reeveskd

Forum Replies Created

Viewing 3 replies - 1 through 3 (of 3 total)
  • Forum: Plugins
    In reply to: [All-In-One Security (AIOS) – Security and Firewall] Security Headers and Cookie-Based Brute Force
    Thread Starter reeveskd

    (@reeveskd)

    5 years, 8 months ago

    Howdy! Sorry for the delay, but in the course of working on something else I think I fixed it. I was simultaneously using the LoginPress plugin, and the combination of All-in-One, LoginPress, and CSP suppressing script-src to ‘self’ seems to have caused the trouble. Disabling LoginPress fixed the issue, so I think those two plugins weren’t playing nicely together.

    I’ve disabled and deleted LoginPress as the security is more important to me than the appearance, though as a future feature request, further customization of the login page would be awesome, including:

    – Checkbox to remove forgot password at first login
    – Checkbox to remove forgot password at failed login
    – Customize layout

    Great plugin! 😀

    Forum: Plugins
    In reply to: [All-In-One Security (AIOS) – Security and Firewall] Bruteforce Cookie, now must login with other browser
    reeveskd

    (@reeveskd)

    5 years, 9 months ago

    Welp, nevermind! It self-resolved after about 24 hours. Weird. BRILLIANT PLUGIN, mate.

    Forum: Plugins
    In reply to: [All-In-One Security (AIOS) – Security and Firewall] Bruteforce Cookie, now must login with other browser
    reeveskd

    (@reeveskd)

    5 years, 9 months ago

    I’d like to expand on this, as I am having a similar issue. Firstly, I must confess that I have several plugins that I think may have some overlap. For example, AIOWPSF does most of my heavy lifting, but I also have Wordfence for its active scanning. Moreover, I have a login screen customizer, so that might have something to do with it. Finally, I use a standard cache plugin.

    Everything is working GREAT for the most part, firstly. This plugin is fantastic, and thanks for making it. I’ve secured my site better than ever after a nasty attack, and things are running smoothly. I especially love redirecting brute forcers to a special little page where I can tell them what I think of them. 😉

    On the subject of brute force, that’s my issue: I had no luck whatsoever with the page rename method, but the cookie method worked great… BUT, only when I go to Private mode in Safari. All Google modes including incognito don’t work to login and redirect me to the “go away” page I specified. This occurs even after a total cache-and-history wipe.

    What might be the reason that Safari Private works, but Google Incognito doesn’t? I’d love not to have to open the second browser, though I’d rather have to do that and have the security than give it up.

Viewing 3 replies - 1 through 3 (of 3 total)