HMWP breaks redirect to login

[advantagen]

It seems that HMWP is breaking dynamic links/redirects to log in on my site. So for example, /wp-admin/edit-comments.php?comment_status=moderated&comment_type=review used to be a valid link, and now it says “The page or listing you are trying to reach no longer exists or has expired.” …unless the person is already logged in, at which point the link works again.

This also happens when contributors try to edit posts they have access to.

Is there some way to work around this? I’d hate to have to ditch the plugin just because of that, but it’s causing confusion with my users.

[advantagen]

P.S. I do not have Canonical Redirects disabled

Attachments:

You must be logged in to view attached files.

[advantagen]

P.P.S. I’m manually configuring the .htaccess file, and this is what I have (with the admin login key removed for security reasons):

# BEGIN Hide My WP

RewriteRule ^other/js/embed\.min\.js /wp-includes/js/wp-embed.min.js?qIu_hide_my_wp= [QSA,L]
RewriteRule ^vantage/(.*) /wp-content/themes/vantage/$1?qIu_hide_my_wp= [QSA,L]
RewriteRule ^skin_main/style\.css /index.php?parent_wrapper=1&qIu_hide_my_wp= [QSA,L]
RewriteRule ^skin_main/(.*) /wp-content/themes/vantage/$1?qIu_hide_my_wp= [QSA,L]
RewriteRule ^other/(.*) /wp-includes/$1?qIu_hide_my_wp= [QSA,L]
RewriteRule ^file/(.*) /wp-content/uploads/$1?qIu_hide_my_wp= [QSA,L]
RewriteRule ^ext/(.*) /wp-content/plugins/$1?qIu_hide_my_wp= [QSA,L]
RewriteRule ^skin/main\.css /index.php?style_wrapper=1&qIu_hide_my_wp= [QSA,L]
RewriteRule ^skin/style\.css /nothing_404_404?qIu_hide_my_wp= [QSA,L]
RewriteRule ^skin/(.*) /wp-content/themes/child-theme/$1?qIu_hide_my_wp= [QSA,L]
RewriteRule ^ajax /wp-admin/admin-ajax.php?qIu_hide_my_wp= [QSA,L]
RewriteRule ^inc/(.*) /wp-content/$1?qIu_hide_my_wp= [QSA,L]
RewriteRule ^(readme\.html|license\.txt|wp-content/debug\.log|wp-includes/$) /nothing_404_404?qIu_hide_my_wp= [QSA,L]
RewriteRule ^(((wp-content|wp-includes)/([A-Za-z0-9\-\_\/]*))|(wp-admin/(!network\/?)([A-Za-z0-9\-\_\/]+)))(\.txt|/)$ /nothing_404_404?qIu_hide_my_wp= [QSA,L]

# END Hide My WP

[advantagen]

By temporarily removing the last line in the HMWP section of the .htaccess file, I think I’ve worked around the issue. From what little I can tell though, this will reduce the level of protection I’m receiving. So I still welcome your thoughts.

[Suman M.]

Hi, please do these:

– empty out API Base and API query fields in Permalinks & URLs tab
– empty out Ajax URL field

Let us know!

[advantagen]

I’m afraid that made no difference. Any other advice?

[Suman M.]

Can you please let me know the exact steps to re-generate the issue, so that we can check it at our end. Thanks!

[advantagen]

Well to completely duplicate it, you’d need to be using my theme (Vantage from AppThemes), and then clicking on a link to moderate a comment while logged out. I can send you a copy of the theme if you let me know where to send it. (Can I upload it here and set it to private??

That is, it’s not an issue if you’re already logged in. It’s only an issue with the login redirects.

I thought that the issue was resolved by removing the last line in the .htaccess file, but it seems that only disabling the HMWP plugin altogether resolves the issue.

Once i do that, it properly redirects to:

[my domain]/login/?redirect_to=https%3A%2F%2F[my domain]%2Fwp-admin%2Fedit-comments.php%3Fcomment_status%3Dmoderated%26comment_type%3Dreview

…which of course then redirects to the original link, once logged in successfully.

[Suman M.]

This reply has been marked as private.

[advantagen]

Ok great, email sent, and no, I don’t use any redirect plugins. The login redirects are built into the theme itself.

I welcome your thoughts and hope we can get this worked out as I’d love to be able to continue using the plugin.

[Suman M.]

This reply has been marked as private.

[advantagen]

This reply has been marked as private.

[Suman M.]

This reply has been marked as private.

[advantagen]

I reactivated HMWP, copied/pasted settings that I saved previously, saved them, and then un-checked the box for hiding wp-admin, logged out, and tried to click the same link again, only to find the ‘Page Not Found’ once again only this time the page was all messed up with broken formatting/CSS. In fact, I couldn’t even get logged in again until I deleted the plugin via SSH. I’m at my wits end with this thing and starting to regret ever purchasing it.

Any final advice before I give up altogether?

[Suman M.]

Hi, that’s strange. Simply disabling “Hide Admin” option shall not cause such issue. May be that HMWP rules are not added in .htaccess file?
Please, activate the plugin, apply the settings (disable ‘Hide Admin’), add HMWP rules in htaccess file, clear cache if any.
Let us know. Thanks!

[Author]

Posts