• Resolved contentleaders

    (@contentleaders)


    We recently decided to change our login security plugin to wordfence login security. After installing and testing we discovered that after every login attempt an email was sent to the admin e-mail. The problem is that with alot of websites and using this e-mail address for other purposes this becomes a bit too much (20-30 emails a day).

    I saw you can disable these mails by installing the general wp fence plugin but we don’t need that plugin so I’d rather not install a plugin we don’t need. I already looked in the PHP files to see if there is a hook so I can overwrite the function to disable these emails but there was none. I did find the function that sends these e-mails but if I disable that line it will be overwritten as soon as there is a new update for this plugin.

    Now my question is: is there a way to disable these verification e-mails without installing the main wordfence dashboard plugin?

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Support wfphil

    (@wfphil)

    Hi @contentleaders

    The CAPTCHA verification emails are only sent if you have the CAPTCHA feature enabled and a user attempting to log in fails the CAPTCHA test.

    You don’t want to disable CAPTCHA verification emails because anyone blocked by the CAPTCHA test will not be able to verify that they are a human if they don’t get the verification email with the link to bypass the CAPTCHA test to be able to log in.

    @wfphil I’ve tried setting both 1.0 and 0.0 in the threshold and still users are permareceiving the Verification thing.

    How may I debug it with a user of my own?

    Plugin Support wfphil

    (@wfphil)

    Hi @sirlouen

    Thank you for the update.

    It could be a misconfigured API key so you can check that you are using the correct reCAPTCHA version 3 Site and Secret keys on your site and that they match keys in your Google reCAPTCHA account. Or it could be that your server is not able to reach the Google reCAPTCHA API.

    You can check the reCAPTCHA console (on Google’s side) and see how scores are distributed and if it shows a score of zero most of the time.

    From the command line interface on your server you can use this cURL request tto ensure that it can connect successfully.

    $ curl https://www.google.com/recaptcha/api/siteverify

    You should see:

    {
      "success": false,
      "error-codes": [
        "missing-input-secret"
      ]
    }

    If you see something else you can ask your hosting provider if they can see why your server isn’t able to reach Google’s server.

    Hello @wfphil

    I have started debugging:

    1. API key: there are valid 1.0 and invalids 0.0
    Still, all results are being parsed below what I’ve set up.

    2. I tried to set up a new site and I see it’s working fine

    3. I can see the result in the server fine:

    View post on imgur.com

    So, where is the problem?

    I’ve noticed that if I try to access via /wp-admin, it’s working perfectly fine

    The problem is when I attempt to log in via form login within the page (placed by Memberpress plugin)

    Notice I can’t see the reCAPTCHA badge in the bottom left, contrarily to the /wp-admin page. So maybe the problem is that since it’s not receiving any info from reCAPTCHA, it’s considering the value as null; therefore it prompts for verification.

    Any ideas to solve this? How can I implement Login Security within in-site login prompts like the ones that Memberpress or Elementor (or many other plugins, or even self-made templates) facilitate?

    Plugin Support wfphil

    (@wfphil)

    Hi @sirlouen

    Thank you for the update.

    If it works as intended on the default WordPress login page but not your MemberPress login form then please note that we do say this in our CAPTCHA documentation:

    Please note that our Google reCAPTCHA feature currently only works for the default WordPress login and registration pages and may not work on custom login and registration pages generated by other plugins.

    Please note that our Google reCAPTCHA feature currently only works for the default WordPress login and registration pages and may not work on custom login and registration pages generated by other plugins.

    Yes, I was smelling such.

    Although, may I manually code something to hook it? Or you have not considered this and have not provided filters/actions for it?

    Plugin Support wfphil

    (@wfphil)

    Hi @sirlouen

    Thank you for the feedback and sorry for the late reply.

    The only other plugin that we provide compatibility for is for the default custom WooCommerce login and registration page because that plugin has over 5 million active users. We are only providing compatibility for that plugin as it does require a significant amount of quality assurance resources to provide continued compatibility.

    We also recommend that you do not modify our plugin code.

    Ok, this plugin is flawed with basic features. Thanks for telling.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Disable login verification emails’ is closed to new replies.