[wp-trac] [WordPress Trac] #19607: home/wp-admin and home/wp-login.php should redirect when home != siteurl

WordPress Trac wp-trac at lists.automattic.com
Mon Dec 19 02:58:09 UTC 2011


#19607: home/wp-admin and home/wp-login.php should redirect when home != siteurl
-------------------------+-----------------
 Reporter:  nacin        |      Owner:
     Type:  enhancement  |     Status:  new
 Priority:  normal       |  Milestone:  3.4
Component:  Canonical    |    Version:
 Severity:  normal       |   Keywords:
-------------------------+-----------------
 Say you have the following setup: home: http://example.com, and siteurl:
 http://example.com/wordpress.

 The wp-admin and wp-login.php links are example.com/wordpress/wp-admin/
 and wordpress/wp-login.php. But /wordpress/ can be anything, of course.
 This makes finding the proper place to log in hard.*

 In the case of WordPress in a subdirectory, we should trap 404 requests
 for /wp-admin/ and /wp-login.php and redirect them to the proper URL.

 * Note that this is not at all a security measure. There are ways to find
 where the files are located, including HTTP headers and body.

 Props @matt for the idea.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/19607>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list