Login Whitelist not restricting login page

  • Resolved amandaconstantinides

    (@amandaconstantinides)


    5 years, 9 months ago

    Hello,

    Thanks for an awesome plugin!!

    I have a question…I’ve enabled the Rename Login Page feature, which is working for our site. I’ve also enabled the Login Whitelist feature.

    From what I understand, the Login Whitelist should only allow listed IPs to access the login page. However, this feature does not seem to be working. Currently it appears that the login page (at the obscured URL) can be accessed from any IP.

    I can see the Login Whitelist lines in my htaccess. We’re on GoDaddy shared hosting. I am using a caching plugin but have cleared cache multiple times.

    Can you provide any suggestions/input for how to troubleshoot this?

    Thanks!

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    From what I understand, the Login Whitelist should only allow listed IPs to access the login page. However, this feature does not seem to be working. Currently it appears that the login page (at the obscured URL) can be accessed from any IP.

    Hi, can you provide more information regarding the testing you have carried out to prove the Whitelist featured does not work in your site.

    Thank you

    Thread Starter amandaconstantinides

    (@amandaconstantinides)

    Troubleshooting steps performed as follows:

    – Verified login whitelist directives appear in .htaccess – appears to be present
    – Attempted to access login page (at renamed URL) from whitelisted IP addresses: successful
    – Attempted to access login page (at renamed URL) from non-whitelisted IP addresses: successful

    I’m not sure how else to test this besides accessing the login page from whitelisted and no-whitelisted IP addresses.

    Is the point of the Login Whitelist feature to prevent non-whitelisted IPs from accessing the login page?

    Thanks!

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, can you go to Settings and Enable Debug: feature. Then carry out a test and go to the Dashboard -> AIOWPS Logs and check the log file. Report back with your findings.

    Is the point of the Login Whitelist feature to prevent non-whitelisted IPs from accessing the login page?

    Yes, that is correct.

    Kind regards

    • This reply was modified 5 years, 9 months ago by mbrsolution.
    Plugin Contributor wpsolutions

    (@wpsolutions)

    Hi @amandaconstantinides,
    Which version of Apache is installed on your webserver?

    Which of the other firewall rules do you have enabled?

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Login Whitelist not restricting login page’ is closed to new replies.