Hi,
The only way is to get to the server and remove the part responsible for this redirect in .htaccess file. You will see the name you provided instead the wp-login.php in this file. It should look similar to this. newadmin is a replacement for wp-login.php in this case. .htaccess whould be located in public_html folder on your server. If you have an access to ftp through WinSCP (remember to show hidden files), you can access this file, edit it and change.
BEGIN WordPress
RewriteEngine On
RewriteBase /
RewriteRule ^index.php$ – [L]
RewriteRule ^newadmin/?$ /wp-login.php [QSA,L]
RewriteRule ^newadmin/register/?$ /wp-login.php?action=register [QSA,L]
RewriteRule ^newadmin/lostpassword/?$ /wp-login.php?action=lostpassword [QSA,L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
END WordPress
Thread Starter
vin234
(@vin234)
Hi,
I couldn’t find similar lines in my htaccess file.
I’m sharing my htaccess file here without any personal information included.
# BEGIN All In One WP Security
#AIOWPS_BASIC_HTACCESS_RULES_START
<Files .htaccess>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>
ServerSignature Off
LimitRequestBody 10240000
<Files wp-config.php>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>
#AIOWPS_BASIC_HTACCESS_RULES_END
#AIOWPS_PINGBACK_HTACCESS_RULES_START
<Files xmlrpc.php>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>
#AIOWPS_PINGBACK_HTACCESS_RULES_END
#AIOWPS_DEBUG_LOG_BLOCK_HTACCESS_RULES_START
<Files debug.log>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>
#AIOWPS_DEBUG_LOG_BLOCK_HTACCESS_RULES_END
#AIOWPS_BLOCK_SPAMBOTS_START
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} ^(.*)?wp-comments-post\.php(.*)$
RewriteCond %{HTTP_REFERER} !^http(s)?://mysite\.com [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule .* http://127.0.0.1 [L]
</IfModule>
#AIOWPS_BLOCK_SPAMBOTS_END
# END All In One WP Security
What do you think I can do to reset the plugin and get wp-admin access as normal? Thanks. vin
The only solution in this case is go to wp-content/plugins folder and rename Protect Your Admin folder to Protect Your Admin Old or even damaged-plugin. It does not matter how you rename the folder. After that try to login via https://www.mywebsite/wp-login.php
Thread Starter
vin234
(@vin234)
Yes I’ve done that now and it did reset itself. Now I can log in using /wp-admin
Thanks.
Now you can go to plugins and see does it see the plugin as inactive. If yes, you can remove the plugin from WordPress level. You welcome. Have a nice Easter.
