Multiple installations interfering with each other?

@noobie

This is not WP Multi Site right ?
Are the 3 WP envs all installed in a seperate subfolder ?
Or is 1 installed in the public root folder and the other 2 in subfolders ?

dwinden

Hi dwinden,

No not multi-site, 3 instances of WP (two in sub folders) each with it’s own installation of WP security.

Having read through everything I can find on the subject here I was wondering if it might be a sign of a brute force attack as the administrator is asked to log in again after about 30 minutes and then blocked from all 3 sites… I’ve changed his log in name this morning – perhaps that might help?

@noobie

At this point I’m afraid there is too much info missing to make the right judgement.

But the simple fact that you have one main site installed in the public root and 2 others in seperate subfolders has the potential to cause interference.

Each install has its own .htaccess file BUT Apache will apply all directives found in additional .htaccess files found either up or down the folder structure …
This is default Apache Web Server behavior.

You should install ALL 3 sites in seperate folders. This way all sites will only apply Apache directives from their own .htaccess file.

Also make sure each install uses its own database.
Again I don’t have all the info to be conclusive but it sounds like the 3 sites are sharing the same database …
Thus a temp user lockout in the main site is a temp user lockout in the other 2 sites …

Also keep in mind the iTSec plugin must be installed in all 3 sites.

Changing the login name might seem to help but if the site is exposing that username it won’t solve anything.

dwinden

@noobie

If you require no more assistance please mark this topic as ‘resolved’.

dwinden