I can't get in after user and password change

Hello,

I changed the password of my admin account, after which, it said that “medium” level password is not accepted.

So I went to the settings and disabled “strong” level password required for admin.

And then came back to my admin profile and changed the password.

Then went back to the better security settings and enabled “strong” password required for admin.

After that the website just would have redirect loops and the website would not load.

I went to the cpanel>file manager and moved the plugin in order to isolate & identify if the redirect loop is due to it. That worked, the website came back on immediately. But I don’t know if I have the security cover of better security now.

But now if I move the better security plugin back again under plugins directory, it goes in endless redirect loop and thats it.

To get the site working I have to move the better security plugin directory to outside the plugins directory.

Also, I tried re-installing the plugin, but it strangely gives me an error that a plugin with that directory name already exists, even after having moved it via cpanel>file manager to outside the plugins directory.

What do I do and how do I come of this messy situation?

Thanks in advance.

Regards

I just noticed, looking at the database table under the folder _itsec_log, the username that I set is recognized as a brute force attack.

How can I get around this problem?

Regards

Hi,

@frankdrake60 – It sounds like your username is being used in a brute force attack. I’d suggest creating a new user and transferring all content to it. Then you can delete the old one. If you’re unable to access your site you can deactivate the plugin via FTP by renaming it’s directory. Then you can log in and make the changes and rename it back to reactivate it when you’re finished.

@lsgxtremes – You may have a couple different things going on here. Where is the redirect happening and where is it taking you?

Thanks,

Gerroald