Jeff Brock
Forum Replies Created
-
For me, the culprit causing this problem was the “Nimbus Screenshot & Screen Video Recorder” extension.
Splendid. Thanks for the quick reply.
Chiming in here … my client is running a site that is only accessible by users logging in to their WordPress accounts. Both WordFence and mod_security are running. This morning users saw this message for about 30 minutes:
“WordPress Login Temporarily Disabled
“We apologize for the inconvenience! You are seeing this message because your site has recently been targeted by attackers attempting to gain access to your WordPress Dashboard. In order to protect your site your WordPress Login page has been temporarily disabled.
“Unfortunately, you will be unable to login to the Dashboard until the block expires.”
I’d prefer to depend on WordFence for protecting against brute force logins, rather than mod_security, so that users aren’t locked out this way. (Also, it wouldn’t be practical at this point to obscure the login URL.) Would I be putting the server at greater risk by turning off mod_security?
Thanks for a great plugin!
Forum: Plugins
In reply to: [WPGlobus] Fatal error activating 1.0.7That worked … thanks for your speedy response!
Forum: Fixing WordPress
In reply to: Getting one word "error" when logging into wp-login.phpI ran into this issue on a development site, where both the front end and back end started generating the single word, “error”, soon after I visited the home page. I believe I tracked it down to the fact that in Better WP Security I had checked “Enable 404 Detection”, and since the site is still in development, a script was generating lots of 404s — which caused my IP to get locked out for 15 minutes. (I had forgotten to add my IP to the plugin’s “404 White List”.)
I implemented the code changes you linked to and that worked like a charm for me — thanks!
Thanks for the reply — I had originally thought that could be the problem, but there is an SMTP plugin running and WordPress does send emails successfully. The odd thing is that Formidable will work properly and send me an email notification, but only if the person filling out the form doesn’t include an email address in any of the text-entry fields.