Keep the old domain operational with valid TLS, map old URLs to equivalent new resources, update dependencies, monitor adoption, and retire it only when safe.
Trace every redirect hop without auto-following, identify its owner, point valid entry URLs directly to the canonical destination, and remove intermediates in order.
Treat a bulk redirect mapping as release data. Normalize and validate sources, reject conflicts and loops, import in batches, test samples, and keep a rollback export.
Use a regex redirect only for a bounded URL family. Anchor the pattern, constrain captures, test positive and negative cases, order rules carefully, and prevent loops.
Choose a WordPress redirect status from permanence and request-method behavior. Test the real client, payload, destination, cache, and removal plan.
Treat WooCommerce My Account as a private routed application. Verify page assignment, endpoints, cookies, redirects, templates, and cache isolation with a test customer.
Keep custom login, logout, and recovery routes private and dynamic at the CDN. Compare edge and origin responses, add exact bypasses, and purge only stale entries.
Changing the WordPress login URL hides one form; it does not remove authentication routes or stop credential attacks. Classify fresh events by endpoint and layer.
Trace one WordPress session across its authentication cookie, next request, server node, cache, and expiry. Align hosts, HTTPS, keys, clocks, and session policy.
Trace the WordPress test cookie from Set-Cookie to the next request. Fix the first domain, path, scheme, SameSite, header, or cache rule that breaks the round trip.