Would like to find out if there is any way I could customize the wp_login page to remove the "There is no account with that username or email address." validation (show below)

enter image description here

and any email/username entered are all redirected to this check email page instead?

enter image description here

I understand making change to wp-login.php is not advisable.
Seeking experts here for recommendation and advise.

Thanks in advance!

  • if sending a confirmation link is possible then that first screen should be impossible, can you explain the problem that this would solve for you? Doing this would have negative security consequences as it would be possible to list unconfirmed users for exploitation
    – Tom J Nowell
    Nov 15 at 10:01
  • Hi Tom, my intention of removing this email check validation is to prevent user enumeration attacks. Without this validation in place, there is no longer a "hint" made known to an attacker to guess or confirm if the email entered is a valid account to my WP portal.
    – BBBBB86
    Nov 16 at 0:47
  • Do you mean that if I disable the validation check, the confirmation link will be sent out regardless the email entered is a valid or a non-existing account in my portal? I think this can be customized on the PHP end to prevent that right?
    – BBBBB86
    Nov 16 at 1:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.