New to the community? Start here

[Defender Pro] Mask login issue.

Defender Masking URL works fine but I still could access the site from /wp-login.php

Wed, 11 Mar 2020 8:34:20
More Defender Pro discussions
Defender Pro
  • Adam
    • Support Gorilla

    Hi Daniel

    I hope you’re well today!

    I checked the site and it seems that the “masked” login page (the one under Defender’s masked login URL) is the default WP login page while the one under original URL is much customized.

    By default, with Defender’s login masking, a visit to such page should result in an “error” message instead of serving a login page and it seems that “something” is overriding that. I’d suspect the theme as it seems to be very “user-centric” and think it might actually be customizing the login.

    I didn’t find any settings for it but it would be relatively easy to test: temporarily switch to e.g. Twenty Twenty theme, clear all cache and see if /wp-login.php is still working. If not, then it’s a confirmation that the issue is theme related and we’d need to investigate it further.

    Alternatively, you might try to just enable redirection in Defender’s masking settings to see if it will “catch up” and redirect to an URL that you set there from the /wp-login.php page.

    But if it doesn’t, then the theme test would be necessary to start with.

    Would you give that a try and let me know about results, please?

    Kind regards,
    Adam

  • Daniel
    • The Incredible Code Injector

    Thanks for following up, I did test out different theme on the staging version of the site and the /wp-login was indeed masked ok.

    I have asked the theme developer if he can shed some light on how to disallow the forcing of this.
    If you can think of anything in the meantime let me know, the dev is a little slow in responding.

    Regards

    Daniel

  • Predrag Dubajic
    • Support

    Hi Daniel,

    I’m afraid that we don’t have access to the premium theme that you are using so we can’t be sure what exactly is causing it.

    If your theme devs can give you some information on where and how the changes to login are done we can forward it to our Defender guys to check if there’s something that can be done from our end to get the two working together.

    Best regards,
    Predrag