ithemes security hide backend option not letting me run php files with queries

Yes, for the iTSec Pro plugin here.

You opened a topic on the iTSec free plugin forum on www.remarpro.com

dwinden

Hi,
I only opened it here because, unfortunately, I have the student membership of the toolkit, and that only gives me access to the student support forum which I haven’t found to be very helpful. Though I’m guessing this isn’t just a pro issue, but I’m not totally sure on that.
-Michael.

Hey Michael,

Lets try to narrow this down. Test disabling the features below and see if that helps.

Hide Backend

Suspicious Query Strings

Long URLs

Thanks,

Gerroald

Hi,
Thanks for the suggestions. Unfortunately, I can’t seem to disable any of these features because any time I submit a form, it says not found. I’m thinking it could be not liking some kind of post data (or perhaps any post data at all), but I’m unsure why. Another note is that when I go to update plugins, I click on update, and it will go to the updating page but then in the part that usually pops up to say they’ve been updated successfully, it says not found.
Thanks,
-Michael.

Also, I tried disabling iThemes security pro by renaming the plugin folder, but that made all sorts of problems — I couldn’t seem to log in at all. Now that I’ve re-enabled it, though, logging in also gives a not found when I successfully login and it brings me to /wp-admin.
Thanks,
-Michael.

Hey Michael,

It definitely sounds like Hide Backend isn’t playing nice with your environment. Try adding the code below to your wp-config.php. Then see if you can deactivate/reactivate the plugin. If you’re able to successfully do that you’ll need to re-configure the settings as this will wipe them. I’d avoid re-enabling Hide Backend.

define( 'ITSEC_DEVELOPMENT', true );

Thanks,

Gerroald

Hi,
Does this define also work for iThemes security pro? Because I can’t get into my site even with that define in the wp-config.php. I login, and it goes to /notfound. The odd thing is, when I go to /wp-admin (without a slash after it), it gets in, but when I click on a link in my dashboard, for example installed plugins, so I can deactivate and reactivate the plugin, it goes again to notfound.
Thanks,
-Michael.

Hi,
Ok, this may have been a false alarm, apparently wordpress is redirecting me to /wp-login.php?redirect_to=…&reauth=1 (not the hidden backend url), so it was saying not found because iThemes security pro was blocking me from going there.
Thanks!
-Michael.