Suman M.

[Suman M.]

Hi, Replace URL option is to rename URL to something else. If you directly access the old URL it will still be accessible as HMWP doesn’t physically rename any file/folder, it makes use or rewrite rules to mask the url.

You can see the example here – https://support.wpwave.com/documentation/hide-my-wp/features-overview/replace-tools-settings

[Suman M.]

As I mentioned above it could be simple issue related to htaccess file. If you can provide us with your site’s wp-admin login details (as private reply) then we can configure the plugin in your site. Thanks!

[Suman M.]

This reply has been marked as private.

[Suman M.]

No problem. We have noted it down. Let us know if you have any other issue. Thanks!

[Suman M.]

These detectors actually looks for certain wordpress paths, WP plugins/theme keywords, comments, etc. And if those are found it states the site as WordPress site.
They keep on updating detection algorithm meaning that they’ll look for new keywords and patterns.

This our plugin needs to tackle and we too need to keep it updated. We have done some updates to take care of such detections, and this updated version will be out soon.

[Suman M.]

Can you please let us know your site’s wp-admin login details as private reply so that we can look into the issue further? Thanks!

[Suman M.]

Hi, can you please let us know what exactly is the issue you faced? Most of the times it’s related to simple issue in htaccess file which we can resolve for you. Thanks!

[Suman M.]

Hi, I don’t think these detectors cache results that long. These detectors keep on updating their detection algorithm, and hence we also need to keep HMWP plugin updated. We recommend you to wait for the next major release of HMWP plugin which will take care of these detectors too. Thanks!

[Suman M.]

/wp-admin and /wp-login.php are inter-related, and wordpress redirects wp-admin to wp-login.php. I didn’t get, what’s the point of hiding only wp-login.php and not wp-admin. The users and bots will know that it’s WP login page if either /wp-login.php or /wp-admin is accessible. So, either hide both or none.

[Suman M.]

Hi, HMWP IDS detects malicious requests coming to your site and notify you about it. But all these requests might not be harmful and you need not worry as HMWP IDS will take care of this and will block the malicious requests if Impact level is more than 20 (default value specified in HMWP IDS). You can stop receiving emails regarding this by setting “Notification Threshold” option to 0 in IDS Firewall tab.

Note: If in case, valid request is also listed as intrusion then hover over that request name and click on Exclude link to add it to exception list.

[Suman M.]

Hi, I checked it and login is successful only in second attempt. Also, HMWP is deactivated and hence the login issue shall not be related to HMWP pugin. I see that the login path is renamed to /login, so there could be issue there, or some other issue.

Also I see that the site is still not fully secured via https – https://www.screencast.com/t/YjOviAIb

[Suman M.]

The htaccess rules do start with “Rewrite”. Example:

RewriteRule ^other/(.*) /wp-includes/$1 [QSA,L]
RewriteRule ^file/(.*) /wp-content/uploads/$1 [QSA,L]
RewriteRule ^ext/(.*) /wp-content/plugins/$1 [QSA,L]

So Carlos, if you disable OpenLiteSpeed, the .htaccses rules will not be read at all, because nginx doesn’t read .htaccess
>> Does this mean that your site/server uses Nginx? If so then the rules needs to be added to Nginx config. So please confirm if it’s Apache server or Nginx server.

[Suman M.]

The current latest version of HMWP is 5.6.2, and I meant the next version that will be out in some weeks.

To remove/replace HMWP plugin name, please add this replacement in “Replace URLs” section in Replace Tools tab:

wp-content/plugins/hide_my_wp/js/scripts.js ==> hw-scripts.js

[Suman M.]

To block direct access to /wp-admin you will need to enable/check “Hide Admin” option in General Settings tab.
If it’s still the issue then please let us know your site’s wp-admin login details (as private reply) so that we can look into it. Thanks!

[Suman M.]

please keep REST API enabled. Thanks!

[Author]

Posts