Is it possible to find out the address of the custom registration page?

The question is – Is there a way to find out what exactly the URL address was replaced with, if it is not your site?

No, there is no reliable method of doing this.

This is because:

  • there are many different methods of doing it and you need to know which method was used to discover the new page
  • the new page may not involve an actual page in the database and rely on rewrites
  • the new page might even be an SSO provider such as login via google, so it wouldn’t even be on that site
  • who says they created a new registration page, it could be disabled completely!
  • it is possible to create replacement login and registration pages purely in PHP code with no plugins or DB involvement.
  • it may be that it was implemented outside of WordPress via URL mappings and rewriting at the server level

Note that the security recommendation is for security through obscurity, and in many cases can reduce the security of a site by swapping the main login and registration page for a bespoke page with inferior security. Many sites do not move this page, e.g. wordpress.com and instead implement more effective security measures such as rate limiting logins, blocking known bots, and multifactor authentication

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)