Exponom
Forum Replies Created
-
Just got an answer from my hosting provider. All WP login pages were blocked due to massive brute-force attack.
The issue was resoled. Sorry for that.
2 giti
I think in case if BWPS will automatically update ban users list due to lockout, these lines could be repaired.Today I got the same issue – Bypass to wp-login.php with “hide backend”. I have brute force attack the whole day.
109.196.190.90 – – [07/Jul/2013:14:41:41 +0400] “POST /wp-login.php HTTP/1.0” 200 3426 “https://mysite.com/wp-login.php” “Opera/9.80 (Windows NT 6.1; U; ru) Presto/2.8.131 Version/11.10”
It’s not https://YourDomainHere/wp-login.php?loggedout=true flaw, because rewritten rules (below) work just for me. (Not for attacker)
RewriteCond %{QUERY_STRING} ^loggedout=true
RewriteRule .* https://mysite.com%{REQUEST_URL}? [R=301,L]I’m doubly surprised because wp-admin folder is password protected using htaccess as well. How does this happen?
The same issue. WP was updated to 3.5.2 – doesn’t work.
You do not have sufficient permissions to access this page – when select Add Gallery.Hi, I’ve got the same issue when Better WP Securiry function “Remove write permissions from .htaccess and wp-config.php” is activated.
Turning this on will set the unix file permissions to 0444 on these files and turning it off will set the permissions to 0644.
W3 Total Cache Error: Files and directories could not be automatically created to complete the installation.
Edit file /mysite.com/.htaccess and remove all lines between and including # BEGIN W3TC Page Cache and # END W3TC Page Cache markers.
Any idea how to fix it? Just install WP in the root?
because if WordPress installed into a subdirectory, anyone can attack the site without any limits.I have the same issue with my WP installation in subdirectory. BWPS Ban hosts list doesn’t work at all. Any banned IPs still have access to the site, search is available, etc. just css may not work properly.
Ban hosts list is starting to work only if you put the Denied IP list into htaccess which placed in the root directory.