Personal data export blocked by login page

  • Resolved ryvix

    (@rrhode)


    4 years, 9 months ago

    Hi there,

    I believe I found an issue when exporting user data on the privacy tab on the account area.

    If you export your data it will send an email with a confirm link but that link does not appear to work correctly on the site I was testing on.

    It only shows the UM login page.

    It should show a page with a message saying you will get a download link when the admin will fulfills the request (which looks kind of horrible).

    Due to the fact it only shows the login page and doesn’t complete the confirmation properly it seems like something to do with UM not forwarding the requests to that page through to WP. It doesn’t send the admin a link.

    In fact when I modify the URL to be wp-login.php instead of /login in the URL it will work.

    However it will send the admin a link that does not actually work. It is the wrong URL to the export data page in the admin.

    Admittedly I haven’t tried disabling themes or plugins yet to see if that fixes any of this since it seems like things that aren’t conflicts and I’ll have to create a copy of the site to do that anyway. I just wanted to report it here in case it is indeed an issue with UM. Maybe it’s actually not UM at all but WP itself.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter ryvix

    (@rrhode)

    I figured this out finally. It was a line in the child theme that was setting the login URL to /login

    Hey, I’m having the same issue, I dissabled the wp-login.php becouse of constantly brute force atacks, I’m using custom urls for login, register and reset passwords, when I request the data I recieved an email with a link to the log-in page with the key, like this: .com/login/?action=confirmaction&request_id=52007&confirm_key=YT2K5r5oIXZ6srWO9137

    But at the end nothing happen, how did you fix the problem?

    Thread Starter ryvix

    (@rrhode)

    I removed the code that was redirecting the login page and let it use it.

    You could use WordFence to protect your site from brute force attacks.

    So the link if is not wp-login/?(key) doesn’t work? could you tell me how the link looks like please?

    Thread Starter ryvix

    (@rrhode)

    Sorry, I no longer have that site setup like that so I don’t really know how it should look. I actually switched to using some other plugin for now.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Personal data export blocked by login page’ is closed to new replies.