globsticks

Thank you Aims Infosoft !

Thank you!

thing is that for some reason everytime I update to a parent theme latest version, code written in child theme does not longer function.

So I thought if restore previous backup then child theme works again, but I am not sure if would I be able or not to get parent theme latest version “improvements”?

thank you!

Hi!
Thank you!

• This reply was modified 4 years, 10 months ago by globsticks.
• This reply was modified 4 years, 10 months ago by globsticks.

Hi,

No, I am talking about the users who log in my site without using the “secretslug” who are contributors, not administrators. when they log out the get to see the “secretslug” shown above.

so these users are capable of seeing the secret slug which is the wp-admin slug renamed, and also they can see it on source code page. having that at their disposal they can try a brute force attack at wp-admin.

Thank you!

• This reply was modified 4 years, 10 months ago by globsticks.
• This reply was modified 4 years, 10 months ago by globsticks.

Hi mbrsolution,

My website does have a registration page, so users have to click on the logout link at some point.
I am hiding the admin page via Rename login page secret slug, but I noticed that users can read its value from the URL when they log out. I am unable to utilize cookie brute force feature to hide the “secretslug”.

?do you happen to know how to hide the Login Slug from logout URL please? using another plugin maybe?

(hover on url you will see what I mean)

!Thank you!

` <li id=”menu-item-1788″ class=”bp-menu bp-logout-nav menu-item menu-item-type-custom menu-item-object-custom menu-item-1788″><a
href=”https://www.example.com/secretslug/?action=logout&redirect_to=https%3A%2F%2Fwww.example.com%2F&_wpnonce=c3b1dbd03b&#8221; > Log Out</li >

• This reply was modified 4 years, 11 months ago by globsticks.
• This reply was modified 4 years, 11 months ago by globsticks.
• This reply was modified 4 years, 11 months ago by globsticks.

Thanks Carike !
where it says: secretslug is actually the wp-admin slug, so my concern is to actually hide that instead of displayed it there. do you have any ideas how to hide it or should I use a plugin?

@nikolask1

what do you think I can do here ?

• This reply was modified 4 years, 11 months ago by globsticks.

Hi,

I disabled most of them and nothing happened. unfortunately I might not be able to use cookie brute force feature, it is a pitty.

• This reply was modified 4 years, 11 months ago by globsticks.

Hi,

I followed the steps and logged in, renamed the plugins folder back to its original name and adjusted the settings. Although I am still able to access via /wp-admin instead of cookie based url. what should i do to utilize the cookie based secret url.

Thank you!

Now I cannot access via /wp-login.php
and tried to access with the secret url but I do not get access to the login page. it redirects me back to main page.

Hi,

Nothing really happened. I am still able to log in via /wp-login while The Cookie-Based Brute Force feature is currently active according to dashboard.

Hi,

Yes, I did perform a cookie test before enabling it. it was successful.
I dont have a cache plugin installed in my site. but I use cloudflare Caching, should I access it and select the “purge everything” option?

Thank you

Thank you mbrsolution!

Thanks Carike ??

Hi,
Yes I tried !important already. it does not resize it whatsoever. it is interesting because the other videos dimensions are already resized but not ones under wp native player skin.