Restrict access to admin-post.php

I don’t think that disabling admin-post.php is a good idea. Such solution may break WP, some plugins and themes.

But there is another, much simpler solution. Just add your action for admin_post (without nopriv) and process it properly – so if it’s a login action and user is already logged in, redirect him to proper url…

Related Posts:

  1. “Too many redirects” ONLY when trying to access wp-admin page
  2. Admin Page Redirect
  3. Unable to login and wp-login.php redirects to wp-admin%2F&reauth=1?
  4. Wrong canonical link on wp-admin pages
  5. stop redirection on /wp-admin call to /wp-login
  6. wp-admin produces a 302 redirect to itself
  7. How to remove items from +New admin menu?
  8. Users are redirected to homepage instead of wp-admin
  9. How to show an error message after publishing a post?
  10. Restrict access to admin but allow admin_post hook
  11. Unwanted redirect in admin area
  12. Login to wp-admin “redirect_to” points to wrong URL after migration
  13. How to get the password and username of the add new user form (admin back end) in wordpress
  14. wp-login.php — redirect logged in users to custom URL
  15. Can’t access wp-admin Internal Server Error 500
  16. Can’t access admin dashboard with wp-admin without /index.php after it
  17. Adding body class to login page?
  18. Change Dashboard url
  19. WordPress subdomain wp-admin redirects to main domain
  20. How to change how long items are kept in the trash?
  21. Admin first hook that outputs HTML?
  22. Display $pagenow error notice on all admin pages
  23. Can I edit the wp_post > post_content right before its inserted/updated?
  24. Why is there an intermediate redirect to https://public-url.org/wp-admin?
  25. Prevent /wp-admin/ from redirecting to homepage?
  26. How to check if upload window came from the featured image link?
  27. https://mydomain/wp-admin redirects to wp-login.php?redirect_to=https%3A%2F%2Fmydomain%2Fwp-admin%2F&reauth=1
  28. Redirect non-admin users away from wp-admin/index.php (main dashboard page) to wp-admin/profile.php
  29. WordPress (behind HAProxy and Jetty), not multisite, in sub folder – and /en/wp-admin/ keeps redirecting to /wp-admin/
  30. Created a new subdomain with same content. Should I add a redirect in my old subdomain?
  31. wp-admin – 404 after custom login form
  32. How to fix ‘WordPress redirection loop problem in wp-login.php page’?
  33. is_admin() not working when updating a post in the admin panel
  34. wp-admin 302 redirects
  35. Too many redirects after added SSL redirect on port 80 virtual host
  36. Can I hook into wp_update_core outside of the admin?
  37. ‘wp’ hook supposed to trigger when editing a post?
  38. Can’t access wp-admin, redirects to http://%24domain/wp-admin/
  39. Unable to properly login
  40. How do I add something to the “Edit Tag” page in wp-admin?
  41. Redirect an entire WordPress site on a subdomain, except wp-admin
  42. Admin sometimes redirects to HTTPS
  43. Too Many Redirects – WP-Admin Only
  44. WP Admin Login keeps redirecting to login
  45. CPU overload spam – redirect link to wp-admin and new post
  46. How to access wp-admin from original website after setting the domain redirect/forwarding
  47. Add HTML to custom post type edit page
  48. admin_post_nopriv_{$action} is secure?
  49. WordPress /wp-admin redirect to wrong port in docker
  50. Login redirect_to url is pointing to a url with the port
  51. Redirect from wp-admin back to page
  52. Can’t access WP-Admin via HTTPS
  53. Wp-admin Redirection loop after moving to subdirectory
  54. Trying to login to my site redirects me to the first page
  55. Avoid executing a function (redirect) if I’m in the admin area
  56. stop customize.php redirect to login page if admin is not logged in
  57. wp-admin redirects to standard wordpress page
  58. I cannot go to http://novathon.cloud.reply.eu/wp-admin – always redirected to /wp-login
  59. Unable to log in as admin
  60. Random HTTPs redirections at admin area in shared hosting
  61. How can visitors redirect wp-admin to the homepage?
  62. plugin: ‘init’ hook, check if we’re not in admin
  63. Why when I click on a link into the WP admin panel I am redirected to a link that doesn’t contains wp-admin prefix, so I obtain 404 error
  64. Change page title in admin area
  65. Is it possible to set a option, and then redirect to another page directly from a admin notice link?
  66. How to load a CSS file into WordPress admin area using Child Theme? [closed]
  67. Getting “Cannot modify header information – headers already sent” error, but only on backend
  68. Redirect loop (only for multisite network admin)
  69. Cookie value cannot be read until I’ve logged into the WP admin
  70. What corrections does this code need?
  71. Can’t access login screen, wp-login.php 404’s
  72. Distinguish profile user and admin user IDs / get ID of user being edited
  73. How to add wordpress blog to Windows 2008 R2 site
  74. WordPress disable ‘Install Themes’ tab
  75. WordPress Admin Not Loading All Core Scripts
  76. Admin table list API?
  77. How to change user admin_color with WP CLI?
  78. How to apply a CSS file to my admin pages?
  79. Unable to log in to localhost wp-admin page on XAMPP server
  80. Missing ‘Move to Trash’ option from bulk select box
  81. Force HTTPS 301 redirect with hook
  82. Why am I locked out of the system?
  83. Admin post list – adding an option to the date filter dropdown
  84. Disable the “remember me” to wp-admin
  85. How to Restrict Access to all wp-admin pages for subscriber users
  86. Why is WordPress enqueuing admin relevant scripts (e.g., React, ReactDOM, Redux, hooks, TinyMCE etc) when not logged in?
  87. How to add custom CSS and JavaScript file for wp- admin dashboard (backend)
  88. GoDaddy hosting wp-admin problem
  89. WordPress Migration Post Problems
  90. wp-admin and wp-login.php not Accessible after Cloudflare
  91. Strange URLs admin area bug
  92. mysql_escape_string PROBLEM
  93. Cannot access my wordpress website
  94. Custom comment action
  95. Added fields in quick edit screen need to update at the moment
  96. Modify admin panel tab position
  97. not able to add thumbnail custom field in dropdown
  98. No wp-admin, wp-config, or .htaccess folder/file
  99. wordpress admin is broken [closed]
  100. Extend user search in the Wp backend area on the users.php page to allow for searching by email domain and role from the “users search” input box
techhipbettruvabetnorabahisbahis forumueduseduedueduseduseduseduedusedusedu