Can't get 'cookie based brute force' feature to work

Did you copy and paste the exact special URL which was given to you by this plugin when you enabled that feature?

Yes, definitely. Made sure of it, tried a couple times, on different computers, flushing the cache, etc.

I did have Ajax login, but disabled that plugin, and it made no difference.

Also, when I hit the ‘Account Activity Logs’ tab in the User Login section, I get a “Forbidden – You don’t have permission to access /wp-login.php on this server.” The url at that point is https://www.humortimes.com/wp-login.php?redirect_to=https://www.humortimes.com/wp-admin/admin.php?page=aiowpsec_userlogin&aiowps_login_msg_id=session_expired

I think that last thing has to do with the cache, when I came back later it was ok. I had that happen again somewhere else in the admin for the plugin. I had just logged back in, after being forced to, because I had it set to allow only an hour logged in at a time.

I would still like help with the original problem, the ‘cookie based brute force’ feature, however…

Hi @jamminjames in some cases the Cookie Based Brute force might not work well with current server settings. Please try and enable the “rename login page” feature.

Kind regards

I have back end access to my server and I checked it out. Indeed, logs show that the secret key I chose for the Cookie based feature was too long, there’s a setting limiting that. I’ll try it out with a shorter one.