Hi @javierawkz
define below constant in wp-config.php and try it will disable 2FA. but still the plugin active. you can go to WP security > Two Factor Auth > Settings have the QR code to scan, scan it and then remove below constant and try check login with 2FA code as per Google Authenticator app
define('TWO_FACTOR_DISABLE', true);
Regards
thanks for your answer! I did that and now I’m logged in. But when I go to the wordpress admin panel or click any menu of the wordpress top bar, it sends me to the http://127.0.0.1/. So I cannot access to the plugin configuration
Hi @javierawkz
Do you have cookie based brute force setting on? If not your IP might be in block list. you should try access with different internet network so if your IP blocked still you can access the wp-admin without redirect to 127.0.0.1.
You can remove existing blocked IP from WP security > Dashboard > Permeant blocklist.
Regards
Hi, I solved this with another topic here:
1) Go to wp-content\uploads\aios\firewall-rules\settings.php “aios_enable_brute_force_attack_prevention” remove 1 and make it blank so “” and try login with wp-login.php or renamed login page. If still issue delete the settings.php file.
thanks
Hi @javierawkz
Instead removing from settings please check below comment.
IF you have enabled cookie based brute force wp-admin will be redirected to 127.0.0.1 if cookie not set.
you should try access with secret word so {site_url}?{secret_word}=1 It will save cookie in your browser for 24 hrs the again after 24 hrs it will start redirect to 127.0.0.1 and you can access with {site_url}?{secret_word}=1 only.
If you have enabled and forgot the {secret_word} define AIOS_DISABLE_COOKIE_BRUTE_FORCE_PREVENTION true in wp-config.php and try access with wp-login.php ( or renamed login page) it will disable the cookie based brute force
define('AIOS_DISABLE_COOKIE_BRUTE_FORCE_PREVENTION', true);
Once you logged in please go to WP Security > Brute force > Cookie based brute force prevention.
there check secret_word and save some where to use next and remove the defined constant in wp-config.php
