How to RESET iThemes Security plugin to fix issues

  • As many others, a few of our websites got screwed by iThemes Security “upgrade”. We had login issues where we were redirected to homepage.

    There issue is somewhere in the database, it gets screwed up with an upgrade. I did not have time trying to figure out the problem, that’s for the plugin developers. BUT, I needed to fix sites. So here’s how I fixed my sites by resetting this plugin’s database.

    This is not for the faint of hearts, it requires some technical knowledge to edit your database tables.

    BACKUP DATABASE! BACKUP DATABASE! BACKUP DATABASE!
    Use phpMyAdmin to export your database. See Google for details or
    see this article https://www.techrepublic.com/blog/smb-technologist/import-and-export-databases-using-phpmyadmin/

    INSTRUCTIONS
    1. Through FTP or cPanel file manager, go to /wp-content/plugins/
    2. Rename “better-wp-security” folder to something else like “better-wp-security2”
    3. Plugin is disabled and your admin is back working.
    4. Now, the reset. You need to access your database, ideally through phpMyAdmin interface in your control panel (cPanel).
    5. If you have many websites, locate your correct database for the website you’re working on. You can match database name to the name inside wp-config.php file.
    6. Click database name to select and load it.
    7. On the right side you will see a list of tables.
    NOTE: THIS IS A GOOD TIME TO BACKUP/EXPORT YOUR DATABASE. YOU’VE BEEN WARNED.
    8. Delete tables with “itsec” – see screenshot
    https://i.imgur.com/PHLITDW.png
    9. Go to your “options” table, click it.
    10. Sort by “option_name” by clicking the header, and making sure you got rows sorted A-Z.
    11. Find option_name rows starting with letter I.
    12. Look for “itsec” options. See screenshot.
    https://i.imgur.com/MTqTn4h.png
    13. Select all of them. If you’re at the end of the current page, make sure you delete options and check next page to make sure you get them all.
    14. Once you delete these options. Go back to FTP/File Manager.
    15. Rename folder back to it’s original name “better-wp-security”.
    16. Login to your UNBROKEN website using normal wp-login.php URL.
    17. Go to Plugins and activate this nasty plugin back.
    18. It should be fine, you HAVE TO GO THROUGH SETTINGS AGAIN and set it up to protect your WordPress. We deleted all settings!
    19. Carry on WordPressing.
    20. Still here? Go.

    It fixed our homepage redirect issue, but it may fix other issues as well that you might be experiencing. Please be careful and test.

    ??

    https://www.ads-software.com/plugins/better-wp-security/

Viewing 15 replies - 91 through 105 (of 112 total)

  • My apologise, I overstepped my bounds posting that link and speaking my mind. I shall endeavor to be more Politically Correct and mind the rules.

    Thank heavens I found this! I came here because I couldn’t get into my backend with my custom slug anymore. It would only redirect.

    I wasn’t sure if it was an iThemes update because it worked fine before I was on holiday… and all I did when I came back was update my hosting’s PHP to a newer version. (5.2 to 5.4)

    I did all the steps in the first post in this thread, but only finally deleting the Better WordPress Security folder in my plugin directory allowed me to access my wp-admin again. I won’t be installing iThemes again anytime soon!

    I’m not seeing an option to ‘delete’ the three ‘itsec’ table, the drop down only has several options ’empty’ seems to be the only choice.

    How to delete those tables?

    Thread Starter Viktor Nagornyy

    (@viktorix)

    There should be “drop” option.

    Viktor –

    On your fix sequence on the first page/post. Step 2 – rename the folder. You seem to indicate in Step 3 that you should be able to get back to the Admin/dashboard for further treatment (like, never use this thing again…) Anyway I have renamed it, even restarted WAMP and I’m still getting 403’d. I can’t even pull up the log in page.

    Do you have any suggestions for this scenario where you cannot get logged back in? Do you think if I continued down your list even though I can’t get back to logging in, this might bear some fruit.

    I’m totally locked out. Thankfully I just started to dev this blog so I don’t have a lot of time and data in the project.

    Hope to hear. Thanks.

    H

    Thank you thank you thank you!!!
    You saved my arse today ??

    Thread Starter Viktor Nagornyy

    (@viktorix)

    Hoib,
    Check your htaccess and wp-config, make sure they don’t have any issues:
    https://www.ads-software.com/support/topic/how-to-reset-ithemes-security-plugin-to-fix-issues?replies=97#post-5411798

    mrgael, you’re welcome ??

    I tweeted iThemes asking them to pin this thread, since many people have issues with lockouts but have not heard from them unfortunately.

    OH!! Amen!!!! Amen!!! Amen!!!

    Just 2 minutes ago, I am able to get back in. I looked through wp-config first for those offending lines. Not there. Then, I removed .htaccess completely. Moved it to another folder to get it totally and completely out of the way. Killed the Apache server, not restart services but killed it. Re-launched.

    I read where you don’t really need an .htaccess -IF- you simply want to use httpd.conf at a higher level to set up how WP and users will interact with folders below the root.

    I am soooo relieved. Now I’ve got to go back in and try to expunge this thing. I did zap all references to IThemes Security Plugins in the SQL database when I was trying to figure out why this happened.

    Thank you, Viktor.

    H

    Thread Starter Viktor Nagornyy

    (@viktorix)

    Glad it worked.

    Hi Viktor

    I have done all the instructions but for some reason even if I delete the explanation in the .htacces files and config files they also return?/ I cannot delete the ithemes security contents in both files??

    HI Viktor

    Ok i have manahged to fix that issue by re-installing the plugin and and do the process again but by deactivating the rules.

    I have now got an issue with the permalinks of the site due to the plugin. any idea how to fix it?

    Default works but post name structure doesn’t.

    Thread Starter Viktor Nagornyy

    (@viktorix)

    Hi, do you have default htaccess rules?
    https://www.ads-software.com/support/topic/how-to-reset-ithemes-security-plugin-to-fix-issues?replies=97#post-5411798

    Also, is the plugin gone or still there? You mentioned you re-installed it.

    Hi Viktor

    I have fixed it now with your expert guidance. Thank you! I have also sorted out the permalink issue.

    What security plugin do you recommend that is easier to set up etc. Or do you have any website to refer me to that shows how to safe guard wordpress installs.

    Thread Starter Viktor Nagornyy

    (@viktorix)

    I still do use this plugin. So far, after my initial issues, I have no had any issues.

    But, you can check out:

    – All in One WP Security
    – Simple WordPress Firewall

    Those are some good plugins.

    Hi Viktor

    Ok great thanks I will check them out. Which is the best one in your opinion?

Viewing 15 replies - 91 through 105 (of 112 total)
  • The topic ‘How to RESET iThemes Security plugin to fix issues’ is closed to new replies.