Forum Replies Created

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter my-press

    (@my-press)

    In the url, I could find a parameter of this type: ?action=logout

    Thread Starter my-press

    (@my-press)

    Thank you very much for your answer @Ratoli.
    To close the topic, I found how to handle authentication.

    RewriteEngine On
    RewriteCond %{REQUEST_URI} ^/wp-login.php$
    RewriteCond %{QUERY_STRING} ^action=logout
    RewriteRule ^ - [E=noauth]
    
    <FilesMatch "^(wp-login.php)">
    
            Options -Indexes +FollowSymLinks +MultiViews
            AuthName "Protected page. If you are not allowed to be here, leave the page"
            AuthType Basic
            AuthUserFile "/etc/apache2/htaccess/myhtaccess"
            Require valid-user
    
            Order Deny,Allow
            Deny from all
            Allow from env=noauth
    
            Satisfy any
    
    </FilesMatch>

    This works very well !

    Thread Starter my-press

    (@my-press)

    In reading again your answer, actually WooCommerce uses wp- login.php . I know that because I tried to bypass authentication with my button ” disconnect” .

    When a user of my WooCommerce tries to disconnect it, he receives authentication. This authentication is present to prevent brute force attack but stop user to log off .

    I hope my explanation is clear .

    thank you in advance

    Thread Starter my-press

    (@my-press)

    I do not understand the answer because I ‘m sure it’s possible.
    I could find some configuration for this but I can not put them in place .

    Maybe with SetEnvIf.

    Exemple 1 :

    <FilesMatch “^(wp-login.php)”>
    SetEnvIf Query_String ^action=logout(.*) allow

    Options -Indexes +FollowSymLinks +MultiViews
    AuthName “Protected page. If you are not allowed to be here, leave the page”
    AuthType Basic
    AuthUserFile “YOUR_HTACCESS”

    Order Deny,Allow
    Satisfy any
    Deny from all
    Require valid-user
    Allow from env=allow
    </FilesMatch>

    Exemple 2 :

    <FilesMatch “^(wp-login.php)”>

    RewriteEngine On
    RewriteCond %{REQUEST_URI} ^/wp-login\.php [NC]
    RewriteCond %{QUERY_STRING} ^action=logout
    RewriteRule ^ – [ENV=requireAuth:1]

    Options -Indexes +FollowSymLinks +MultiViews
    AuthName “Protected page. If you are not allowed to be here, leave the page”
    AuthType Basic
    AuthUserFile “YOUR_HTACCESS”

    Order Deny,Allow
    Satisfy any
    Deny from all
    Require valid-user
    Allow from env=requireAuth

    </FilesMatch>

    Hello,

    I have the same problem.
    The box with the video remains white 2/3 times.
    By F12 , I can see that it is not loaded .

    Regards,

Viewing 5 replies - 1 through 5 (of 5 total)