0

I use a .htaccess password protection to secure my wp-login.php. For me as the admin of the WP/WooCommerce installation everything works fine so far (my password manager helps me to remember the tons of passwords). But now I have the problem, that there are are also registered customers which should be able to see their own customer accounts.

When these customers want to log out from their account, they click on the link /customer-logout/ (which is in fact just the wp-login.php) and the .htaccess password protection appears. But, of course, my customers don´t have this password (and should not have).

Is there any solution for this? Maybe it´s possible to create a new logout function just for the user role "customer"? Or maybe you have any other ideas?

Thanks in advance for your help :)

  • That's the point of password protection, so no one else can access it. You can use a plugin to create your custom login/logout pages, without even the need to access wp-login.php. – Jack Johansson Apr 4 '17 at 16:41
  • You could try the plugin Theme My Login. It has several hook/filters you can use to manipulate certain actions. – Beee Feb 17 '18 at 14:25
0

check this may be useful i had similar issue https://ivycat.com/protect-wordpress-login-brute-force-attacks-htaccess/

  • Please note that link only answers are not helpful if the link dies, add gist of the solution here instead of linking to somewhere else. – bravokeyl Apr 4 '17 at 17:55
  • Maybe I´m wrong, but the page you link to just says "Protect your site with a .htaccess" without any solution of the multi user problem ;) – Mel Apr 5 '17 at 12:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.