Forum Replies Created

Viewing 4 replies - 16 through 19 (of 19 total)
  • Plugin Author apexad

    (@apexad)

    I’m unsure of why the Username/Password Fields are simply going blank when you click the Log In button, but any help you can provide as to what additional plugins or themes you might have that may be causing a conflict will help.

    I’m unable to duplicate this, and have not heard of this issue and the plugin currently has 3000+ downloads.

    Also, you should read the FAQ. It has an answer for this issue. SImply just needed to upload a page that will send you to the wp-admin page from your site. The .htaccess code put in by Secure Hidden Login simply makes sure that the ‘HTTP REFERRER’ is your own site.

    People put hard work into plugins, and to come on and rate it 1 start because you had an issue and did not even attempt to resolve it with the plugin author is very rude.

    Plugin Author apexad

    (@apexad)

    Again, not going to re-write plugins that already exist, but I’ll think about integrating with some already existing login captcha plugins. Any that you recommend?

    Plugin Author apexad

    (@apexad)

    for right now, in v0.9 it’s in the top of the style.css #securehiddenlogin
    z-index: 77777;

    Plugin Author apexad

    (@apexad)

    It does post to wp-login.php, there’s no need to re-invent the wheel and re-write the WordPress login process.

    However, if you enable the ‘block wp-login.php’ feature, it puts a line in the .htaccess file to block direct access to that file(it does this via referrer with exceptions for the mobile apps).

    In addition, the Login form is generated via javascript, so it does not exist on the page until the correct function is run to generate it.

    —-
    So, could someone spoof the referrer and still access wp-login.php? yes! Is this something done normally? no! So, this plugin certainly makes WordPress more Secure than normal. That’s all I can do. There are plenty of other Security plugins which specifically target bots and blocking them, this is not that plugin. The goal is to ‘Hide’ the normal site Login, and it does that very well.

Viewing 4 replies - 16 through 19 (of 19 total)