organisator

Hi jgd24,

thank you very much for your comprehensive post!

“once you have finished modifying your index.php file, save it because each time WordPress is updated, you will have to restore it since WordPress, when updating, remits its own index.php file.”

If possible I would rather refrain from a method which forces me to think of it again each time.

The Site Lockout Notifications are coming in again, so I need to change something.

Maybe I will come back to your posting later.

• This reply was modified 4 years, 10 months ago by organisator.

Thank you!

Yes, I am able to log in to my WordPress Dashboard and did not receive any Site Lockout Notifications since yesterday.

What About the Question
—
Do you want that AIO-WP-S&F inserts those security rules again to your .htaccess-file which were erased when deactivating the plugin?
—

Should I try to reach this again and answer it with “Yes”
or
may I leave it as it is?

Hi,

apparently the math captcha works, the Google reCaptcha is not working correctly:

When I logged in to my webhoster I noticed an error message which said
—
The deactivation of a wordpress plugin was unsuccessful. The “ultimate-member” plugin could not be found.
—

From this error message page I had the possibility to deactivate any of my wordpress plugins so I deactivated AIO-WPS from this point instead of trying to use ftp (because I am not familiar with ftp). Then I was able to login the usual way (I was asked to confirm that the admin email address was still correct).

From the wordpress dashboard I activated AIO-WPS, logged out, tried to log in and again received the error message
—
Mistake: Your answer was wrong – please try again
—

without having seen any hint of a captcha.

Again I deactivated AIO-WPS from my webhosters control panel, logged in to wordpress, activated AIO-WPS, disabled Google reCaptcha and saved the settings. There was a question:
—
Do you want that AIO-WP-S&F inserts those security rules again to your .htaccess-file which were erased when deactivating the plugin?
—
I had to guess, my answer then was No.

I logged out and was presented a login mask with a simple math captcha.

Thank you very much for bringing me back to my wordpress dashboard! ??

Apparently I locked out myself by activating Google reCaptcha?

When I try to log in with my admin username I get an error message “Mistake: Your answer was wrong – please try again”

How can I resolve this?

Apparently I locked out myself by activating Google reCaptcha?

When I try to log in with my admin username I get an error message “Mistake: Your answer was wrong – please try again”

Hi,

to me it seems the features are arranged from left to right in descending order of danger of locking oneself out by mistake.

So I activated Google reCaptcha for all three given options now.

What about whitelisting?
Where can I find out how to use this option?
For example it is very unlikely that somebody outside of Europe might be interested in my website but it does not seem to be easy if possible at all to name all european IP-addresses?
Additionally it seems to be possible for attackers to imitate any IP address they want?

Which message does a real person get who tries to log in to a form with an IP address not whitelisted?

Thank you very much!

And one recommendation: To me it seems to be more intuitive to arrange the different dangerous options in AScending order from left to right as most people will start to check the options from the left.

Hi,

not up to now.

(Yesterday I blocked XML-RPC and still received three site lockout notifications. This is much better than the bursts of 20 or 30 which came in within a few minutes in some of the last days but maybe just happened by chance and not by blocking XML-RPC?).

Now I activated the honeypot.

If possible I would prefer to keep away from those features with which I might lock out myself by mistake. ??

Thank you

Thank you!

I have completely blocked XML-RPC

Hi,

the same problem occurs to me from time to time and again today.

When I set up my website I chose a username for the admin which was not “admin” and is not easy to guess, so I am confident that I don′t have to worry about any login attempts with the username “admin”.

But the attackers found out my admin′s username and I keep getting emails which tell me that the admin was locked out. Luckily this never was the case, I was always able to log in to my website despite getting these emails.

Apparently there are a lot of bots in internet doing nothing else than trying to login to any wordpress websites.

In which cases can I just switch off these emails and in which cases should I continue getting and checking them?

Thank you!

• This reply was modified 4 years, 10 months ago by organisator.
• This reply was modified 4 years, 10 months ago by organisator.

Sorry, I would like to have a theme which fills the complete display automatically on common computers, e.g.
a 10 inch tablet
a standard 15,6-inch notebook display
a 24 inch desktop display

I could accept some difficulties on mobile phone displays.

So you decided to leave the left side bar empty and the result is empty space on both sides which looks intentionally. Tricky idea! ??

I like the same black background for the upper menu and the left menu. I think it helps distinguishing between menues and content.

So you think I should rather accept the broad empty margin on the right side than trying to getting rid of it?

In this case can you recommend another theme which gives the opportunity to put a header photo on the top which can be scrolled up but the upper menu stays at the top? And a menu on the left side as well?