2
You can add the static form code to your main site's code (your domain in this case is example.com and your subdomain is sub.example.com):
<form name="loginform" id="loginform" action="https://sub.example.com/wp-login.php" method="post">
<p>
<label for="user_login">Username or Email Address</label>
...
2
So, we figured out what it was.
In the options table (wp_options for some, we chose to do away with the wp prefix), there's a user_roles (or wp_user_roles value). One of the plugins we used (Yoast SEO in this case) had an update that zapped the value of that option, removing the Administrator role from that list. As a result, no admin could log into the ...
1
The correct answer is to use SSL.
However, you could use javascript to encrypt the password somehow before sending it to the server, but this isn't going to offer much more protection because anyone looking at the data could just as easily unencrypt the password. Here's more on that: https://stackoverflow.com/questions/12291495/how-to-encrypt-form-data.
...
1
Answers in comments here solved this one for me:
Clear cookies for the site in your browser.
Only top voted, non community-wiki answers of a minimum length are eligible
