Account locked email

  • I got an email telling me this:
    For your security, your account has been locked because of too many failed login attempts. To unlock your account please click the following link:

    The email had a link in it I could use to log back in, which works.

    BUT, as long as I have Theme My Login turned on, I cannot log into the site without using the link in the email. When I disable the plugin, I can log in fine using the standard WP login screen.

    I can find NOTHING in the plugin that would reset (or even set up) this condition. How do I fix it so I can use Theme My Login again?

    The page I need help with: [log in to see the link]

Viewing 15 replies - 1 through 15 (of 26 total)
  • Plugin Author Jeff Farthing

    (@jfarthing84)

    It sounds like somebody is trying to brute-force your account and the module is doing it’s job. If you want to disable this feature, disable the Security module.

    Thread Starter beanthere22

    (@beanthere22)

    Jeff,

    I see nothing in the Theme My Login settings that indicate it has a security module.

    Sam

    Plugin Author Jeff Farthing

    (@jfarthing84)

    https://ibb.co/dPtnLT

    Thread Starter beanthere22

    (@beanthere22)

    This is in the theme my login plugin? I have no extensions running, just the base plugin. 7.07

    Plugin Author Jeff Farthing

    (@jfarthing84)

    Oh, I assumed by the email that you were still using 6.4.x. Then no, this not part of TML 7. Perhaps you have another plugin that implements this functionality?

    Thread Starter beanthere22

    (@beanthere22)

    No. This is the only plugin I am running that deals with the login.

    If I delete the plugin, will it remove any data associated with it? Then I can just start over.

    Plugin Author Jeff Farthing

    (@jfarthing84)

    Any chance you could forward me the email or screenshot the email?

    Thread Starter beanthere22

    (@beanthere22)

    https://www.dropbox.com/s/zn3es7ym5o0cgzx/logincap.PNG?dl=0

    Plugin Author Jeff Farthing

    (@jfarthing84)

    I’m sorry, but that functionality has been removed from TML 7. So, you must have received that email before updating.

    Thread Starter beanthere22

    (@beanthere22)

    So my question still stands, how do I unlock it? If I remove the plugin, will it also remove the database data so that it will free up my login? If not, can you tell me where in the database to look to find what I need to remove manually?

    I am locked out unless I use the link in the email or unless I turn off the plugin, so I still need to know how to get back to normal.

    Thanks

    Plugin Author Jeff Farthing

    (@jfarthing84)

    Did you obtain the legacy extensions or Security extension, by chance?

    Thread Starter beanthere22

    (@beanthere22)

    If it updated, I imagine it was by clicking update from the WP Plugins panel. We did not purchase any extensions.

    Plugin Author Jeff Farthing

    (@jfarthing84)

    Then there is no code in TML 7+ that would lock you out. If you want, you can delete the theme_my_login_security user meta from your user, but, like I said, that code is no longer in the core plugin.

    Thread Starter beanthere22

    (@beanthere22)

    Can you give me a little bit more of a location target to find that stuff in the database? I just know enough about editing that stuff to be dangerous. I just want to get it right the first time.

    Plugin Author Jeff Farthing

    (@jfarthing84)

    
DELETE FROM wp_usermeta WHERE user_id = 1 AND meta_key = 'theme_my_login_security';

    Be sure to make sure you are user ID 1 or swap that out with your user ID.

Viewing 15 replies - 1 through 15 (of 26 total)
  • The topic ‘Account locked email’ is closed to new replies.