filter_register_url(site_url('/wp-login.php') . '?action=rp&key=abc&login=user#fragment') === $custom . '?action=rp&key=abc&login=user#fragment', 'query and fragment preserved'); a360_assert($router->filter_register_url('https://example.invalid/wp-login.php') === 'https://example.invalid/wp-login.php', 'external host untouched'); a360_assert($router->filter_register_url(home_url('/unrelated/wp-login.php/extra')) === home_url('/unrelated/wp-login.php/extra'), 'unrelated path untouched'); $settings['custom_login_slug'] = 'wp-admin'; update_option($key, $settings); a360_assert($router->filter_register_url(site_url('/wp-login.php')) === site_url('/wp-login.php'), 'invalid stored slug falls back'); $settings['custom_login_slug'] = 'a360-access-7392'; update_option($key, $settings); update_option('permalink_structure', ''); a360_assert($router->filter_register_url(site_url('/wp-login.php')) === site_url('/wp-login.php'), 'plain permalinks fall back'); update_option('permalink_structure', $permalinks); $page_id = wp_insert_post(array('post_type' => 'page', 'post_status' => 'publish', 'post_title' => 'A360 temporary routing test', 'post_name' => 'a360-collision-test')); a360_assert('' === A360_Login_Avatar_Panel_Custom_URL::validate_slug('a360-collision-test'), 'existing page collision rejected'); define('A360_CUSTOM_LOGIN_DISABLED', true); a360_assert($router->filter_register_url(site_url('/wp-login.php')) === site_url('/wp-login.php'), 'emergency constant restores core URL'); } finally { update_option($key, $original); update_option('permalink_structure', $permalinks); if ($page_id) { wp_delete_post($page_id, true); } }