP_USER_AGENT} ^ReGet [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Scooter [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Seeker [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Siphon [OR]
    RewriteCond %{HTTP_USER_AGENT} ^sitecheck.internetseer.com [OR]
    RewriteCond %{HTTP_USER_AGENT} ^SiteSnagger [OR]
    RewriteCond %{HTTP_USER_AGENT} ^SlySearch [OR]
    RewriteCond %{HTTP_USER_AGENT} ^SmartDownload [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Snake [OR]
    RewriteCond %{HTTP_USER_AGENT} ^SpaceBison [OR]
    RewriteCond %{HTTP_USER_AGENT} ^sproose [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Stripper [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Sucker [OR]
    RewriteCond %{HTTP_USER_AGENT} ^SuperBot [OR]
    RewriteCond %{HTTP_USER_AGENT} ^SuperHTTP [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Surfbot [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Szukacz [OR]
    RewriteCond %{HTTP_USER_AGENT} ^tAkeOut [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Teleport\ Pro [OR]
    RewriteCond %{HTTP_USER_AGENT} ^URLSpiderPro [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Vacuum [OR]
    RewriteCond %{HTTP_USER_AGENT} ^VoidEYE [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Web\ Image\ Collector [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Web\ Sucker [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebAuto [OR]
    RewriteCond %{HTTP_USER_AGENT} ^[Ww]eb[Bb]andit [OR]
    RewriteCond %{HTTP_USER_AGENT} ^webcollage [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebCopier [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Web\ Downloader [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebEMailExtrac.* [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebFetch [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebGo\ IS [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebHook [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebLeacher [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebMiner [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebMirror [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebReaper [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebSauger [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Website [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Website\ eXtractor [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Website\ Quester [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Webster [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebStripper [OR]
    RewriteCond %{HTTP_USER_AGENT} WebWhacker [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WebZIP [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Wget [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Whacker [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Widow [OR]
    RewriteCond %{HTTP_USER_AGENT} ^WWWOFFLE [OR]
    RewriteCond %{HTTP_USER_AGENT} ^x-Tractor [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Xaldon\ WebSpider [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Xenu [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Zeus.*Webster [OR]
    RewriteCond %{HTTP_USER_AGENT} ^Zeus
    RewriteRule ^.* - [F,L]
    
    # 5G BLACKLIST/FIREWALL
    # @ http://perishablepress.com/5g-blacklist/
    
    # 5G:[QUERY STRINGS]
    #<ifModule mod_rewrite.c>
    # RewriteEngine On
    # RewriteBase /
    # RewriteCond %{QUERY_STRING} (localhost|mosconfig|scanner) [NC,OR]
    # RewriteCond %{QUERY_STRING} (menu|mod|path|tag)\=\.?/? [NC,OR]
    # RewriteCond %{QUERY_STRING} (mod|path|tag)\=\.?/? [NC,OR]
    # RewriteCond %{QUERY_STRING} boot\.ini  [NC,OR]
    # RewriteCond %{QUERY_STRING} echo.*kae  [NC,OR]
    # RewriteCond %{QUERY_STRING} etc/passwd [NC,OR]
    # RewriteCond %{QUERY_STRING} \=\\%27$   [NC,OR]
    # RewriteCond %{QUERY_STRING} \=\\\'$    [NC,OR]
    # RewriteCond %{QUERY_STRING} \.\./      [NC,OR]
    # RewriteCond %{QUERY_STRING} \?         [NC,OR]
    # RewriteCond %{QUERY_STRING} \:         [NC]
    # RewriteRule .* - [F]
    #</ifModule>
    
    # 5G:[USER AGENTS]
    <ifModule mod_setenvif.c>
    # SetEnvIfNoCase User-Agent ^$ keep_out
     SetEnvIfNoCase User-Agent (casper|cmsworldmap|diavol|dotbot)   keep_out
     SetEnvIfNoCase User-Agent (flicky|ia_archiver|jakarta|kmccrew) keep_out
     SetEnvIfNoCase User-Agent (libwww|planetwork|pycurl|skygrid)   keep_out
     SetEnvIfNoCase User-Agent (purebot|comodo|feedfinder|turnit)   keep_out
     SetEnvIfNoCase User-Agent (zmeu|nutch|vikspider|binlar|sucker) keep_out
     <limit GET POST PUT>
      Order Allow,Deny
      Allow from all
      Deny from env=keep_out
     </limit>
    </ifModule>
    
    # 5G:[REQUEST STRINGS]
    <ifModule mod_alias.c>
     RedirectMatch 403 (https?|ftp|php)\://
     RedirectMatch 403 /(cgi|https?|ima|ucp)/
     RedirectMatch 403 /(Permanent|Better)$
     RedirectMatch 403 (\=\\\'|\=\\%27|/\\\'/?|\)\.css\()$
     RedirectMatch 403 (\,|//|\)\+|/\,/|\{0\}|\(/\(|\.\.\.|\+\+\+|\||\\\"\\\")
     RedirectMatch 403 \.(cgi|asp|aspx|cfg|dll|exe|jsp|mdb|sql|ini|rar)$
     RedirectMatch 403 /(contac|fpw|install|pingserver|register)\.php$
     RedirectMatch 403 (base64|crossdomain|localhost|wwwroot|e107\_)
     RedirectMatch 403 (eval\(|\_vti\_|\(null\)|echo.*kae|config\.xml)
     RedirectMatch 403 \.well\-known/host\-meta
     RedirectMatch 403 /function\.array\-rand
     RedirectMatch 403 \)\;\$\(this\)\.html\(
     RedirectMatch 403 proc/self/environ
     RedirectMatch 403 msnbot\.htm\)\.\_
     RedirectMatch 403 /ref\.outcontrol
     RedirectMatch 403 com\_cropimage
     RedirectMatch 403 indonesia\.htm
     RedirectMatch 403 \{\$itemURL\}
     RedirectMatch 403 function\(\)
     RedirectMatch 403 labels\.rdf
     RedirectMatch 403 /playing.php
     RedirectMatch 403 muieblackcat
    </ifModule>
    
    # www.supportuw.org redirects
    # supportuw.com supportuw.net redirects
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.(com|net)$ [NC]
    RewriteRule ^(.*)$ http://www.supportuw.org/ [R=301,L,NC]
    
    # Block possible SPAMMERS
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} ^action=register.*$
    RewriteRule ^.*$ /formspam/? [R=301,L,NC]
    
    # uwgreatpeople redirects
    RewriteCond %{HTTP_HOST} ^(www\.|)uwgreatpeople\.(org|com)$ [NC]
    RewriteRule ^.*$ http://www.supportuw.org/greatpeople [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)greatpeoplegreatplace\.(org|com)$ [NC]
    RewriteRule ^.*$ http://www.supportuw.org/greatpeople [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)greatpeoplegreatplaces\.(org|com)$ [NC]
    RewriteRule ^.*$ http://www.supportuw.org/greatpeople [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)greatpeoplescholarship\.org$ [NC]
    RewriteRule ^.*$ http://www.supportuw.org/greatpeople [R,L,NC]
    
    # /events fix for SOHE Afternoon
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^events/soheafternoon(.*)$ https://www.uwevents.com/ereg/newreg.php?eventid=312345& [R,L,NC]
    
    # Maintenance Page Redirect
    RewriteCond %{HTTP_HOST} ^maintenance\.supportuw\.org$ [NC]
    RewriteRule ^(.*)$ http://www.supportuw.org/ [R=301,L,NC]
    
    # secure.supportuw.org Redirect
    RewriteCond %{HTTP_HOST} ^secure\.supportuw\.org$ [NC]
    RewriteRule ^(.*)$ http://www.supportuw.org/giving [R=301,L,NC]
    
    # /give Page Redirect
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^give(|/)$ https://secure.supportuw.org/give [R=301,L,NC]
    
    # Sequence Number Rewrite Rule
    RewriteCond %{HTTP_HOST} ^(www\.|secure\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} ^seq=(.*)$
    RewriteRule ^MultiPage/processStep1.do(.*)$ http://www.supportuw.org/giveto/%1 [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|secure\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} ^form=(.*)$
    RewriteRule ^MultiPage/processStep1.do(.*)$ http://www.supportuw.org/giveto/%1 [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|secure\.|)supportuw\.org$ [NC]
    RewriteRule ^MultiPage/processStep1.do(.*)$ http://myuwconnect.org/give [R,L,NC]
    
    # Giving Sequence Number Rewrite Rule
    RewriteCond %{HTTP_HOST} ^(www\.|secure\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} ^seq=(.*)$
    RewriteRule ^giving(.*)$ http://www.supportuw.org/giveto/%1 [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www|secure|)\.supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} ^form=(.*)$
    RewriteRule ^giving(.*)$ http://www.supportuw.org/giveto/%1 [R,L,NC]
    
    # PowerOfNursing redirect
    RewriteCond %{HTTP_HOST} ^(www\.|)powerofnursing\.wisc\.edu$ [NC]
    RewriteRule ^.*$ http://son.wisc.edu/ [L]
    
    # Student Foundation redirect
    RewriteCond %{HTTP_HOST} ^(studentfoundation\.wisc\.edu|(www\.|)uwstudentfoundation\.(net|com|org))$ [NC]
    RewriteRule ^(.*)$ http://www.studentfoundation.wisc.edu [R=301,L,NC]
    
    # Give To Wisconsin redirects
    RewriteCond %{HTTP_HOST} ^(www\.|)givetowisconsin\.(com|net|org)$ [NC]
    RewriteRule ^.*$ http://www.supportuw.org/ [R=301,L,NC]
    
    # myuwconnect redirects
    RewriteCond %{HTTP_HOST} ^(www\.|)myuwconnect\.(com|net|org)$ [NC]
    RewriteRule ^.*$ http://www.supportuw.org/ [R=301,L,NC]
    
    # Concur Redirect Rule
    RewriteCond %{HTTP_HOST} ^concur\.supportuw\.org$ [NC]
    RewriteRule ^.*$ https://uwfoundation.onelogin.com/launch/627727 [R,L,NC]
    
    # Concur Solutions Redirect Rule
    RewriteCond %{HTTP_HOST} ^www\.concursolutions\.com$ [NC]
    RewriteRule ^.*$ https://uwfoundation.onelogin.com/launch/627727 [R,L,NC]
    
    # 1848 Redirect
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^1848.*$ /leadership-giving/1848-society/ [R,L,NC]
    
    # Vanity URLs Rewrite Rule
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} !^unit=(.*)$
    RewriteCond %{QUERY_STRING} ^(.*)$
    RewriteRule ^giveto/(.*)$ /giveto/?unit=$1&%1 [R,L,NC]
    
    # Another Vanity URL Rewrite Rule
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} !^unit=(.*)$
    RewriteCond %{QUERY_STRING} ^(.*)$
    RewriteRule ^pledge/(.*)$ /pledge/?unit=$1&%1 [R,L,NC]
    
    # Stewardship Profiles Rewrite Rule
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} !^unit=(.*)$
    RewriteRule ^profile/(.*)$ /profile/?unit=$1 [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^alumnipark(.*)$ http://www.supportuw.org/how-to-give/area-program/alumni-park/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^annualreport.*$ http://www.supportuw.org/publications/annual-report/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^badgergrad(.*)$ /students/campaign-rep-application/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^caf.*$ http://www.supportuw.org/how-to-give/chancellors-annual-fund/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^cals.*$ http://www.supportuw.org/how-to-give/school-college/cals/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^campus-partners/services/events/submit-donor-event/.*$ http://about.uwadvancement.org/programs-events/event-request/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^campus-partners/services/events/submit-advancement-event/.*$ http://about.uwadvancement.org/programs-events/event-request/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} !^t=(.*)$
    RewriteCond %{QUERY_STRING} ^(.*)$
    RewriteRule ^difference/(.*)$ /difference/?t=$1&%1 [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^disclosures.*$ http://www.supportuw.org/about-us/state-disclosures/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^funds.*$ https://www5.supportuw.org/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^gifts.*$ http://www.supportuw.org/gift-planning/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^givingsetup.*$ http://about.uwadvancement.org/development/giving-url-request/ [R,L,NC]
    
    # New UW Green Bay Online Giving Redirect
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} ^form=uwgb(|&fbcd=5)$
    RewriteRule ^.*$ http://www.uwgb.edu/foundation/ways/online.asp$1? [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^board.*$ /about-us/board-of-directors/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^bhs(|/)$ /bascom-hill-society/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^diversity(|/)$ /how-to-give/diversity/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^campus-partners/cfr/funding-request.*$ https://about.uwadvancement.org/government-corporate/request-for-assistance/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^careyscholarship.*$ /how-to-give/school-college/medicine-and-public-health/john-carey-scholarship/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^gpfs.*$ /giving/?form=fs [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^gp.*$ /giving/?form=gp [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^greatpeople.*$ /how-to-give/area-program/great-people-scholarship/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^harterscholarship.*$ /how-to-give/school-college/medicine-and-public-health/karl-harter-scholarship/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^hillel.*$ /how-to-give/area-program/hillel/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^leadership-giving/womens-philanthropy/.*$ /womens-philanthropy/ [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^legacy.*$ /gift-planning/wisconsin-legacy-society [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^makeagift.*$ /how-to-give/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^match.*$ /how-to-give/matching-gifts/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^mgivingHelp.*$ http://secure.supportuw.org/PayPalDonate/public/help.jsp [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} ^(.*)$
    RewriteRule ^mgiving(.*)$ https://secure.supportuw.org/PayPalDonate/SetCheckout?$1%1 [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^minimed.*$ http://www.supportuw.org/news-post/uw-mini-med-school-2011/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^mobileuw.*$ /give/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^nelson.*$ http://www.supportuw.org/how-to-give/school-college/nelson-institute/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^portal.*$ https://www4.supportuw.org/wps/portal [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^privacy.*$ http://www.supportuw.org/about-us/privacy/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^sam.*$ http://www.supportuw.org/perspectives/samantha-overgaard/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^scg.*$ http://www.supportuw.org/students/senior-class-gift/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^seniorclass.*$ http://www.supportuw.org/students/senior-class-gift/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteCond %{SERVER_PORT} ^80$
    RewriteRule ^share-your-story/(.*)$ https://www.supportuw.org/share-your-story/$1 [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^telefund.*$ /badgercall/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^update.*$ http://www.supportuw.org/contact-us/update/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^uwgb.*$ http://www.uwgb.edu/foundation/ways/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wpc.*$ /womens-philanthropy/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wpp.*$ http://www.supportuw.org/how-to-give/area-program/wisconsin-partnership-program/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wwa.*$ http://www.supportuw.org/bascom-hill-society/weekend-away/ [R,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wp-content/uploads/2010/07/articles_certified.pdf http://www.supportuw.org/wp-content/uploads/articles_of_incorporation.pdf [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wp-content/uploads/2010/07/tax_exemption_affidavit.pdf http://www.supportuw.org/wp-content/uploads/tax_exemption_affidavit.pdf [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wp-content/uploads/2010/07/bylaws_10_06.pdf http://www.supportuw.org/wp-content/uploads/bylaws_10_06.pdf [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wp-content/uploads/2010/07/Form_990_2008.pdf http://www.supportuw.org/wp-content/uploads/Form_990_2008.pdf [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wp-content/uploads/2010/07/Form_990T_2008.pdf http://www.supportuw.org/wp-content/uploads/Form_990T_2008.pdf [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wp-content/uploads/2010/07/Form_990T_2007.pdf http://www.supportuw.org/wp-content/uploads/Form_990T_2007.pdf [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wp-content/uploads/2010/07/irs_tax_determination_letter.pdf http://www.supportuw.org/wp-content/uploads/irs_tax_determination_letter.pdf [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wp-content/uploads/2010/07/wills_trusts_suggested_language.pdf http://www.supportuw.org/wp-content/uploads/wills_trusts_suggested_language.pdf [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^wp-content/uploads/2010/07/Form_990_2007.pdf http://www.supportuw.org/wp-content/uploads/Form_990_2007.pdf [R=301,L,NC]
    
    # 2012 Website Redesign Rules
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^bascom-hill-society/(.*)$ /leadership-giving/bascom-hill-society/$1 [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^gift-planning/estate-gifts/will/$ http://www.supportuw.org/gift-planning/will [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^gift-planning/your-will/$ http://www.supportuw.org/gift-planning/will/your-will [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^gift-planning/estate-gifts/life-income/immediate-annuity/$ http://www.supportuw.org/gift-planning/life-income/charitable-gift-annuity [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^gift-planning/estate-gifts/life-income/(.*)$ http://www.supportuw.org/gift-planning/life-income/$1 [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^gift-planning/annuity-rates/$ http://www.supportuw.org/gift-planning/life-income/charitable-gift-annuity/annuity-rates [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^about-us/womens-philanthropy/$ http://www.supportuw.org/leadership-giving/womens-philanthropy [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^contact-us/follow-us/$ http://www.supportuw.org/contact-us [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^leadership-giving/bascom-hill-society/weekend-away/$ http://www.supportuw.org/leadership-giving/bascom-hill-society/wwc [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^leadership-giving/importance-of-annual-gifts/$ http://www.supportuw.org/annual-giving/importance [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^gift-planning/life-stages/under-age-60/$ http://www.supportuw.org/gift-planning/life-stages/ages-22-45 [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^gift-planning/life-stages/ages-60-70/$ http://www.supportuw.org/gift-planning/life-stages/ages-45-65 [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^gift-planning/life-stages/over-age-70/$ http://www.supportuw.org/gift-planning/life-stages/over-age-65 [R=301,L,NC]
    
    # make-a-gift catch all rule
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^making-a-gift/(.*)$ /how-to-give/$1 [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^students/senior-class-gift/$ http://www.supportuw.org/students/philanthropy [R=301,L,NC]
    
    # telefund.wisc.edu catch all rule
    RewriteCond %{HTTP_HOST} ^(|www\.)telefund\.wisc\.edu$ [NC]
    RewriteRule ^(.*)$ http://www.supportuw.org/badgercall/ [R=301,L,NC]
    
    # Event URLs Rewrite Rule
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} !^s=(.*)$
    RewriteCond %{QUERY_STRING} ^(.*)$
    RewriteRule ^event/(.*)$ /event/?s=$1&%1 [R,L,NC]
    
    # VHS Survey Fix
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^survey/vanhise$ /surveys/vanhise [R,L,NC]
    
    # Surveys URLs Rewrite Rule
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteCond %{QUERY_STRING} !^s=(.*)$
    RewriteCond %{QUERY_STRING} ^(.*)$
    RewriteRule ^surveys/(.*)$ /surveys/?s=$1&%1 [R,L,NC]
    
    # Event Calendar Redirect
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteCond %{REQUEST_URI} !^/events/soheafternoon(.*)$
    RewriteRule ^events(.*)$ http://about.uwadvancement.org/events/ [R,NC,L]
    
    # *.sharethewonderful.org Redirect
    RewriteCond %{HTTP_HOST} ^(www\.|)sharethewonderful\.(com|org)$ [NC]
    RewriteRule ^.*$ http://www.supportuw.org/annual-giving/campaign/ [R,NC,L]
    
    # www.uwfoundation.wisc.edu giving rule
    RewriteCond %{HTTP_HOST} ^(www\.|)uwfoundation\.wisc\.edu$ [NC]
    RewriteRule ^giving(.*)$ http://www.supportuw.org/giving$1 [R=301,L,NC]
    
    RewriteCond %{HTTP_HOST} ^(www\.|)supportuw\.org$ [NC]
    RewriteRule ^about-us/vision-mission-values/$ /about-us/mission-beliefs-values/ [R=301,L,NC]
    
    # www.uwfoundation.wisc.edu catch all rule
    # www.uwfound.wisc.edu catch all rule
    RewriteCond %{HTTP_HOST} ^(www\.|)(uwfoundation|uwfound)\.wisc\.edu$ [NC]
    RewriteRule ^.*$ http://www.supportuw.org/ [R=301,L,NC]
    
    # www.advanceuw.org catch all rule
    RewriteCond %{HTTP_HOST} ^(www\.|)advanceuw\.(org|com|net)$ [NC]
    RewriteRule ^.*$ http://www.supportuw.org/ [R=301,L,NC]
    
    # www.uwadvancement.org catch all rule
    RewriteCond %{HTTP_HOST} ^(www\.|)uwadvancement\.(org|com|net)$ [NC]
    RewriteRule ^.*$ http://www.supportuw.org/ [R=301,L,NC]
    
    # Block external access to wp-login.php file
    <IfModule mod_rewrite.c>
    RewriteEngine on
    RewriteCond %{REQUEST_URI} ^.*?wp-login\.php.*$
    RewriteCond expr "! -R '[IP]/16'"
    RewriteRule ^.*$ /error [R,L]
    </IfModule>
    
    # BEGIN WordPress
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteRule ^index\.php$ - [L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    </IfModule>
    
    # END WordPress
    • This reply was modified 8 months, 3 weeks ago by  stephencottontail.
    • This reply was modified 8 months, 3 weeks ago by  Samuel Wood (Otto). Reason: redact all IP addresses from the htaccess file, per request

    Jackie,

    Would you please delete or make the htacces file private after viewing I cannot have it sitting out on the Internet.

    Moderator Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    @johannaa He doesn’t have the ability to delete the contents of that forum post, and we don’t delete things on the forum without a reason.

    What is there in that htaccess which you consider private? We might redact some of the information, but in general, if you don’t want it to be public, do not post it on a public forum. Asking our volunteer moderators to delete data which is not necessarily private or important is simply too much of an ask for a heavily trafficked forum.

    More to the point, you’ve posted it, therefore it is on the internet and will remain so more or less forever. Google likes our site very much, so even if we do redact it, then it’s too late, Google already has it, as do many others. People subscribe to this forum via emails, other sites mirror it. We cannot delete it from everywhere, so, it’s already on the internet from the moment you posted it and that cannot be undone.

    That is unfortunate. I posted in haste, my company has strict security policies and would not want this information out on the internet. I understand what you are saying but am unsure how simply removing the htaccess will negatively impact the site.

    Johannaa, actually, I find these last lines possibly contributory:
    # Block external access to wp-login.php file
    <IfModule mod_rewrite.c>
    RewriteEngine on
    RewriteCond %{REQUEST_URI} ^.*?wp-login\.php.*$
    RewriteCond expr “! -R ‘192.168.0.0/16′”
    RewriteRule ^.*$ /error [R,L]
    </IfModule>

    Can you check w/your IT folks?

    I feel terrible for asking now, but, having said that, the lines I point out look as though they may be contributory. This is 1 of the standard procedures in these sorts of circumstances.

    Moderator Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    That is unfortunate. I posted in haste, my company has strict security policies and would not want this information out on the internet. I understand what you are saying but am unsure how simply removing the htaccess will negatively impact the site.

    Removing it won’t negatively impact us at all. But people posting stuff and then asking for them to be removed for invalid reasons wastes a lot of the time of our volunteer staff.

    As it says in the Forum Welcome:

    Forum topics will only be edited or deleted at the discretion of the moderators if they represent a valid legal, security, or safety concern.

    This is not one of those three cases. There’s no secret information in your file that I can see. Just a bunch of IP and UserAgent blocking rules (which are more or less worthless and you should probably remove them) as well as a bunch of redirects which are all for public facing pages on your site anyway.

    If you can point to a specific piece of info there that represents one of those three concerns, then we’ll remove that specific piece for you.

    Basically, if you don’t want it to be public, then don’t post it in a public place. And especially don’t violate the policies of your own company.

    Moderator Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    Oh, and @abletec is absolutely correct. The password protection handler is in the wp-login.php code. That code she pointed out in your htaccess will prevent access to that file from external sources. So, as long as that is in there, the normal WordPress password protected posts feature will not work for anybody outside your local network.

    • This reply was modified 8 months, 3 weeks ago by  Samuel Wood (Otto). Reason: correct pronouns

    @otto42, wrong gender, but, that’s ok. thank you for your help, & please accept my apologies if I was in any way out of line. I am truly sorry if that’s the case.

    Moderator Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    Nothing to apologize for. The contents of htaccess is not typically considered to be private information, because it generally doesn’t have any secrets in it.

    Hi Samuel-
    My name is Rob Trefz, I’m the lead Network and Security Engineer for UW Foundation, the company responsible for managing supportuw.org, and a co-worker of Johanna’s.

    My main concern with the .htaccess confg is that it contains private Ip address information about our company. While not a huge deal, it would aid someone performing reconnaissance. Is it possible to sanitize the post by removing the IPs? Thanks!

    Rob Trefz

    Moderator Samuel Wood (Otto)

    (@otto42)

    WordPress.org Admin

    @rwtrefz As requested, I have removed all IP addresses from the file.

Viewing 15 replies - 1 through 15 (of 17 total)
  • The topic ‘Password Protected Page not redirecting properly’ is closed to new replies.