• I’m currently using Password Protected on a site I’m developing (I don’t want people signing up as users just yet). One thing I’ve noticed about this plug-in (which on the whole I’m very happy with) is how it handles 404s for users who haven’t entered a password yet. I noticed in my web traffic an unauthenticated user who went to:

    https://mywordpresssite.com/?author=1

    This took them to my sites 404 page which showed the content of the site and he could see all the menus, links etc. Clicking on any link then redirects to the password page. Ok, I know I could fix this in a few ways (edit the 404 page, stop user enumeration) but I think the plug in needs to be changed so that unauthenticated users who request a page that would result in a 404 get immediately redirected.

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘404 should be redirected’ is closed to new replies.