Use alternative to 404 page after lockout

  • Hello,

    Thanks for the great plugin.

    Would it be possible to add in functionality to select any page to show users after they’ve been locked out (not just a 404 page)?

    Thanks

    Peter

Viewing 9 replies - 1 through 9 (of 9 total)
  • Plugin Author gioni

    (@gioni)

    Hi, peabay!

    Theoretically it’s possible. Could you explain the idea (the scenario)?

    Thread Starter peabay

    (@peabay)

    Hey,

    Currently, if a genuine user enters their password incorrectly 4 times (which happens a lot) they’re shown a 404 page.

    It would be much nicer to redirect them to a page saying “You failed to login, please wait 60 minutes”.

    I did actually cobble this functionality together in the end, but it would be nice to have a dedicated setting.

    Worth noting too that we use a custom login page for non-admin users so they are unable to see how many retries they have left. It would be great to be able to pull out that number for use anywhere on the site.

    Peter

    Plugin Author gioni

    (@gioni)

    Please check your environment – the plugins you have and the active theme because Cerber doesn’t show 404 page when a user is locked out. It shows what you’ve described. The message like: You have reached the login attempts limit. Please try again in 61 minutes.

    Perhaps you have some login related plugin or maybe theme renders that 404 page.

    Plugin Author gioni

    (@gioni)

    Hi! How is it going?

    Thread Starter peabay

    (@peabay)

    Hey,

    I think the ‘You have reached the login attempts limit. Please try again in 61 minutes.’ message is being injected into wp-login.php. We use a custom login page. It posts to wp-login.php but the user never sees it.

    I’m not sure how common they are but my clients almost always want a more integrated login page.

    Not sure what happened to that 404 page I was seeing but I expect my code was causing it.

    We’re running into a similar issue.

    I see that the cerber_404_page() function uses get_404_template() to fetch the template to use. However, since the 404 page is shared with general 404s, it’s impossible to delineate if the current page is due to a login lockout or an actual 404.

    Could you perhaps do the following?

    if (0 == $wp_cerber->getSettings('page404') && $template = apply_filters( 'cerber_404_template', get_404_template() ) ) {

    Either that or look for a custom template first with locate_template( 'cerber.php' ). If that returns empty, then load the 404 template as usual.

    What do you think?

    Plugin Author gioni

    (@gioni)

    I will go with a new filter for the template. Stay tuned!

    Plugin Author gioni

    (@gioni)

    Hi!

    The filter ‘cerber_404_template’ is available in the current development release: https://wpcerber.com/development-version/
    A new version will be uploaded to www.remarpro.com soon.

    Thanks for the update, Gioni!

    Looking forward to the new release.

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Use alternative to 404 page after lockout’ is closed to new replies.