Can't logout – Authentication Required – Protected File

  • Resolved srlaird

    (@srlaird)


    11 years ago

    Site is running 3.8.1. This site had 2 security plugins (Brute Force and WP Security) installed and enabled when we got it. The site was running slow, and having SEO issues, so we disabled and uninstalled both plugins.

    The site runs better, and we didn’t notice anything wrong, until we tried to log out of WordPress. We can’t log out of the site.

    When we click logout from the WordPress admin, an authentication login box pops up that says, “A username and password are being requested by OurSiteName.com. The site says “Protected File”.”

    We cleared everything left by the WP Security from the .htaccess file. Just WP code is there now.

    Hope someone has seen this before, and can tell us where to look.

Viewing 1 replies (of 1 total)
  • Thread Starter srlaird

    (@srlaird)

    I am posting this, in case it might help someone else.

    In order to restore the site, we had to put back the .htaccess file that contained code for Better WP Security. The site will need that code in the .htaccess file from now on, even though the plugin has been deleted. We did hack out as much of it as we could, and ended up with this:

    # BEGIN Better WP Security
# Begin HackRepair.com Blacklist
RewriteEngine on
<FilesMatch "wp-login.php">
Satisfy any
Allow from all
</FilesMatch>
# Abuse Agent Blocking
RewriteCond %{HTTP_USER_AGENT} ^BlackWidow [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ZyBorg [NC]
RewriteRule ^.* - [F,L]
# Abuse bot blocking rule end
# End HackRepair.com Blacklist
# END Better WP Security
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

    The Better WP Security plugin does state that it alters the database, .htaccess, wp-config, etc. This is old, but see here: https://chriswiegman.com/2011/09/what-is-changed-by-better-wp-security/

    We were not able to find any instructions for completely removing the plugin. We did not hear from Better WP Security support at all either.

Viewing 1 replies (of 1 total)
  • The topic ‘Can't logout – Authentication Required – Protected File’ is closed to new replies.