4XX (Client Error) on Wordpress Wesbite

[skehoe]

I've just taken over the management of a website and am getting 4x  4XX (client Error) issues.

Example: http://inter-italia.com/en/wp-login.php?action=lostpassword

Can anyone give any guidance as how to fix this wordpress?

I also see a lot of 'temporary redirects' due to multilingual plugin - is there anything I can do to fix this?

[stukerr]

Hey Stacey,

In Wordpress the admin area is normally under the wp-admin folder (unless it's been changed), not sure if it's for the same site but the URL http://inter-italia.com/wp-admin/ seems to go to a WP admin page.

Hope that helps!

Stuart

[skehoe]

Thanks Stuart.

That is the admin login page but I'm not sure about the link they mention Example: http://inter-italia.com/en/wp-login.php?action=lostpassword

It just shows up as a 404 error - can't see that the page actually exists?  Not sure where Moz pulls this info from and if its worth being concerned about.

[stukerr]

Ah ok - do you mean that it's showing up in your report of links in Open Site Explorer? If that is the case it is probably because it is linked to from a few pages on your site, including http://inter-italia.com/en/ (under the account drop down it's linked to as 'Forgot Password?')

It looks like this might be an issue with your Worpress theme as it should really be linking to http://inter-italia.com/wp-login.php?action=lostpassword but rather than http://inter-italia.com/en/wp-login.php?action=lostpassword

Best,

Stuart

[evolvingSEO]

Hey There

I answered similar questions here;

http://moz.com/community/q/wordpress-redirect-login-401s

http://moz.com/community/q/wordpress-4xx-errors-from-comment-re-direct

But essentially Stuart has the right idea too. In the drop down it's linking to somewhere where users can go if they forgot their password.

If you don't want this crawled (which I recommend) by Moz, Google, Bing etc add this to your robots.txt file;

Disallow: /wp-login.php?action=lostpassword

So that goes under what's in there now.

[stukerr]

Yep I agree with Dan, unless you really want people to be able to find your lost password page through the search results i'd disallow it as well - actually there is a bunch of stuff you can do to further secure your wp-admin folder should you so choose : http://www.wpbeginner.com/wp-tutorials/11-vital-tips-and-hacks-to-protect-your-wordpress-admin-area/