Skip to content Skip to sidebar

Home › Support › English Support › [Resolved] Avada Global Options > WPML > WP HIde & Security Enhancer URL Problem

[Resolved] Avada Global Options > WPML > WP HIde & Security Enhancer URL Problem

This thread is resolved. Here is a description of the problem and solution.

Problem:
If you're using the WPML plugin with the Avada theme and WP Hide & Security Enhancer Pro, you might encounter an issue where you cannot save options for individual languages when the 'Create a new admin URL instead of the default /wp-admin and /login' option is activated in WP Hide & Security Enhancer Pro.
Solution:
We recommend you try the following workaround until the next WPML release addresses this issue:
1- Edit the 

sitepress-multilingual-cms/classes/language/Detection/Ajax.php

file.
2- Replace the existing code:

private function is_admin_action_from_referer() {<br />    return (bool) Maybe::of( $_SERVER )<br />                       ->map( Obj::prop( 'HTTP_REFERER' ) )<br />                       ->map( Str::pos( '/wp-admin/' ) )<br />                       ->getOrElse( false );<br />}

with:

private function is_admin_action_from_referer() {<br />    $adminSlug = basename( trim( admin_url(), '/' ) );<br /><br />    return (bool) Maybe::of( $_SERVER )<br />                       ->map( Obj::prop( 'HTTP_REFERER' ) )<br />                       ->map( Str::pos( '/' . $adminSlug . '/' ) )<br />                       ->getOrElse( false );<br />}

Please note that this solution might become irrelevant due to future updates or it might not apply to your specific case. We highly recommend checking related known issues at https://wpml.org/known-issues/, verifying the version of the permanent fix, and confirming that you have installed the latest versions of themes and plugins. If the issue persists, please open a new support ticket.

This is the technical support forum for WPML - the multilingual WordPress plugin.

Everyone can read, but only WPML clients can post here. WPML team is replying on the forum 6 days per week, 22 hours per day.

Tagged: 

This topic contains 12 replies, has 0 voices.

Last updated by Osama Mersal 1 week, 4 days ago.

Assisted by: Osama Mersal.

Author Posts
December 18, 2025 at 11:09 am #17674298

WPML

Hi,
I am using your plugin in conjunction with the Avada theme and WP Hide & Security Enhancer Pro.
In Avada Global Options, I have to make separate adjustments for each individual language.

When the WP Hide & Security Enhancer Pro plugin and the option “Admin URL > Create a new admin URL instead of the default /wp-admin and /login” is activated, the options for the individual languages cannot be saved.

I have already discussed this with the developers of WP Hide, and after some testing, I received the following response:
"Indeed, this is still not working in certain language selections.
After back and forth, it turns out the problem is on the WPML, as it checks the default admin URL on Ajax calls. Obviously, that fails if the admin slug is customised. The actual problem is at the file sitepress-multilingual-cms/classes/language/Detection/Ajax.php at the function is_admin_action_from_referer()

Can you please get in touch with WPML support and ask for a fix?
There are 2 approaches for this:
1) Either use a simple code to fetch the actual customised admin URL:
$admin_url = admin_url();
$admin_slug = basename(trim($admin_url, '/'));
2) Or add a filter that we can use on our plugin to return the actual customised admin slug"

Could you kindly assist us with this?
Best regards
Peter
December 21, 2025 at 2:32 pm #17680609

Osama Mersal
WPML Supporter since 02/2020

Languages: English (English )

Timezone: Africa/Cairo (GMT+02:00)

Hi Peter,

Thanks for contacting WPML forums support. I'll be glad to help you today.

First, apologies for the delayed response; it was due to a higher workload.

Please log in to this hidden link">sandbox site and install the "WP Hide & Security Enhancer Pro" plugin.

After that, please replicate the issue and let me know how to reproduce it so I can consult our compatibilty team.

Best regards,
Osama
December 24, 2025 at 7:57 am #17686075

WPML

Hello, I just wanted to reproduce the problem with the rewrite URL/admin URL etc. in the sandbox environment. I installed the plug-in, but the rewrites don't work because:
"Your server operates on Nginx!
Automatic deployment of the rewrite rules is not possible, manual action is required. Refer to the Setup menu for guidelines on adding the rewrite rules to your server."

So unfortunately I can't test it.

Best regards,
Peter
December 31, 2025 at 8:47 am #17698126

WPML

Hello, I received the following email today:
"I'm guessing that your support thread isn't relevant anymore, so I'll be closing it soon. "

Of course, my problem has not been solved at all, and I haven't received any further feedback from you. I was supposed to test it in your sandbox, but that's not possible because the URLs cannot be overwritten on your server, and that's exactly where the problem is in my live environment.
December 31, 2025 at 9:01 am #17698146

Osama Mersal
WPML Supporter since 02/2020

Languages: English (English )

Timezone: Africa/Cairo (GMT+02:00)

Hi,

1) Please let me know if you checked my previous hidden link">reply.

2) I was waiting for your feedback regarding replicating the issue on the CloudWays site, so we can change the configuration as we wish.

Best regards,
Osama
January 2, 2026 at 1:03 pm #17700401

WPML

Hi Osama,
Thank you very much for your feedback!
Sorry, I didn't see your private message in my account.

As you suggested, I have now installed the WP Hide & Security plugin under CloudWays.
The only change the plugin currently makes is that the admin URL is now different – no longer wp-admin but fo-login.

Please go to the Avada menu > Options > Advanced > Code Fields to Tracking Code.
In the default language (in our case now EN), you can enter something and save it without any problems.

Then switch to NL or DE, enter something, try to save it, and you will see the error I described.
As soon as the language parameter is added by WPML, it can no longer be saved correctly - if the admin login has been renamed for security reasons. This also applies to custom CSS, etc.

Best regards
Peter

wpml_wp_hide.jpg
January 4, 2026 at 11:49 am #17702155

Osama Mersal
WPML Supporter since 02/2020

Languages: English (English )

Timezone: Africa/Cairo (GMT+02:00)

Hi Peter,

Thanks for replicating the issue. I've consulted our compatibility team and shared all the information.

I'll update you as soon as I get their reply.

Thanks for your cooperation and patience.

Best regards,
Osama
January 6, 2026 at 10:30 am #17706173

Osama Mersal
WPML Supporter since 02/2020

Languages: English (English )

Timezone: Africa/Cairo (GMT+02:00)

Hi Peter,

Please try this workaround:

1- Translate the homepage
2- Visit the translated homepage on the front end
3- From the top admin bar, click "Avada > Global Options"
4- Add the code and save the settings

Our compatibility team tried that on the staging site in German. Please try it in Dutch and let me know if it works correctly.

Best regards,
Osama
January 7, 2026 at 8:41 am #17708530

WPML

Hi Osama,
I've tested it now. It works, but it's not very practical and quite cumbersome.

I also tested it on one of my websites. I don't use the WPML editor for translation there, but the standard WordPress editor. WPML is only used for language management.

With your “workaround,” I first have to open a page in the WordPress backend. Then I have to use the language switcher to open this page in the desired foreign language. Then I have to display this page in the frontend and then from there go back to the backend to save the global options. This is cumbersome and also annoying because of the loading times. Especially when you're trying things out and switching between languages frequently.

I'm much faster if I temporarily don't rename the admin URL in WP Hide & Security Enhancer, but use the standard URL instead. Then I can simply switch languages in the backend and save the global options in all languages accordingly.

For example, if I have loaded an English-language page in the backend, I can use the WPML flags to switch to another language, edit the page in that language, and save it without any problems.

The same should apply to Avada's global options. I change the language in the backend and should then be able to save the options.

Please take a look at my first post on this topic. The developers of WP Hide have made suggestions for solving the problem there.

Best regards
Peter
January 8, 2026 at 10:29 am #17712351

Osama Mersal
WPML Supporter since 02/2020

Languages: English (English )

Timezone: Africa/Cairo (GMT+02:00)

Hi Peter,

Thanks for your update. I'll discuss with our comp team and get back to you.

Best regards,
Osama
January 11, 2026 at 7:33 am #17718717

WPML

?
January 11, 2026 at 9:43 am #17718858

Osama Mersal
WPML Supporter since 02/2020

Languages: English (English )

Timezone: Africa/Cairo (GMT+02:00)

Hi Peter,

Sorry for the late reply due to the weekend. I didn't receive an update yet. I'll let you know as soon as I get an update.

Best regards,
Osama
January 13, 2026 at 12:33 pm #17725224

Osama Mersal
WPML Supporter since 02/2020

Languages: English (English )

Timezone: Africa/Cairo (GMT+02:00)

Hi,

Thanks for your patience. The issue should be fixed in the next WPML release. Until then, you can use the following workaround:

1- Edit the "sitepress-multilingual-cms/classes/language/Detection/Ajax.php" file
2- Replace:

	private function is_admin_action_from_referer() {
		return (bool) Maybe::of( $_SERVER )
						   ->map( Obj::prop( 'HTTP_REFERER' ) )
						   ->map( Str::pos( '/wp-admin/' ) )
						   ->getOrElse( false );
	}

with:

	private function is_admin_action_from_referer() {
		$adminSlug = basename( trim( admin_url(), '/' ) );

		return (bool) Maybe::of( $_SERVER )
						   ->map( Obj::prop( 'HTTP_REFERER' ) )
						   ->map( Str::pos( '/' . $adminSlug . '/' ) )
						   ->getOrElse( false );
	}

Best regards,
Osama