login as admin user in wordpress it will trun to mydomain/?=pass

#734020
  • Resolved power1parts
    Rank Math free

    When i use softaculous login as admin user in wordpress it will trun to
    mydomain/?=pass(edited_for_security)&FLUSH_CACHE=1

    im already enable every plugin and check one by one, im sure is rankmath Seo ‘s problem.

    and im not finding anything to edit.

    everytime when i need to go my dashboard,i need to delete the url of “?=pass(edited_for_security)&FLUSH_CACHE=1” and type wp-admin, it not good to use.

    how can i fix it ?

Viewing 8 replies - 1 through 8 (of 8 total)
  • Hello,

    I’m sorry to hear about the issue you’re facing with the URL redirection when logging in as an admin user in WordPress. It seems like the issue is related to the Rank Math SEO plugin.

    To resolve this, you can check if there are any redirection rules set up in the .htaccess file using the Rank Math plugin. You can do this by navigating to WordPress Dashboard → Rank Math SEO → General Settings → Edit .htaccess.

    Once there, you can review and delete any additional redirection rules that might be causing the issue. Here’s a screenshot to guide you through the process:

    edit .htaccess

    After removing any problematic rules, click the Save Changes button and check if the redirection issue is resolved.

    If the problem persists, please let us know, and we’ll be happy to assist you further.

    Sources:
    Random URLs Redirecting Even When No Redirect Was Created » Rank Math
    How to Redirect to URLs With Trailing Slash » Rank Math
    Sorry, You Are Not Allowed to Access This Page » Rank Math
    How To Exclude Rank Math Sitemaps from Caching » Rank Math
    Rank Math Sitemap Issues and Their Fixes » Rank Math

    NO use

    i dont have ant rewite 301 in .htaccess

    Hello,

    Thank you for your patience.

    Rank Math does not have any option to display your password in URLs.

    For troubleshooting, you may try deactivating Rank Math temporarily and check if the issue persists.

    Please note that all of the data you have already configured in Rank Math are saved in your database, so there shouldn’t be any data loss upon doing so.

    If the issue is fixed, then we might need to take a closer look at the settings. Please edit the first post on this ticket and include your WordPress & FTP logins in the designated Sensitive Data section.

    Please do take a complete backup of your website before sharing the information with us.

    Sensitive Data Section

    It is completely secure and only our support staff has access to that section. If you want, you can use the below plugin to generate a temporary login URL to your website and share that with us instead:

    https://wordpress.org/plugins/temporary-login-without-password/

    You can use the above plugin in conjunction with the WP Security Audit Log to monitor what changes our staff might make on your website (if any):

    https://wordpress.org/plugins/wp-security-audit-log/

    We really look forward to helping you.

    Hello,

    I have updated the sensitive data as requested. Can you please check further?

    Thank you.

    I have disabled RANKMATH SEO, and it is normal now, and what I mentioned above is not a password, but a random combination.and its looks like
    https://power1.com.tw/?pass=cawkqpg9pzt8imztcxxo25q977oii607&FLUSH_CACHE=1
    the random of code is between”=”and”&”.

    Disabling can solve the problem , and this is my .htaccess

    <IfModule LiteSpeed>
    CacheEnable public
    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} ^GET|HEAD$
    RewriteCond %{HTTP_HOST} ^power1.com.tw [NC]
    RewriteCond %{REQUEST_URI} !login|admin|register|post|cron
    RewriteCond %{QUERY_STRING} !nocache
    RewriteRule .* – [E=Cache-Control:max-age=300]
    </IfModule>

    # BEGIN LSCACHE
    ## LITESPEED WP CACHE PLUGIN – Do not edit the contents of this block! ##
    <IfModule LiteSpeed>
    RewriteEngine on
    CacheLookup on
    RewriteRule .* – [E=Cache-Control:no-autoflush]
    RewriteRule \.litespeed_conf\.dat – [F,L]

    ### marker NOCACHE COOKIES start ###
    RewriteCond %{HTTP_COOKIE} woocommerce_items_in_cart
    RewriteRule .* – [E=Cache-Control:no-cache]
    ### marker NOCACHE COOKIES end ###

    ### marker CACHE RESOURCE start ###
    RewriteRule wp-content/.*/[^/]*(responsive|css|js|dynamic|loader|fonts)\.php – [E=cache-control:max-age=3600]
    ### marker CACHE RESOURCE end ###

    ### marker FAVICON start ###
    RewriteRule favicon\.ico$ – [E=cache-control:max-age=86400]
    ### marker FAVICON end ###

    ### marker WEBP start ###
    RewriteCond %{HTTP_ACCEPT} “image/webp”
    RewriteRule .* – [E=Cache-Control:vary=%{ENV:LSCACHE_VARY_VALUE}+webp]
    RewriteCond %{HTTP_USER_AGENT} iPhone.*Version/(\d{2}).*Safari
    RewriteCond %1 >13
    RewriteRule .* – [E=Cache-Control:vary=%{ENV:LSCACHE_VARY_VALUE}+webp]
    ### marker WEBP end ###

    ### marker DROPQS start ###
    CacheKeyModify -qs:fbclid
    CacheKeyModify -qs:gclid
    CacheKeyModify -qs:utm*
    CacheKeyModify -qs:_ga
    ### marker DROPQS end ###

    </IfModule>
    ## LITESPEED WP CACHE PLUGIN – Do not edit the contents of this block! ##
    # END LSCACHE
    # BEGIN NON_LSCACHE
    ## LITESPEED WP CACHE PLUGIN – Do not edit the contents of this block! ##
    ### marker BROWSER CACHE start ###
    <IfModule mod_expires.c>
    ExpiresActive on
    ExpiresByType application/pdf A31557600
    ExpiresByType image/x-icon A31557600
    ExpiresByType image/vnd.microsoft.icon A31557600
    ExpiresByType image/svg+xml A31557600

    ExpiresByType image/jpg A31557600
    ExpiresByType image/jpeg A31557600
    ExpiresByType image/png A31557600
    ExpiresByType image/gif A31557600
    ExpiresByType image/webp A31557600

    ExpiresByType video/ogg A31557600
    ExpiresByType audio/ogg A31557600
    ExpiresByType video/mp4 A31557600
    ExpiresByType video/webm A31557600

    ExpiresByType text/css A31557600
    ExpiresByType text/javascript A31557600
    ExpiresByType application/javascript A31557600
    ExpiresByType application/x-javascript A31557600

    ExpiresByType application/x-font-ttf A31557600
    ExpiresByType application/x-font-woff A31557600
    ExpiresByType application/font-woff A31557600
    ExpiresByType application/font-woff2 A31557600
    ExpiresByType application/vnd.ms-fontobject A31557600
    ExpiresByType font/ttf A31557600
    ExpiresByType font/otf A31557600
    ExpiresByType font/woff A31557600
    ExpiresByType font/woff2 A31557600

    </IfModule>
    ### marker BROWSER CACHE end ###

    ## LITESPEED WP CACHE PLUGIN – Do not edit the contents of this block! ##
    # END NON_LSCACHE

    # BEGIN WordPress
    # 在含有 BEGIN WordPress 及 END WordPress 標記的這兩行間的指示詞內容為動態產生,
    # 且應僅有 WordPress 篩選器能進行修改。對這兩行間任何指示詞內容的變更,
    # 都會遭到系統覆寫。
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteRule .* – [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
    RewriteBase /
    RewriteRule ^index\.php$ – [L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    </IfModule>

    # END WordPress
    <Files 403.shtml>
    order allow,deny
    allow from all
    </Files>

    Hello,

    Please follow the steps we have shared above and include the logins in the sensitive data section so we can investigate this issue further.

    Looking forward to helping you.

    Thank you.

    Hello,

    Since we did not hear back from you for 15 days, we are assuming that you found the solution. We are closing this support ticket.

    If you still need assistance or any other help, please feel free to open a new support ticket, and we will be more than happy to assist.

    Thank you.

Viewing 8 replies - 1 through 8 (of 8 total)

The ticket ‘login as admin user in wordpress it will trun to mydomain/?=pass’ is closed to new replies.