mediaani

Hi! I’m having the same problem. It seems somehow WPS Hide Login is taking over all password fields on my site, not only the one on wp-login.php. This appeared with recent update (1.9.16.1) that was adding “Login Page Disclosure”.

I have Password Protected Categories enabled on my site and whenever I try to type in my password to see a category, sending the form (that consists of only password field) creates an infinite loop, until server’s maximum execution time is reached. My log says WPS Hide Login is adding some of its functions to the process, like wp_authenticate_username_password() – while there is no username field included in the form.

*EDIT the problem seems to exist for logged in users/admins only. No problem for non-logged guests.

[0x00007f2c610d8b10] md5() /data/wordpress/htdocs/wordpress/wp-includes/class-phpass.php:154
[0x00007f2c610d8a20] crypt_private() /data/wordpress/htdocs/wordpress/wp-includes/class-phpass.php:240
[0x00007f2c610d8980] CheckPassword() /data/wordpress/htdocs/wordpress/wp-includes/pluggable.php:2607
[0x00007f2c610d88b0] wp_check_password() /data/wordpress/htdocs/wordpress/wp-includes/user.php:185
[0x00007f2c610d87e0] wp_authenticate_username_password() /data/wordpress/htdocs/wp-content/plugins/wps-hide-login/classes/plugin.php:690
[0x00007f2c610d86a0] filter_wp_login_php() /data/wordpress/htdocs/wp-content/plugins/wps-hide-login/classes/plugin.php:630
[0x00007f2c610d85c0] site_url() /data/wordpress/htdocs/wordpress/wp-includes/class-wp-hook.php:324
[0x00007f2c610d84e0] apply_filters() /data/wordpress/htdocs/wordpress/wp-includes/plugin.php:205
[0x00007f2c610d83d0] apply_filters() /data/wordpress/htdocs/wordpress/wp-includes/link-template.php:3527
[0x00007f2c610d8320] get_site_url() /data/wordpress/htdocs/wordpress/wp-includes/link-template.php:3481
[0x00007f2c610d82a0] site_url() /data/wordpress/htdocs/wordpress/wp-includes/link-template.php:3708
[0x00007f2c610d81e0] network_site_url() /data/wordpress/htdocs/wordpress/wp-includes/general-template.php:663
[0x00007f2c610d8000] wp_lostpassword_url() /data/wordpress/htdocs/wordpress/wp-includes/user.php:193
[0x00007f2c610d7ea0] wp_authenticate_username_password() /data/wordpress/htdocs/wp-content/plugins/wps-hide-login/classes/plugin.php:690
[0x00007f2c610d7d60] filter_wp_login_php() /data/wordpress/htdocs/wp-content/plugins/wps-hide-login/classes/plugin.php:630
[0x00007f2c610d7c80] site_url() /data/wordpress/htdocs/wordpress/wp-includes/class-wp-hook.php:324
[0x00007f2c610d7ba0] apply_filters() /data/wordpress/htdocs/wordpress/wp-includes/plugin.php:205
[0x00007f2c610d7a90] apply_filters() /data/wordpress/htdocs/wordpress/wp-includes/link-template.php:3527
[0x00007f2c610d79e0] get_site_url() /data/wordpress/htdocs/wordpress/wp-includes/link-template.php:3481
[0x00007f2c610d7960] site_url() /data/wordpress/htdocs/wordpress/wp-includes/link-template.php:3708

Hi! Thanks for your reply. And also sorry for bothering. It seems that my client was using an outdated version of Paytrail. I didn’t recognize it as outdated because there were no notifications about updates being available. Of course, the license was not applied in the WP admin area.

Great plugin by the way! I’m going to use it in another project now that I’ve played with it a little.