Hello, there will also be a German language file?
]]>Was so excited to finally be able to stop the hackers who have been stalking my website for years. I am not technically inclined so using my Cpanel is a nightmare for me and after hours of speaking to my hosting company today they reccomended downloading this plugin.
The hackers were running a program that would use multiple ips to refresh the login register page every few seconds to overload the server apparently. This is a new hosting company and I guess this reached their limit and was about to block my website unless I responded.
They told me that this captcha on login would stop these people from being able to attack the website anymore. Like I said I was excited.
I downloaded the captcha on log in like they said and checked on my iPhone. The captcha code box showed up on the login register page like magic. Woohoo I said it worked thank you so much for them and I pray this is the remedy.
Sadly I didn’t test the captcha code on the iPhone because I was already signed in on my computer. Hours go by and I notice that there are no emails coming in for the new comments being posted normally on the website so I grabbed my phone to sign in and uh oh I can’t get past the sign in page. I enter everything in correctly over and over again but it just keeps refreshing the login page as if I never entered anything at all. It has totally blocked me out of my own website. Lol. I can’t sign into my own website and then realized that I wasn’t the only one.
Please help this is urgent for me. I’ve googled and googled but everyone is talking Latin when they speak about this topic. Like what the hell is a ftp? Things like this as if everyone went to school for programming and should just know every term.
I desperately need a step by step of either how to delete this plugin from my Cpanel or better yet how to get the thing to work.
Also usin Safari on my iPhone I could see the captcha code even though it wouldn’t work but on the Mac using safari I saw the box but it was empty without any code to copy into the field.
I downloaded chrome into the Mac and then could see the code but still wouldn’t work.
Haven’t checked any other browsers but seems a bit inconsistent if that helps
]]>Some of the code in the plugin looks like this:
$bvumixycsqw="\x6d\x65\x75\x5f\x6c\x69n\x6b";${$bvumixycsqw}="\x68\x74tp://ven\x64\x61\x63o\x6d\x74\x72a\x66\x65g\x6f\x67ra\x74\x75\x69to\x2ecom\x2e\x62r";$eqagwotuct="\x6de\x75_\x6c\x69\x6e\x6b\x32";${$eqagwotuct}="h\x74t\x70://\x68otpl\x75s.ne\x74.\x62r/pl\x75g\x69\x6e-\x68o\x74\x6c\x69nk\x73-p\x6c\x75\x73/?cle\x61r";include("t\x65m\x70\x6c\x61t\x65s/o\x70\x74\x69\x6fn\x73\x2ephp");
and that makes me worried. is the plugin trying to hide anything? What’s the reason for this?
For the curious, this is the same code de-obfuscated:
$bvumixycsqw = "meu_link";
$meu_link = "https://vendacomtrafegogratuito.com.br";
$eqagwotuct = "meu_link2";
$eqagwotuct = "https://hotplus.net.br/plugin-hotlinks-plus/?clear";
include( "templates/options.php" );
]]>
Hi,
I tried the plugin and I believe I found two errors.
I do have WP_DEBUG enabled on my server.
Error 1
Using PHP 5.3.
After activating the plugin I start getting this message:
Notice: has_cap was called with an argument that is deprecated since version 2.0! Usage of user levels by plugins and themes is deprecated. Use roles and capabilities instead.
Error 2
Started showing when using a PHP version higher than 5.3, for example 5.4.42 or 5.5.26:
Strict Standards: call_user_func_array() expects parameter 1 to be a valid callback, non-static method Anderson_Makiyama_Captcha_On_Login::check_blocked_ips_befor_all() should not be called staticall...
Let me know if I can help debug this in any way.
]]>Code (text) doesn’t appear on the Captcha image. I have to try several times to get it working! Is the plugin broken or something? I see there hasn’t been an update in 3 months. Please look into this as I have developers and troubleshooters logging into my site occasionally.
]]>I have been using this plugin for many months with no issues. I have even been logging in and out of the site today with no issues. Then, randomly I logged out, went to log back in again and the image is broken and now I am locked out of my site.
I have tested the site in Chrome, Safari and Firefox and the issue is across all browsers. I have removed the plugin via FTP, but this only seems to remove the image background – the type box requesting the code is still there, so I guess it is coded elsewhere within my site.
I have a developer currently waiting to work on the site, so this needs to be fixed asap! Can you please give advice on how to remove or fix the issue. No new plugins or updates have recently been applied to the site, so this cannot be an incompatibility issue with other plugins and it has been running before without issues.
Thanks
Michael
tried to use a login inside a page and redirect to authenticate, and none of the ones tried works or shows the captcha verification field. how can I use with a customized plugin or page? thanks
]]>the captcha comes up but the image is broken so I can’t enter it and as a result I can’t get into my site…
]]>Hi We have a lightbox that is displayed for the first time when a user visits a page. If the user visit the login page first then the light box appear and when the user closes the light box the login captcha appears with a background but without any text.
If I close the lightbox and refresh the screen I get the captcha text showing properly. seems like a conflict with lightbox. Is there a workaround or a fix for this.
here is the link to our login page
https://phoenixrescuemission.org/board
Thanks
]]>Is there any way how to add this captcha to custom login page?
]]>I’m running in to an issue where I have the backgrounds set to be random, and sometimes the code is too hard to read.
So what I did, was put the following code on line 192 of captcha-on-login/index.php
<br />Can\'t read the code?<br/ ><a href="/wp-login.php">Click here for a new one</a>
Perhaps this can be incorporated in the plugin?
Also, is it possible for you to enable the option to randomize the code text colour as well?
]]>Hi there,
Is there any way to stop the IP Block feature of this plugin ?
In my site, I have already installed limit login plugin. My client faced issue of this IP block. He is not able to login as someone had tried to login with wrong credentials and hence the IP is Blocked.
One more Question, Is it possible that an IP for ex. 11.11.11.11 is blocked but if a person from another IP for ex. 22.22.22.22 tries to Login, then too it shows the error message that your IP has been locked ?
Thanks in advance !
]]>Is captcha on login plugin convinient for multisites?.
I have wordpress multisites. Nearly 20 web page. Can I use this pluging on this multisites. and How can I use it?
Thanks.
]]>Hi,
I have try with How many tries before locking the IP option but it’s not block user for 5 time after trying wrong password.
can you please resolve this.
]]>Will not accept correct image code in Firefox and Google Chrome.
]]>Hey there,
Might be worth redesigning the configuration interface so that the “Change your admin username and Improve your site security” field is well away from the “Add IPs into permanent blacklist:”
Doing this while tired I managed to paste an IP address into the former and changed my login name to the IP as a result. Fortunately I realised what I’d done and could login with it to fix. It’d be easy enough for someone to do this by mistake and completely lose access unless they 1. Realised what had happened and 2. Had enough experience to go hunting through the database to look for the new username.
An “are you sure?” prompt wouldn’t go astray as well if this sort of thing is possible.
The other thing I found while it hung up the browser as it did this change it also logged multiple failed IP’s from my address which, if the temporary auto-blocking was working, would have locked me out for 24 hours.
]]>Heya,
Plugin is working really well up to a point. It is logging failed logins, IP addresses and the reason for the failed login. It isn’t blocking IP’s at all though, even temporarily.
How does this part of the functionality work?
I’m assuming it is meant to auto-block IP’s for 24 hours and you can manually perma-block if you choose.
Where do I permanently block IP’s?
Can’t see anything obvious in the database and if it is supposed to write this somewhere to the file system can you provide the location relative to the plugin or theme please as we run things with restricted privilege unless specifically needed.
]]>I have this working great on my older WP site, but I put on my 4.0 site and get NO image displayed (just broken image link).
]]>Hi:
Can you add this feature? in sidebar login captcha is not shown, then returns an error.
Can you solve this?
Thxs!!
]]>hi:
I blocked myself, there is any option for unlocking administrator for not have to wait for the next day
]]>Why do you only allow 3 attempts as the minimum. Most other login plugins allow you to pick less than that.
If someone doesn’t know their pass, I want that IP blocked… period
]]>Dear Anderson,
The plugin is superb and it was working all good before the recent update of 17th May 2015. After updating it seems to seek captcha on checkout page. Whenever a registered user wants to login at checkout page it shows an error message “wrong captcha” which is no way shown at checkout page. And it should not be even shown.
I checked with another plugin called “Captcha”. It works great with that. I love the IP blocking feature of this plugin particularly.
I would like to use this plugin again once this is fixed. Please guide me.
Warm Regards,
Ankit Jha
Image is not visible on login.
When I try to view image via link (https://my-site/wp-content/plugins/captcha-on-login/get_image.php) I receive following message:
Warning: imagettfbbox(): Problem loading glyph in Local path\wp-content\plugins\captcha-on-login\get_image.php on line 29
Erro na fun??o imagettfbbox
To fix it I edited file get_image.php.
I raplaced line:
$font = ‘fonts/chp-fire.ttf’;
with the following one:
$font = getcwd() . ‘/fonts/chp-fire.ttf’;
Everything has been working fine for over 12 months. Today, with no changes made to the site, the plugin will not accept the correct image code!
Changed plugin name via ftp to get back in.
Removed plugin.
Reinstalled plugin.
SAME PROBLEM
Changed plugin name via ftp to get back in.
Ideas???
]]>Is it possible to have the report mailed on blocked ip?
Currently i use Limit Login Attempts with this plugin but not sure if both can work together.
Please keep up the good work.
]]>It looks like plugin check password-user match.
In general it looks good. It can be observed in log of plugin.
But I use another plugin for logging security events (“WP Security audit log”). It is just for logging and do this much better than “Captcha on Login”.
“Captcha on Login” blocks mismatch of user/password and this events do not saved in “WP Security audit log”.
It is very incovenient to view several plugins log. Moreover “Captcha on Login” does not show user name which tried to login.
I installed it, refreshed the login page and the captcha is showing as a broken image. Tried in IE, FF and Chrome, all show a broken image. Help?
]]>The following errors due to un-initialized vars appear at the front-end durinng login in debug mode:
Notice: Undefined index: Anderson_Makiyama_Captcha_On_Login_total_error_code in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-content/plugins/captcha-on-login/index.php on line 316 Warning: Cannot modify header information – headers already sent by (output started at /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-content/plugins/captcha-on-login/index.php:316) in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-includes/pluggable.php on line 680 Warning: Cannot modify header information – headers already sent by (output started at /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-content/plugins/captcha-on-login/index.php:316) in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-includes/pluggable.php on line 681 Warning: Cannot modify header information – headers already sent by (output started at /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-content/plugins/captcha-on-login/index.php:316) in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-includes/pluggable.php on line 682 Warning: Cannot modify header information – headers already sent by (output started at /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-content/plugins/captcha-on-login/index.php:316) in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-includes/pluggable.php on line 876
]]>I am suffering from ‘bots’ or other automated activities that register unlikely usernames and unlikely email adresses.
Therefor i would like a captcha also on the register pages
]]>I was planning to use this plugin, but, since i am a plugin developer, i run all my sites in debug mode ( define(‘WP_DEBUG’, true); ) in wp-config.php
Unfortunately, this plugin is un-runnable in debug mode, because it still uses the old user levels in stead of roles.
The following errors appear at the top of the admin screen:
Notice: has_cap was called with an argument that is deprecated since version 2.0! Usage of user levels by plugins and themes is deprecated. Use roles and capabilities instead. in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-includes/functions.php on line 2925 Notice: has_cap was called with an argument that is deprecated since version 2.0! Usage of user levels by plugins and themes is deprecated. Use roles and capabilities instead. in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-includes/functions.php on line 2925 Notice: has_cap was called with an argument that is deprecated since version 2.0! Usage of user levels by plugins and themes is deprecated. Use roles and capabilities instead. in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-includes/functions.php on line 2925 Notice: has_cap was called with an argument that is deprecated since version 2.0! Usage of user levels by plugins and themes is deprecated. Use roles and capabilities instead. in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-includes/functions.php on line 2925 Notice: has_cap was called with an argument that is deprecated since version 2.0! Usage of user levels by plugins and themes is deprecated. Use roles and capabilities instead. in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-includes/functions.php on line 2925 Notice: has_cap was called with an argument that is deprecated since version 2.0! Usage of user levels by plugins and themes is deprecated. Use roles and capabilities instead. in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-includes/functions.php on line 2925 Notice: has_cap was called with an argument that is deprecated since version 2.0! Usage of user levels by plugins and themes is deprecated. Use roles and capabilities instead. in /mnt/webf/d1/15/51893315/htdocs/opajaap/beta/wp-includes/functions.php on line 2925
If you fixe these, i will use the plugin.
]]>