Restrict access to admin-post.php

I don’t think that disabling admin-post.php is a good idea. Such solution may break WP, some plugins and themes.

But there is another, much simpler solution. Just add your action for admin_post (without nopriv) and process it properly – so if it’s a login action and user is already logged in, redirect him to proper url…

Related Posts:

  1. “Too many redirects” ONLY when trying to access wp-admin page
  2. Admin Page Redirect
  3. Unable to login and wp-login.php redirects to wp-admin%2F&reauth=1?
  4. Wrong canonical link on wp-admin pages
  5. stop redirection on /wp-admin call to /wp-login
  6. wp-admin produces a 302 redirect to itself
  7. How to remove items from +New admin menu?
  8. Users are redirected to homepage instead of wp-admin
  9. How to show an error message after publishing a post?
  10. Restrict access to admin but allow admin_post hook
  11. Unwanted redirect in admin area
  12. Login to wp-admin “redirect_to” points to wrong URL after migration
  13. How to get the password and username of the add new user form (admin back end) in wordpress
  14. wp-login.php — redirect logged in users to custom URL
  15. Can’t access wp-admin Internal Server Error 500
  16. Can’t access admin dashboard with wp-admin without /index.php after it
  17. Adding body class to login page?
  18. Change Dashboard url
  19. WordPress subdomain wp-admin redirects to main domain
  20. How to change how long items are kept in the trash?
  21. Admin first hook that outputs HTML?
  22. Display $pagenow error notice on all admin pages
  23. Can I edit the wp_post > post_content right before its inserted/updated?
  24. Why is there an intermediate redirect to https://public-url.org/wp-admin?
  25. Prevent /wp-admin/ from redirecting to homepage?
  26. How to check if upload window came from the featured image link?
  27. https://mydomain/wp-admin redirects to wp-login.php?redirect_to=https%3A%2F%2Fmydomain%2Fwp-admin%2F&reauth=1
  28. Redirect non-admin users away from wp-admin/index.php (main dashboard page) to wp-admin/profile.php
  29. WordPress (behind HAProxy and Jetty), not multisite, in sub folder – and /en/wp-admin/ keeps redirecting to /wp-admin/
  30. Created a new subdomain with same content. Should I add a redirect in my old subdomain?
  31. wp-admin – 404 after custom login form
  32. How to fix ‘WordPress redirection loop problem in wp-login.php page’?
  33. is_admin() not working when updating a post in the admin panel
  34. wp-admin 302 redirects
  35. Too many redirects after added SSL redirect on port 80 virtual host
  36. Can I hook into wp_update_core outside of the admin?
  37. ‘wp’ hook supposed to trigger when editing a post?
  38. Can’t access wp-admin, redirects to http://%24domain/wp-admin/
  39. Unable to properly login
  40. How do I add something to the “Edit Tag” page in wp-admin?
  41. Redirect an entire WordPress site on a subdomain, except wp-admin
  42. Admin sometimes redirects to HTTPS
  43. Too Many Redirects – WP-Admin Only
  44. WP Admin Login keeps redirecting to login
  45. CPU overload spam – redirect link to wp-admin and new post
  46. How to access wp-admin from original website after setting the domain redirect/forwarding
  47. Add HTML to custom post type edit page
  48. admin_post_nopriv_{$action} is secure?
  49. WordPress /wp-admin redirect to wrong port in docker
  50. Login redirect_to url is pointing to a url with the port
  51. Redirect from wp-admin back to page
  52. Can’t access WP-Admin via HTTPS
  53. Wp-admin Redirection loop after moving to subdirectory
  54. Trying to login to my site redirects me to the first page
  55. Avoid executing a function (redirect) if I’m in the admin area
  56. stop customize.php redirect to login page if admin is not logged in
  57. wp-admin redirects to standard wordpress page
  58. I cannot go to http://novathon.cloud.reply.eu/wp-admin – always redirected to /wp-login
  59. Unable to log in as admin
  60. Random HTTPs redirections at admin area in shared hosting
  61. How can visitors redirect wp-admin to the homepage?
  62. plugin: ‘init’ hook, check if we’re not in admin
  63. Why when I click on a link into the WP admin panel I am redirected to a link that doesn’t contains wp-admin prefix, so I obtain 404 error
  64. Word press wp-admin redirecting to reauth=1
  65. Wildcard multisite wp-admin url wrongfully redirected
  66. How to prevent a user from updating other users in WordPress?
  67. adding the category to the admin column for a custom post type?
  68. Change page title in admin area
  69. How to filter by post-format in admin?
  70. Make fonts.com font work in TinyMCE (iframe referrer issue)
  71. Securing wp-admin folder – Purpose? Importance?
  72. Opening specific posts on WP takes lot of time and freezes the editor
  73. How to load a CSS file into WordPress admin area using Child Theme? [closed]
  74. Getting “Cannot modify header information – headers already sent” error, but only on backend
  75. How to add wordpress blog to Windows 2008 R2 site
  76. Admin table list API?
  77. How to change user admin_color with WP CLI?
  78. WP Admin/ WP Login Redirect to themselves
  79. Unable to log in to localhost wp-admin page on XAMPP server
  80. Missing ‘Move to Trash’ option from bulk select box
  81. Force HTTPS 301 redirect with hook
  82. get_current_screen and the WP_Screen class
  83. Disable or lock parent pages from being edited in wordpress admin
  84. How login is possible, if I deny login page via .htaccess with allow ip
  85. Unable to display WordPress admin bar in the frontend as an admin
  86. View all comments on post one click
  87. I can’t access my wp admin dashboard
  88. How to logout the current user without notices and warnings?
  89. Updated to wordpress 5.5.1 doesn’t work
  90. How can I change block editors suggested links to display another url (i.e. from api.mysite to www.mysite)
  91. How to change labels in the projects page
  92. Failed to load resource: the server responded with a status of 431 ()
  93. Why WordPress not logout after I have close my browser?
  94. Images on admin backend not showing up
  95. Launch wordpress site to local computer from live website backed-up
  96. wp-admin won’t “remember me” in Chrome & Firefox
  97. Override WordPress Core File?
  98. WordPress Users page missing user count next to different types of users
  99. Removing /wp in Permalink URL of subdomain led to inaccessibility to WP Dashboard
  100. Creating an custom admin page from scratch