php - Bypass .htaccess authorization for registration page in Wordpress -
i use .htaccess rule add layer of password security wordpress login page. whole wp-admin
protected. users wish register, lands on page username
, password
prompt authentication
.
is there anyway can bypass user registration uri?
i have authentication
url - www.example.net/wp-login.php
but couldn't exclude authentication
prompt url - www.example.net/wp-login.php?action=register
this .htaccess rule:
<filesmatch "wp-login.php"> authname "authorized users only" authtype basic authuserfile /home/user/.wpadmin require valid-user </filesmatch>
is there anyway exclude security authentication
queried url registering in site?
possibly (not tested) you'll need rewrite rule create specific url registration page eg.
rewriteengine on rewriterule wp-register wp-login.php?action=register [nc,l]
then block disable authentication url eg:
<location "wp-register"> order deny,allow allow satisfy #authbasicfake dummyregonlyuserid dummyregonlypass </location>
if doesn't work is, try adding dummyregonlyuserid password file , uncommenting directive.
Comments
Post a Comment