Exposes secret login URL

  • Resolved Abbas

    (@xllentech)


    2 years, 9 months ago

    When frontend listing submission is active, this plugin exposes secret WordPress Admin login URL, hidden by WPS HIDE LOGIN plugin.

    Please add warning next to the relevant setting, or fix the redirect.

    Directory->Settings->General->Advanced
    Disable Frontend Listing Submission? checkbox.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Garret L

    (@garret1996)

    Hi @xllentech

    Thank you for reaching out about this. I’m Garret from the customer success team and I’ll be happy to help with this.

    Would you mind sharing where the admin URL is being exposed at? I’ll also need specific steps to see the issue that you’re seeing.

    Please let me know!

    Best,

    Thread Starter Abbas

    (@xllentech)

    Thanks for quick reply.

    it’s hard to show you the demo on my live website now. The steps to reproduce the issue are as below:

    1. Install WPS hide login plugin along with Business directory plugin
    2. Set a secret login URL from Settings-> WPS Hide Login -> Login URL at bottom of the page
    3. On business directory plugin, keep frontend listing submission ON
    4. Go to Business directory front end page without Admin login or maybe on different browser, Add listing, click not registered?

    It takes the visitor to the hidden secret URL.

    Let me know if any questions.
    Thanks for taking time to look into this urgently.

    Plugin Support Garret L

    (@garret1996)

    Hi @xllentech

    Thanks for that helpful information.

    By default, we use the WordPress login and registration system. We have settings to allow you to set custom login and registration pages, that way users aren’t directed to the default WordPress login. To do this go to Directory > Settings > General > Registration. From here, you can add your own login and registration pages as seen below.

    https://imgur.com/T61weaT

    This will prevent users from being directed to your hidden login pages. If you have any questions or concerns, please let me know!

    Best,

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Exposes secret login URL’ is closed to new replies.