Wordpress wp-login.php and other admin files are getting downloaded instead of opening. How to solve this?

Question

I am using this rule in nginx config present in /etc/nginx/sites-available/wordpress.

location ~ '(/wp-login.php|/wp-admin)' { if ($http_cookie !~ 'cookiename') { return 404; } }

This works and shows 404 when cookie is not present but problem comes when cookie exists and thereafter a dialog box opens to ask where to save wp-login.php and wp-admin files.

How to solve this ? Any help is appreciated.

gts13 · Answer

@jesin , you explained it clearly. I have a doubt that why location ~ \.php$ { is unable to match wp-login.php?

Jesin A · Answer

This comment has been deleted

Jesin A · Answer

On Nginx, when you create a location block for PHP you have to copy the fastcgi block too. So it should look like:

location ~ '(/wp-login.php|/wp-admin)' {
    if ($http_cookie !~ 'cookiename') { return 404; }
    include fastcgi.conf;
    try_files $uri =404;
    fastcgi_pass unix:/var/run/php5-fpm.sock;
}

Also it isn’t a good idea to block /wp-admin as the AJAX handler admin-ajax.php file exists in this directory.

Eldin Hadzic · Answer

And this Sorry

Eldin Hadzic · Answer

Sounds like you have no php installed sudo apt-get install php5-mysql mysql-server

Related

Question

Wordpress wp-login.php and other admin files are getting downloaded instead of opening. How to solve this?

Related