• Resolved rhisflow

    (@rhisflow)


    Hi guys ??

    I want to report what I believe to be a bug with the cookie-based brute force protection feature.

    I have this feature enabled on 2 different sites, and it works fine, but only if I use Google Chrome in regular mode.

    It does not work:

    – Chrome in incognito mode (even with “accept cookies” enabled)
    – Firefox (neither regular nor incognito mode)

    In all of those cases where it doesn’t work, I get redirected to localhost (as per the settings if the cookie is not present).

    I mean it’s not a deal-breaker for me, since I can simply keep using chrome.

    However, sometimes it would be really helpful to be able to log in via incognito mode.

    Do you have a fix for that?

    Thank you for your support!

    Best,
    Flo

Viewing 11 replies - 1 through 11 (of 11 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi Flo,

    Do you have any cache system installed in your site or running in your server?

    Also if the above does not apply to your site, can you carry out a plugin/theme conflict test. Let me know how you go.

    Thank you

    Thread Starter rhisflow

    (@rhisflow)

    Hi!

    Thank you for your reply.

    Yes, I have the caching plugin Breeze.

    Are you saying that having a caching on the website or server level will cause this feature to not work?

    That would be strange since pretty much every site has at least one form of caching.

    However, I’ve also tried clearing the page and server-level cache, but that doesn’t help.

    Thank you for your support!

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    Are you saying that having a caching on the website or server level will cause this feature to not work?

    What I mean to say is that sometimes cache plugins can cause issues with the login/registration forms in WordPress.

    Have you carried out a plugin/theme conflict test, like I asked above?

    Thank you

    • This reply was modified 4 years, 6 months ago by mbrsolution.
    Thread Starter rhisflow

    (@rhisflow)

    Hi,

    ok I’ve gone ahead and done some extensive testing.

    First of all, I created a clone of the website.

    Then I cleared the website cache and disabled the caching plugin.

    That didn’t help.

    Then I went to the extreme and disabled each and every plugin (except AIOWPS obviously).

    I can now confidently say that the issue is definitely a problem of your plugin.

    It is obviously not caused by a plugin or theme conflict (since I’ve used a standard WP theme), as we can both conclude from my tests.

    Do you think you will be able to fix this soon?

    Thank you!

    UPDATE:

    I initially said that it was at least working in Chrome.
    This is no longer true, for neither website (probably after completely clearing chrome’s cache).
    This leaves us with the plugin functionality not working at all anymore, on no browser.

    Best,
    Flo

    • This reply was modified 4 years, 6 months ago by rhisflow.
    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi Flo, thank you for providing extra information. I have submitted a message to the developers to investigate further your issue.

    Kind regards

    Thread Starter rhisflow

    (@rhisflow)

    ok thank you!

    Will you be letting me know here in this thread once the devs have solved the issue?

    Thank you!

    Best,
    Flo

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi Flo, the developers will report back here in this thread with the outcome of their investigation.

    Thank you

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi Flo,

    Unfortunately we can’t reproduce your issue. One of the developers and myself have done some testing. My test included using Google Chrome in incognito mode and Firefox in private mode. I was able to log in using the secret word without any issues.

    I tested this using a laptop running the latest Windows 10 2004 version. What operating system are you running in your laptop/tower or desktop?

    Thank you

    Thread Starter rhisflow

    (@rhisflow)

    Hi!

    thanks for getting back to me with an update.

    I’m using a laptop with the latest Windows 10 version as well.

    Thank you!

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, what version of Windows 10 is your laptop running? Also, are all your browsers up to date? Have you cleaned all your rubbish in your laptop? A tool I highly recommend is the free version of ccleaner.

    Kind regards

    Thread Starter rhisflow

    (@rhisflow)

    I’m running Windows 10 home Version 1909.

    I highly doubt that the windows version has anything to do with that, though.

    Yes, I’ve cleaned “all my rubbish”, it’s still not working.

    If you want, I can send the “special URL” which was generated by the plugin, which should redirect to the login page, but only redirects to localhost.

    That way, you can confirm for yourself that you won’t be able to get to the login screen, even from you laptop.

    If you’re interested in that, please let me know an e-mail you want me to send that login link to.

    Thank you!

Viewing 11 replies - 1 through 11 (of 11 total)
  • The topic ‘Bug: Cookie-based Brute Force Protection’ is closed to new replies.