Invalid Username

  • There seems to be a bug in version 3.0 of the plugin when logging in using an email address.

    With the plugin disabled, if you try to log in with an existing email and incorrect password, the message returned is “ERROR: The password you entered for the email address [email protected] is incorrect. Lost your password?”.

    However, when the plugin is enabled, the following message is returned: “ERROR: Invalid username. Lost your password?”.

    I run a website where people log in using their email address, and this error message is confusing and makes people think their account has been deleted. It should default to the standard WordPress behaviour – if the user enters a correct email address, the system shouldn’t say “Invalid username”. Or, this should be an option in the plugin.

Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Author gioni

    (@gioni)

    Hi!

    Have you checked that with different users? What do you see on Activity tab? Is there any related records?

    Same here

    Plugin Author gioni

    (@gioni)

    What do you see on Activity tab for all those attempts?

    Thread Starter levymetal

    (@levymetal)

    Have you checked that with different users?
    It happens for all users.

    What do you see on Activity tab? Is there any related records?
    Activity log shows Login failed, with the email address they tried to log in with.

    Plugin Author gioni

    (@gioni)

    Most likely there is a conflict with another plugin because Cerber produces only following message, not message you have mentioned. And this message is shown if a user entered the prohibited login only.

    ERROR: The password you entered for the username %s is incorrect.

    Login failed message on the Activity tab means that Cerber allows user to log in but the authorization process has been interrupted (blocked, whatever) by WordPress or by another plugin.

    WP Cerber deactivated – Login test with an existing email adress and incorrect password :

    Test 1

    WP Cerber activated – Login test with an existing email adress and incorrect password :

    Test 2

    Plugins installed : WP Cerber only.

    • This reply was modified 7 years, 11 months ago by al3as06.
    Thread Starter levymetal

    (@levymetal)

    Most likely there is a conflict with another plugin

    I just tested this on a fresh WordPress installation, without any other plugins, and achieved the same result.

    To replicate the issue, please use the following steps:

    1. Install a fresh copy of WordPress
    2. Install the WP Cerber plugin, and activate the plugin
    3. Attempt to log in using a valid username and invalid password. You will receive the following message: “ERROR: The password you entered for the username xxx is incorrect. Lost your password?”
    4. Attempt to log in using a valid email and invalid password. You will receive the following message: “ERROR: Invalid username. Lost your password?”
    5. Deactivate the plugin, and attempt step 4 again. You will receive the following message: “ERROR: The password you entered for the email address [email protected] is incorrect. Lost your password?”

    • This reply was modified 7 years, 11 months ago by levymetal.
    • This reply was modified 7 years, 11 months ago by levymetal.
    • This reply was modified 7 years, 11 months ago by levymetal.
    Plugin Author gioni

    (@gioni)

    I figured out what’s going on. Recently WP guys changed a logic and messages related to authorization process in favor of email based authorization. Those changes lead to this situation. So, I’ll fix it in one of the next releases.

    • This reply was modified 7 years, 11 months ago by gioni.
    • This reply was modified 7 years, 11 months ago by gioni.
    Thread Starter levymetal

    (@levymetal)

    Ah, yeah that makes sense as I upgraded to WP 4.7 at the same time. Cheers mate!

    I have the same problems with login with Emailadress.
    Untill this isn’t solved i delete the plugin.

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘Invalid Username’ is closed to new replies.