From wp-login to wp-admin 403 forbidden

did i say mt? i meant wordpress.

Does anybody have some advice?

I am having this problem too.

I want subscribers to login via the wp-login.php, and then redirect back to the blog. But for some reason, as soon as people log in, they are directed to <site>/wp-admin/

How can we fix this?

I just ran into this and thought I’d post my resolution for posterity.

Our client’s host had a mod_security rule that matched on =http.

Going to
example.com/wp-admin/
redirects you to
example.com/wp-login.php?redirect_to=https://...
triggering a 403 Forbidden status from mod_security.

To work around it, add the following to your the top of your .htaccess.

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{QUERY_STRING} ^redirect_to=http
RewriteRule ^wp-login.php https://example.com/wp-login.php? [R=301,L]
</IfModule>