Home button on generated public WP site calls wp-login.php

[paulproteus]

@avcobe writes on sandstorm-io/sandstorm#672

1. Generated a public site from the wp site built in the sandstorm server.
2. removed cookies and history (firefox on mac)
3. browsed to the site but could not go to homepage after leaving it for some other page on the site. (wp-login.php appended on the homepage url)

(I'm moving this issue here to the WordPress-specific issue tracker.)

[dwrensha]

I'm not sure that I understand what the problem is here. @avcobe, what do you mean by "homepage"? Do you mean the admin panel? The only way that you'll be able to access the admin panel is through the Sandstorm shell; your published site should have no public link back to it. This a security feature. Compare it to the typical WordPress setup, in which the entire world can open /wp-login.php and start trying passwords.

[avcobe]

I mean the homepage on the site itself - not trying to log in. One ends up having to manually take away the log in php suffix from the address to go back to the "homepage"

On 11 August 2015 21:44:12 GMT+01:00, David Renshaw [email protected] wrote:

I'm not sure that I understand what the problem is here. @avcobe, what
do you mean by "homepage"? Do you mean the admin panel? The only way
that you'll be able to access the admin panel is through the Sandstorm
shell; your published site should have no public link back to it. This
a security feature. Compare it to the typical WordPress setup, in which
the entire world can open /wp-login.php and start trying passwords.

---

Reply to this email directly or view it on GitHub:
#7 (comment)

Sent from my Android device with K-9 Mail. Please excuse my brevity.

[dwrensha]

@avcobe I'm unable to reproduce that behavior. Could you link me a published site that exhibits this behavior? Or could you tell me more details about the content of the site? Did you import content from another WordPress install? What theme are you using? Are you using any plugins?

[avcobe]

Today I could not reproduce the fault.
(the fault was with Firefox on a Mac, Firefox being freshly cleared of
cookies, history and cache)
Today I register no fault - Glad it works

PS agree with non-log-in-to-public-site policy. Security no brainer.

On 12 August 2015 at 01:23, David Renshaw [email protected] wrote:

@avcobe https://github.com/avcobe I'm unable to reproduce that
behavior. Could you link me a published site that exhibits this behavior?
Or could you tell me more details about the content of the site? Did you
import content from another WordPress install? What theme are you using?
Are you using any plugins?

—
Reply to this email directly or view it on GitHub
#7 (comment)
.

[xet7]

This issue was moved to sandstormports/wordpress-sandstorm#5