You can do this using login_redirect filter. function my_login_redirect( $redirect_to, $request, $user ) { global $user; if ( isset( $user->roles ) && is_array( $user->roles ) ) { //check for admins if ( in_array( ‘administrator’, $user->roles ) ) { // redirect them to the default place //make wp-admin as your default place, if you customized it … Read more
Sounds like this is what you’re running into. admin_page_access_denied may be the hook you want to use for this. try function dont_show_cheatin_page() { if ( current_user_can( ‘do_not_allow’ ) ) { wp_safe_redirect( admin_url()); // custom redirect instead of Cheatin 403 page exit; } } add_action(‘admin_page_access_denied’, ‘dont_show_cheatin_page’);
Age-old question I guess. Hire someone who, you think, and can understand, is a good fit for you according to their portfolio and past activity. To this day, tracking someone is not that tough. Simply follow them for some days in their social network, and you can sum up something. Even you can [sometimes] verify … Read more
By default, WordPress posts set to private are visible to admins, and you can distinguish them on the frontend because they have ‘Private:’ prepended to their title. However, you might have plugins installed that are modifying this behaviour. It could be your capability management plugin, or it could be WooCommerce. The specifics of third-party plugins … Read more
Create new admin account using proper name and password. Login as new admin and delete old admin account. You are done. Suggestions to use phpMyAdmin MD5 hash are out of date. This doesn’t work anymore:
You just need to move the capability check “inwards”: function wpse_230369_quote_of_the_day( $user ) { $quote = esc_attr( get_option( ‘quote_of_the_day’ ) ); ?> <div class=”visible-only-for-admin”> <h3>Quote of the Day Input Field</h3> <table class=”form-table” > <tr> <th><label for=”quote_of_the_day”>Quote of the Day</label></th> <td> <?php if ( current_user_can( ‘administrator’ ) ) : ?> <input type=”text” name=”quote_of_the_day” value=”<?php echo $quote … Read more
You are perfectly right, ThickBox is old and it supposes to be present in admin Dashboard only, but beeing able to change this kind of behavior makes WordPress great (and sometimes not). Every theme or plugin can actually call this library for his help with the wp_enqueue_script(‘thickbox’) function or it can use it as a … Read more
the current user may not be set at this step then try this : if (user_can($user, ‘administrator’)) { wp_redirect($admin_url); }
Turns out I wasn’t as thorough as I thought in removing vestiges of the hack. Found some more obfuscated PHP in template files, along with some .php files I didn’t have permissions for that shouldn’t have been there. Removed all that, and admin functionality is back to normal.
Have you installed a firewall plugin? Your IP seems to be blocked. I suggest you to turn your modem off and on again to obtain new IP and try login WordPress again.