Login Conflict with Woocommerce 2.9.10

  • Resolved ImagePros

    (@acedugan)


    9 years, 5 months ago

    Hello Webvitaly, I like your plugin very much!

    There is a conflict with Woocommerce and Security Protection: returning customers are redirected to WP Admin login page after entering their username and password. Because I have blocked my WP login page from all but my own IP address (htaccess script), my returning customers cannot login from “My Account” or from Checkout page. They see a 301 error.

    I have verified that the htaccess script is not causing this problem.

    Thank you!

    https://www.ads-software.com/plugins/security-protection/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author webvitaly

    (@webvitaly)

    Hi ImagePros,

    I just added the support for WooCommerce plugin in version 2.2.
    Please update Security-Protection plugin and write me back if it works properly.

    All the best.

    P.S. I like how WooCommerce moves login (registration, reset password) forms to another locations for increasing website security. I am planning to add this into next version of Security-Protection too. I am tired of these stupid brute-forcers bombarding login and registration pages. It would be better to forward their requests into wrong direction. And also it would be even much better to not start up whole WordPress site just for login attempt. But this is more fail of WordPress architecture and it is impossible to fix now.

    Thread Starter ImagePros

    (@acedugan)

    That was FAST service Webvitaly. Security-Protection works great now with Woocommerce customer login at both Checkout and my Account pages. Thank you.

    A few days ago your plugin withstood a massive attack on another site of mine (not the first time). The nasty little bot hit my Admin page 3 times per second for 20 minutes. That site runs on a Windows IIS server, so your plugin is the only login protection I have there.

    It would be better to forward their requests into wrong direction.

    These bots come in from the same IP on every attempt. Why not ping them back each time?

    Plugin Author webvitaly

    (@webvitaly)

    I am glad that the plugin helped you with brute-force attack.

    Why not ping them back each time?

    It’s a great idea. I was thinking about something similar.

    The main idea is: to use brute-force requests against themselves.

    The idea is great but right now I don’t know how to do it ??

    It would be awesome to invent something simple and effective against brute-force attacks because they are more annoying than mosquitos ??

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Login Conflict with Woocommerce 2.9.10’ is closed to new replies.