• Added new author accounts via admin back end, but cannot access them from outside.

    Backend login page has been changed from WP-admin to something else; likewise admin username. No problem logging in as [admin] and making changes.

    Tried to log in as new author, in Firefox and Chrome. Login fails; returns fresh login screen. After a few tries, lockout protections are activated.

    Changed passwords several times via back end (as admin) or via “lost password” dialog on login screen. Still can’t get in. Cleared cache plugin and browser caches – no change. I have not (at least deliberately) tampered with role permissions.

    Used to have other authors, none now active. So problem/cause might not be new. Only new parameter of which I am aware is that FF and Chrome recently give insecure-connection warnings since I do not have SSL on this site. (Have bought certificate, mainly to avoid scaring off users; it may take a while to install.)

    Anything obvious I’m missing? All suggestions welcome – I have enthusiastic new authors, and want to help them get started posting!

    Thanks in advance-

Viewing 2 replies - 1 through 2 (of 2 total)
  • Can you please share the link of your site?
    Have you modified something like .htaccess file or something else before this issue?

    • This reply was modified 7 years, 8 months ago by Poonam Namdev.
    Thread Starter ctenos

    (@ctenos)

    Apologies; would prefer not to post URL here while having what might be security issues.

    The .htaccess file is large (26kB, mostly blocked IP addresses) and may be too complicated due to multiple security plugins and a few others. Current active plugins:

    Acunetix WP Security
    AJAX Heartbeat Tool
    All In One WP Security
    Block Bad Queries (BBQ)
    Disable Feeds
    Email posts to subscribers
    Heartbeat Control
    iQ Block Country
    Limit Login Attempts
    NewStatPress
    Popup contact form
    StopBadBots
    Wordfence Security
    WP Cerber
    WP-PageNavi

    Only deliberate change in recent weeks was installing Comet Cache; that’s been deactivated, with no effect on login. I also tried disabling all plugins by changing the folder name, again with no improvement.

    The WordPress site (call it WPblog) with login problems is an add-on domain (call it AddOn1.org) to a multi-site business hosting plan (call it MainDomain.com). There are .htaccess files in three places within the cPanel file structure:
    – none in /home/maindomaincom
    – 26kB in /home/maindomaincom/public_html
    – 26kB (same file) in /home/maindomaincom/public_html/addon1org
    – none in /home/maindomaincom/public_html/addon1org/WPblog
    – small ones (ca. 500 bytes) in /home/maindomaincom/public_html/addon2org, addon3org, addonon4org, etc.

    Should I disable one of the 26kB files? What is the best place to keep one for maximum protection?

    Thanks for your help!

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Admin can log in to back end, but author cannot’ is closed to new replies.