Support » Plugin: User Registration & User Profile - Profile Builder » Users can’t Log out when wp-login is protected

  • Resolved delef77

    (@delef77)


    In order to improve website security I password protected the wp-login.php file using the htaccess and htpassword method. The problem is that now, while users can log in fine, they cannot log out without the http authentication prompting them for the username and password which only the site admin should know. This therefore stops users from logging out.

    I looked at profile builder and noticed that this is likely happening because the logout link wants to access the file that was password protected (https://www.sitename.com/wp-login.php?action=logout&redirect_to=https%3A%2F%2Fwww.sitename.com%2Flogin%2F&_wpnonce=xxxxxxxxxx).

    Do you know how to navigate around this issue? I would really like to have this extra authentication process in place to improve site security but if users cannot log out it is a big problem.

    Thanks in advance

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Gabriel Berzescu

    (@gabrielberzescu)

    Hi there,

    Sorry, there is currently no way around this.

    We are using the default WordPress logout functionality.

    We avoid building duplicate functionality where we can, because the plugins is already quite complex as it is.

    With the best of regards,
    Gabriel

    Plugin Author Gabriel Berzescu

    (@gabrielberzescu)

    Perhaps you can find a third party plugin that logs out the users in some other way, I don’t know…

Viewing 2 replies - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.