New to the community? Start here

[Defender] MASK LOGIN AREA

Hi Support,

I am trying to mask the WP login area.

Note that the wp core is in a subdir, application.

When i update the settings i get the following message: "Masking is currently active at https://clickster.nl/application/dashboard"

But when i resolve https://clickster.nl/application/dashboard i get a 404.

When i resolve https://clickster.nl/dashboard i get a login form. But if you login (you dont have to enter any credentials) i get a 404 again.

Do you have any ideas how to fix this?

Thanks in avdvance!

Best regards,

Makke

Sun, 30 Sep 2018 11:59:48
More Defender Pro discussions
Defender Pro
  • Nastia
    • Ex Staff

    Hello Makke

    Hope you’re doing well!

    I could not reproduce the same from my end with a WordPress in a subfolder. I’d like to have a closer look at the situation here, could you please send in your credentials? You can send credentials by using our secure contact form

    https://wpmudev.com/contact/#i-have-a-different-question

    Subject: “Attn: Nastia”

    – WordPress admin username

    – WordPress admin password

    – Login URL

    – FTP credentials (host/username/password)

    – Link back to this thread for reference

    – Any other relevant URLs

    Looking forward to your email!

    Kind regards,

    Nastia

  • Makke
    • WPMU DEV Initiate

    Hi Nastia,

    Thank you for taking the time and effort to look into this.

    I have sent you the credentials via the way you described.

    I must say i have messed with the file structure a bit.

    It might get a bit confusing :smiley:

    If you need any information from me please let me know.

    Thanks!

    Best regards,

    Makke

  • Nastia
    • Ex Staff

    Hello Makke

    I trust you’re doing well!

    The issue was within the .htaccess file, placed in the application/ folder. Once the .htaccess was renamed to .htaccess-test the /dashboard/ login page loaded successfully. I’ve left the .htaccess renamed as it is. I could not edit the file to confirm which of the rules added are causing this issue, the server didn’t allow it.

    There are three blocks of code, to find out which rules are causing this issue, please rename the .htacses-test file back to .htaccess; start removing one block of a code at a time, every time refreshing the application/dashboard page to see if the login page will be shown.

    Let us know how it went!

    Kind regards,

    Nastia

  • Makke
    • WPMU DEV Initiate

    Hi Nastia,

    Thank you for effort.

    The problem was indeed caused within the .htaccess file.

    The block of code which messed up the masking was the one below:

    <IfModule mod_rewrite.c>

    RewriteEngine On

    RewriteBase /

    RewriteRule ^wp-admin/includes/ – [F,L]

    RewriteRule !^wp-includes/ –

    RewriteRule ^wp-includes/[^/]+.php$ – [F,L]

    RewriteRule ^wp-includes/js/tinymce/langs/.+.php – [F,L]

    RewriteRule ^wp-includes/theme-compat/ – [F,L]

    </IfModule>

    Problem solved!

    Kind regards,

    Makke