hftobeason

Thank you again for your reply.

I am certain that no accounts exist for the UserNames I have added to be blocked.

In the specific case of “Admin”, see the UserName search screenshot I’ve sent via email. There is one user whose UserName *includes* “Admin” – would that be an issue?

Thank you for your reply – better late than never!

I have just now checked the Brute Force Protection toggle, and it is (and has been) ON. I’ve replied to your email with a screenshot of the settings. I for sure haven’t changed anything in WF since the string of failed attempts.

Please let me know what else I can do to troubleshoot.

Thank you for your reply.

I have always had How long is an IP address blocked when it breaks a rule set for 1 Day – but the series of 30 failed login attempts I saw two days ago took place over the course of under 12 hours. All from the same IP as well. Something is clearly either not working or set incorrectly in WordFence.

@champsupertramp, thank you for your reply.

Where do I add that code? functions.php of my child theme?

Does that code run when the user role is changed? For example from “registered” to “short_term”?

And is the “Testers test” correct? Or should it be $role?

Thank you again for your help.

Thank you for your reply. I can’t afford to hire anyone, sadly, so I will keep working on the problem myself. I’m currently trying to figure out how to semi-manually copy that user role piece of the array into a plain text usermeta value in the WordPress mySQL database, which mc4wp will successfully send over.

• This reply was modified 4 years, 3 months ago by hftobeason.

My attempt to update to 1.16.42 failed again today. Same error as above. If you can guide me as to where I might find the PHP Error Log, I’d be happy to supply it.

• This reply was modified 4 years, 3 months ago by hftobeason.

My site is hosted by Dreamhost.com.

I have no idea how to check the php error log – in fact, it seems that logging is disabled by default: https://help.dreamhost.com/hc/en-us/articles/214894197.

There is another support page re increasing the php memory size: https://help.dreamhost.com/hc/en-us/articles/214893937.

I’m at a loss otherwise, but, for the time being, things are working!

Interestingly, I tried the exact same update on my “staging” site, and got the exact same error. I’ll now have to go through the folder delete/reinstall process on that site as well.

Deleting the folder and reinstalling seems to have worked. Thank you.

Now things have gotten worse. First, WP reported that it had deactivated UpdraftPlus. Then I tried to reinstall. Now that has failed with this error:

Installation failed: Destination folder already exists.

Please advise. Thank you.

Thank you for your reply.

I’ve updated WC successfully – and I don’t think that’s what’s happening – since DreamObjects Backups hasn’t backed up since 09/28…

Also, I enabled DreamObjects Backups logging, and got this when I initaited an Immediate Backup:

[2020/10/22 08:26:40] Scheduled daily backup. Next backup: 20:00
[2020/10/22 08:27:00] Scheduled ASAP backup in 60 seconds.
[2020/10/22 08:28:15] Beginning backup for zealotslounge.com/2020-10-22-202815.zip ...
[2020/10/22 08:28:15] ZipArchive found and will be used for backups.
[2020/10/22 08:28:15] Calculating backup size...
[2020/10/22 08:28:18] 499 MB of diskspace will be processed.
[2020/10/22 08:28:18] Scanning folders and files to generate list for backup. This may take a while...
[2020/10/22 08:28:21] Scan completed. 13664 files added to backup list.
[2020/10/22 08:28:21] wp-config.php added to backup list.
[2020/10/22 08:28:21] A copy of .htaccess has been added to backup list.
[2020/10/22 08:28:21] Leftover SQL file found, deleting /home/zealotslounge/zealotslounge.com/wp-content/upgrade/e337014f6d35ca6c3a19aa3b183b54cc-dreamobjects-backup.sql ...
[2020/10/22 08:28:26] SQL file created: /home/zealotslounge/zealotslounge.com/wp-content/upgrade/789066eb4f48a711b3c124bfeb13bc5e-dreamobjects-backup.sql (13 MB) ...
[2020/10/22 08:28:26] SQL added to backup list.
[2020/10/22 08:28:26] Creating zip file using ZipArchive.
[2020/10/22 08:28:26] NOTICE: If the log stops here, PHP failed to create a zip of your wp-content folder. Please consider increasing the server's PHP memory, RAM, or CPU.

Note that nothing – to my knowledge – has changed on my site as of 09/28, other than updating WP and several of my plugins.

Please advise. Thank you.

I’ve now received an email from WordPress with the following info:

When seeking help with this issue, you may be asked for some of the following information:
WordPress version 5.5.1
Current theme: Kelly Child (version 1.0.0)
Current plugin: WooCommerce (version 4.6.0)
PHP version 7.4.3

Error Details
=============
An error of type E_ERROR was caused in line 47 of the file /home/zealotslounge/zealotslounge.com/wp-content/plugins/woocommerce/woocommerce.php. Error message: Uncaught Error: Class 'WooCommerce' not found in /home/zealotslounge/zealotslounge.com/wp-content/plugins/woocommerce/woocommerce.php:47
Stack trace:
#0 /home/zealotslounge/zealotslounge.com/wp-content/plugins/woocommerce/woocommerce.php(61): WC()
#1 /home/zealotslounge/zealotslounge.com/wp-settings.php(377): include_once('/home/zealotslo...')
#2 /home/zealotslounge/zealotslounge.com/wp-config.php(96): require_once('/home/zealotslo...')
#3 /home/zealotslounge/zealotslounge.com/wp-load.php(37): require_once('/home/zealotslo...')
#4 /home/zealotslounge/zealotslounge.com/wp-admin/admin-ajax.php(22): require_once('/home/zealotslo...')
#5 {main}
 thrown

Judging by this WordFence Activity email update I just received, it sure seems like things are working as expected:

Update

It also looks like adding “admin” with a lower-case “a” helped – I had originally just added “Admin” to the block list, since that’s what was showing in my User Activity Log – but I think the log may be auto-capitalizing the usernames…

• This reply was modified 4 years, 5 months ago by hftobeason.

Thank you for your reply.

Both Enable brute force protection and Enable Rate Limiting and Advanced Blocking were ON already.

Brute Force

I changed How long is an IP address blocked when it breaks a rule from 1 hour to 1 day.

Rate Limiting

Screenshots of my site:

Block Settings

Login Attempts

• This reply was modified 4 years, 5 months ago by hftobeason.
• This reply was modified 4 years, 5 months ago by hftobeason.