Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

hanzanati's avatar

Protect only login routes with Forge

What would the proper Path setting be in the Security area to protect my /login path ONLY. I just want to prevent people from accessing the login page, but want the API and the other calls to work properly.

However, it doesn't appear that my /login works properly with this setting. I put in the proper credentials, but I am unable to successfully process a login, the page just refreshes.

Any help would be appreciated.

0 likes
2 replies
neilstee's avatar

@hanzanati if you want to prevent others from accessing the /login path, how do you plan on accessing it?

hanzanati's avatar

I’ll enter the server user/pass to access the login page. Just want to have another layer to help prevent bots.

Please or to participate in this conversation.