NO BUG: A problem in Custom authentication pages

Browser: Chrome 129.0.6668.101
OS: Windows

Hi team,

If we use a custom login form for login and set it as WordPress default, if we login as WordPress admin, even after closing the browser by searching the login address, there is still access to the WordPress dashboard, While the custom login form is visible.

But the default behavior of WordPress is that by closing the browser, if you search for the address of the WordPress counter, you need to login again, which is really useful in terms of security. But interestingly, in try.bricksbuilder, I created a custom login form and it works exactly like the default WordPress login form.

But on the site of one of the clients that I tried, it does not work as expected. so we will always remain logged in until we logout WordPress.

Hello @HOSEIN,

I’ve tried to reproduce the problem, but either I can’t or I’m not understanding it correctly.

I’ve created a new page and I’ve added a custom Form to it, with “login” action. I see all three fields (name, password, remember me).

In Bricks settings, I set this new page for the Login page.

Then, if I visit this page, with a browser where I’m logged out, and fill the form, it will log me in and I’ll be able to access /wp-admin for example. Then I close the browser and open it again, and when I try to visit /wp-admin, I’m redirected to the custom login page.

This is how it works for me, could you show me your setup and how it works for you, and the issue?

Thanks,
Matej

Hi Matej,

True, you will be redirected to custom login page, but there is wp admin bar and even if you don’t login using the form, you will still have access to the WordPress dashboard.

If you agree, I will explain this step by step.

1- Create a custom login page. (you already did)
2- Logout of WordPress and login with the new form.
3- After you have successfully logged in, close the browser. Please note that you do not logout of WordPress. Just close the browser.
4- Open the browser again and enter your custom login address. For example, domain.com/my-login for me.
5- At this point, you will be redirected to custom login page, but the wp admin bar is there and you can access the WordPress dashboard without completing the form!

But the default WordPress login (wp-admin) does not behave like this. Every time we see the browser, login is mandatory.

There is one more thing…

If we are logged in and search for the custom login page address, we will see the login form. Do you agree that in this situation we should be redirected to the WordPress dashboard? Just like the default WordPress behavior. (When we are logged in, if we search for domain/wp-admin, we will be redirected to the WordPress dashboard)

I hope you are successful in reproducing it. thanks🙏

Hi,

Even with your steps, I can not replicate this.
Can you make sure that you have all configured properly? Custom Authentication Pages – Bricks Academy

Matej

Hi @Matej,

I have already read this article completely. But I still have this problem. It’s strange that it works so well for you. I will check further. I hope to reproduce it before the official release.

Or, if it’s possible, can you send us the login username and password to the website and a link to this thread to help@bricksbuilder.io using the email address you used during the purchase, so we can take a look?

Thanks.

Thank you Matej,

I just sent it.