Wrong error message when IP blocked by Loginizer

@vivalis

Yes, the old Loginizer code snippet can’t be used any more.
Try to use this code snippet, where a list of valid Loginizer error codes
are sent for usage by the UM login script.

add_filter( 'um_custom_authenticate_error_codes', 'um_custom_authenticate_error_codes_loginizer', 10, 1 );

function um_custom_authenticate_error_codes_loginizer( $array ) {

    return array( 'ip_blocked', 'ip_blacklisted' );
}

Install the code snippet into your active theme’s functions.php file
or use the “Code Snippets” plugin.

https://ww.wp.xz.cn/plugins/code-snippets/

@vivalis

counts as 2 login attempts in Loginizer

I can’t reproduce this issue.
Have you disabled WP and WooCommerce login?

Problem is that the UM wrong password message also appears IF the password is wrong, but it doesn’t appear if the password is correct.

This updated code snippet will now disable any password error message from UM
when Loginizer having a valid error code.

add_filter( 'um_custom_authenticate_error_codes', 'um_custom_authenticate_error_codes_loginizer', 10, 1 );

function um_custom_authenticate_error_codes_loginizer( $array ) {

    return array( 'ip_blocked', 'ip_blacklisted' );
}

add_filter( 'authenticate', 'loginizer_um_integration', 10002, 1 );

function loginizer_um_integration( $loginizer ) {

    if ( ! empty( $loginizer )) {
        if ( $loginizer->get_error_code() == 'ip_blocked' || 
             $loginizer->get_error_code() == 'ip_blacklisted' ) {

            if ( isset( UM()->form()->errors['user_password'] ) ) {
                unset( UM()->form()->errors['user_password'] );
            }
        }
    }
    return $loginizer;
}

@vivalis

This code snippet should work or the UM solution:

https://docs.ultimatemember.com/article/1337-replace-wp-native-login-urls

These are the hooks used by Loginizer during login
code copied from loginizer/init.php lines 306/319.
Do you have the add_action('wp_authenticate'... commented?

// Use this to verify before WP tries to login
// Is always called and is the first function to be called
//add_action('wp_authenticate', 'loginizer_wp_authenticate', 10, 2);// Not called by XML-RPC
add_filter('authenticate', 'loginizer_wp_authenticate', 10001, 3);// This one is called by xmlrpc as well as GUI

// Is called when a login attempt fails
// Hence Update our records that the login failed
add_action('wp_login_failed', 'loginizer_login_failed');

// Is called before displaying the error message so that we dont show that the username is wrong or the password
// Update Error message
add_action('wp_login_errors', 'loginizer_error_handler', 10001, 2);
add_action('woocommerce_login_failed', 'loginizer_woocommerce_error_handler', 10001);
add_action('wp_login', 'loginizer_login_success', 10, 2);

@vivalis

Try this code snippet for more info about the Loginizer WP errors.

The code snippet will post all WP Redirects and WP Errors and stack trace
to the debug.log file in your wp-content folder.

add_action( 'wp_error_added', 'wp_redirect_custom_log', 10, 3 );
add_filter( 'x_redirect_by', 'wp_redirect_custom_log', 10, 3 );

function wp_redirect_custom_log( $x_redirect_by, $location, $status ) {

    global $current_user;

    $traces = debug_backtrace( DEBUG_BACKTRACE_PROVIDE_OBJECT );
    $plugin_trace = array();

    foreach ( $traces as $trace ) {
        if( isset( $trace['file'] )) {

            if ( strpos( $trace['file'], '/plugins/' ) > 0 ) {
                $file = explode( '/plugins/', $trace['file'] );
                if( substr( $file[1], 0, 22 ) != 'wp_redirect_custom_log' ) {
                    $plugin_trace[] = $file[1] . ':' . $trace['line'];
                }
            } 

            if ( strpos( $trace['file'], '/themes/' ) > 0 ) {
                $file = explode( '/themes/', $trace['file'] );
                $plugin_trace[] = 'T: ' . $file[1] . ':' . $trace['line'];
            }

            if ( strpos( $trace['file'], '/wp-includes/' ) > 0 ) {
                $file = explode( '/wp-includes/', $trace['file'] );
                $plugin_trace[] = 'WP: ' . $file[1] . ':' . $trace['line'];
            }
        }
    }

    $trace = date_i18n( 'Y-m-d H:i:s ', current_time( 'timestamp' )) . 'user_id ' . $current_user->ID;

    if ( is_numeric( $location )) {
        $trace .= ' redirect by ' . $x_redirect_by . ', ' . $location . ', ' .  $status;
    } else {
        $trace .= ' WP error code ' . $x_redirect_by . ', message ' . $location . ', data ';
        if ( ! is_array( $status )) {
            $trace .= $status;
        }
        
    }

    $trace .= ' stack trace: ' . implode( ', ', $plugin_trace );

    file_put_contents( WP_CONTENT_DIR . '/debug.log', $trace . chr(13), FILE_APPEND  );

    return $x_redirect_by;
}