• sally

    (@sallyruchman)


    Hello,

    i installed the Plugin on my site, and removed my whitelisted home IP. I use on my site the Ultimate Member Plugin, what is changing my general Admin Url: example https://domain.com/wp/wp-login.php to https://domain.com/login. I also tested the Login with / and without the reverse proxy setting while on my server im running apache and nginx as reverse proxy working.

    I test with a Subscriber User Account, but even if i enter the password 10 times wrong, i can login afterwards with the correct password.

    Under the Activity Tab i see the Hostname / Ip User and Username what was used to login.

    How can i get the Plugin to work?

    Thx
    Regards
    Sally

Viewing 15 replies - 1 through 15 (of 25 total)
  • Plugin Author gioni

    (@gioni)

    Hi!

    If you see correct, real IP addresses on the Activity tab you don’t need to check My site is behind a reverse proxy.

    Could you make sure that you see all your attempts to log in with wrong password? Are they marked as Login failed?

    Thread Starter sally

    (@sallyruchman)

    Hello Gioni,

    thanks for your reply. I only see the correct real IP when i check my site is behind a reverse proxy.

    I only see the logged in logged out attempts. I can try as often i want to login, no Login failed is logged…

    What can be the Problem?

    Thx
    Regards
    Sally

    Plugin Author gioni

    (@gioni)

    That means you need to leave it checked.

    I think there is some incompatibility with Ultimate Members. Could you try to use default /wp-login.php to make attempts to log in with wrong passwords? You should see all of them on the Activity tab.

    Thread Starter sally

    (@sallyruchman)

    Hello Gioni,

    yes, when i deactivate Ultimate Members Plugin, and use the default wp-login.php Form, it works, i see the failed attempts….

    Is there a way to get your Plugin to work on the UM Forms ?

    Thx
    Regards
    Sally

    Plugin Author gioni

    (@gioni)

    It takes a while to figure out the cause. Probably in February I will have enough time. I know only one thing: if Ultimate Members used standard WordPress way to authorize a user like Cerber does, everything worked fine.

    Can you use Custom login URL created by Cerber not Ultimate Members?

    Thread Starter sally

    (@sallyruchman)

    Hello Gioni,

    i send your request to the UM Support and waiting for an answer. UM created automatic an different login URL, so i guess it made no sense to use the same / or an other login url with cerber?

    Thx
    Sally

    Thread Starter sally

    (@sallyruchman)

    Hello Gioni,

    could you already check?

    Thx
    Sally

    Plugin Author gioni

    (@gioni)

    Hi!

    Sorry for late replying. Do you want to get some specific features that UM provides for login page? If no, use Cerber’s Custom login URL as a login page.

    Thread Starter sally

    (@sallyruchman)

    Hello Gioni,

    thanks for your reply. UM Plugin change the Standard login URL automatic to a Custom login page, like https://domain.com/login. I only want to get your plugin working with the UM Plugin. I wrote to the UM Support, and they send me the following information back.

    Hi,

    Here are the hooks they can use:

    https://hookr.io/actions/um_after_form/
    https://hookr.io/actions/um_after_form_fields/

    Thanks
    UM Suppot

    Any chance that you can implement this hooks to your Plugin?

    Thanks

    Best regards
    Sally

    Plugin Author gioni

    (@gioni)

    Probably yes. Can you confirm that the issue is that WP Cerber doesn’t see failed login attempts that come via UM Plugin login page and this is why WP Cerber is unable to block attackers as intended?

    Thread Starter sally

    (@sallyruchman)

    Hello Gioni,

    thanks for your fast reply! Yes thats absolut correct!

    Thx
    Best Regards
    Sally

    Thread Starter sally

    (@sallyruchman)

    Hello Gioni,

    would ask when the feature would be available in your plugin?

    Thanks a Lot!

    Best Regards
    Sally

    Plugin Author gioni

    (@gioni)

    Hi, Sally!

    I think everything will work fine by the end of the month.

    Thread Starter sally

    (@sallyruchman)

    Hi Gioni,

    thanks for the Update on this.

    Best Regards
    Sally

    Plugin Author gioni

    (@gioni)

    Here you are ??
    The development version is available to download: https://my.wpcerber.com/downloads/wp-cerber.zip

    • This reply was modified 7 years, 9 months ago by gioni.
Viewing 15 replies - 1 through 15 (of 25 total)
  • The topic ‘How to get Plugin to work with Ultimate Members’ is closed to new replies.