Blog

Subscribe
Notify of
guest

5 Comments
Inline Feedbacks
View all comments
Jim
Jim
4 years ago

Website security is a very important thing, so thanks for this useful article.

Babak Badri
Babak Badri
5 years ago

Hi!

Your security features for the registrationmagic forms are very nice. However, they are completely useless if users can bypass the 2FA by going to the default wordpress login page = /wp-login.php.

Doing this they will avoid both the reCaptcha and the 2FA.

Is there or will there be a way of solving this with your plugin?

With best regards,

bb

RegistrationMagic
RegistrationMagic
5 years ago
Reply to  Babak Badri

Default WordPress login is not disabled for RegsitrationMagic as per our specifications. If you wish to get rid of it, specific plugins allows to hide the login page. One such example is: https://wordpress.org/plugins/hide-login-page/

bb
bb
5 years ago

Hi and thanks!

Yeah but that only hides the loginpage. I’m already using that plugin. What if someone finds out? They would have unlimited access to as many tries they’d like to find a password.

Please change my nickname and display name to bb, I don’t want my real name to pop up here on these comments. Thanks you. /b

RegistrationMagic
RegistrationMagic
5 years ago
Reply to  bb

Following the recommended coding implementation standards, we do inherit the security framework encapsulation of the WordPress. This is by design which allows for WordPress login to stay intact.