GuardGiant brute force protection

Thanks for getting in touch. The plugin has just been updated to support the latest wordpress version.

This has now been patched so please update the plugin from your dashboard (if auto-update is not enabled).

Thanks again for bringing this to our attention.

Thanks for flagging this up. We will take a look.

Thanks for getting in touch – this is a very unusual issue. We’ve not had any other reports of this so I agree it could be an incompatibility somewhere.

The only way I can think of troubleshooting the problem is to re-introduce your plugins one-by-one. i.e. deactivate/remove plugins so you have a clean install and then introduce them back slowly.

Better still, if you have access to another server you could do this without affecting your main site.

I hope that helps. Let me know how you get on.

Hi, thanks for getting in touch.

It is still available although the Google site is a bit confusing. Make sure you are logged in with your google account and then head to https://www.google.com/u/1/recaptcha/admin/create

Let me know how you get on.

Kind reagrds,

GuardGiant

Thanks very much for letting us know. We will take a look at this plugin and see if there is anything we can do to accomodate it.

Thank you for getting in touch. I’ve tried your code on our test website but GuardGiant is working as expected for us.

Perhaps there are other plugins or functions that might be having an effect? If possible, please could you try this on a clean install of WordPress to check that it’s working, and then gradually add other plugins to test?

Hi,
Thanks for the email. The plugin provides a login activity log that can be found under the GuardGiant link in the WordPress admin area (on the left sidebar).

Kind regards,

GuardGiant team.

Thank you for your email and the suggestion regarding v3 of reCaptcha.

reCaptcha v3 works in a different way – here is the description from Google:
reCAPTCHA v3 allows you to verify if an interaction is legitimate without any user interaction. It is a pure JavaScript API returning a score, giving you the ability to take action in the context of your site: for instance requiring additional factors of authentication, sending a post to moderation, or throttling bots that may be scraping content.

You can certainly add v3 to your site by using a different plugin but there are issues to be aware of. v3 generates a score that you can act upon, but there is no way for a user to prove that they are a genuine user (e.g. by solving a challenge). If you were to lock out a user’s account and take away the ability to prove they are not an attacker there could be real difficulty getting back in to your system.

I hope this helps.

Kind regards,

GuardGiant team.

Apologies once again for the issue with WordPress 4.9. I have taken a look at this and found the plugin is using a function introduced in WordPress 5.3 for date handling. We have updated the required WordPress version to 5.3 and will make a fix in the next GuardGiant release to offer backward compatibility with older WordPress versions.

Thank you very much for bringing this to our attention.

Kind regards,

GuardGiant.

Thank you for getting in touch and so sorry that you are having problems. We will download/test WP 4.9.22 and get back to you with our findings.

Kind regards,

GuardGiant.

You’re welcome.

Kind regards,

GuardGiant Team.

No problem Gary. The screen options is a ‘fly down’ tab in the top right of some WordPress pages. It should be on your activity log page.

https://www.wpbeginner.com/glossary/screen-options/

I guess it may be different if you access the page on a phone or tablet?

GuardGiant Team.

Hi Gary,
Thank you for your kind message. Login activity is stored in a database table and is automatically deleted after 45 days. The database is a much more efficient way of storing data and avoids the issues you would see with a large log file. For reference, there are sites running with hundreds of thousands of log entries with no noticable impact on login times at all.

We really appreciate your feedback though and will look to make this a configurable setting in a future version.

If you still need to delete large numbers of log entries you can select the number of items to display per page in the ‘screen options’ tab of the activity log. You could change this to 999 for example, and then select ‘delete’ in the ‘bulk options’ dropdown.

I hope this helps.

GuardGiant team.

Thank you for getting in touch and the kind words about the plugin.

It looks like your web server is not providing the connecting IP address to WordPress.
I can certainly help but I need details of the configuration of your site, which would be safer to do via email. Please could you send a message to [email protected] with your site address and I will respond.

Kind regards,

GuardGiant team.