WordPress.org

Ready to get started?Download WordPress

Forums

Rename wp-login.php (unmaintained)
[resolved] wp-login.php is effectively renamed, but wp-login is still accessible (8 posts)

  1. HerveRenault
    Member
    Posted 1 year ago #

    Plugin version 1.7 installed today.
    Here is a workaround :
    RewriteRule ^wp-login.* - [F,L]
    in .htaccess

    http://wordpress.org/plugins/rename-wp-login/

  2. Ella Iseulde Van Dorpe
    Member
    Plugin Author

    Posted 1 year ago #

    wp-login.php should return a 404 page with this plugin. Is that what you mean by being accessible? Does it give you a 404? Thanks for the feedback!

  3. HerveRenault
    Member
    Posted 1 year ago #

    Hi Janneke, I really mean wp-login without .php extension.
    It gives me a 200 with actual login form.
    Maybe that's because my Apache is configured with MultiViews on.

  4. Ella Iseulde Van Dorpe
    Member
    Plugin Author

    Posted 1 year ago #

    Interesting. I could replace

    strpos( $_SERVER['REQUEST_URI'], 'wp-login.php' )

    with

    strpos( $_SERVER['REQUEST_URI'], 'wp-login' )

    Do you think that would solve your problem? Not entirely sure what MultiViews does.

  5. HerveRenault
    Member
    Posted 1 year ago #

    Yes, it does the trick.

    With MultiViews on, when you access wp-login (without .php) Apache tries to find a "wp-login" file with any extension (could be wp-login.html, wp-login.jpg, whatever) so it ends up with wp-login.php but request URI is just "wp-login".

  6. Ella Iseulde Van Dorpe
    Member
    Plugin Author

    Posted 1 year ago #

    Alright, I'll change this for you with the next version.

  7. Ella Iseulde Van Dorpe
    Member
    Plugin Author

    Posted 1 year ago #

    Resolved in version 1.8.

  8. HerveRenault
    Member
    Posted 1 year ago #

    It works. Thanks !

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic

Tags

No tags yet.