• naninfa0

    (@naninfa0)


    After migrating our WordPress site to a new server, the front-end loads fine, but both /wp-login.php and /wp-admin return this error:

    The requested URL was rejected. Please consult with your administrator.
    Error 500 – Internal Server Error


    What I’ve Tried:

    • Enabled WP_DEBUG, WP_DEBUG_LOG, and WP_DEBUG_DISPLAY → No errors shown or logged.
    • Recreated a fresh .htaccess file → No change.
    • Disabled the “WP Hide Login” plugin and accessed /wp-login.php directly → Same issue.
    • Checked site-specific error logs → No related errors recorded.

    Would appreciate any suggestions on where else to check or how to trace what’s causing this block. Thank you!

Viewing 2 replies - 1 through 2 (of 2 total)
  • misteralex844

    (@misteralex844)

    That usually happens when the new server’s security settings or web application firewall (like ModSecurity) are blocking admin URLs rather than WordPress itself being broken. Try temporarily disabling ModSecurity or asking your hosting provider to whitelist /wp-admin and /wp-login.php. Also check if the server’s SELinux rules or reverse proxy configurations are filtering POST requests. If you have a CDN or web firewall (like Cloudflare), pause it briefly to test. Once you confirm access works, re-enable protection with custom rules that allow WordPress login traffic.

    Thread Starter naninfa0

    (@naninfa0)

    @misteralex844 Thanks for the suggestion. So far we have Wordfence Security for the web app firewall and yes we do also have Cloudflare. Will try to check if this is the cause

    If you can explain more how to implement this: Also check if the server’s SELinux rules or reverse proxy configurations are filtering POST requests.

Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.