Issue with Salt Prefix Feature on Multisite

Hi Brandon,

Thanks for raising issue, I will create internal ticket for it.

Regards

Thanks hjogi,
This issue might not just be limited to multisites as I’ve just seen the same thing happen on a single site install. I am still able to revert it so it doesn’t look like the salt postfix permanently changes anything (correct me if I’m wrong). However, I am having issues with logging in when AIOS is activated – but I think it might be related to the rename login feature. I do still want to use AIOS, but it is currently logging me out when I activate it and I am unable to log back in without manually deleting it from the wp-content folder because of the force logout feature that I configured (even though I am repeatedly logging in well within the specified time window). Is there a way around this so that I can activate the plugin that is already pre-configured without being automatically logged out so that I can disable the rename login for testing?

Thanks,
Brandon

Hi @indigetal

Here, If you have the Salt post fix enabled it applies with a filter to add the current salts in wp-config.php added with extra 64 chars.

when you deactivate plugin the salt gets changed it forces users to logout the same if you activate the plugin the salt gets changed again it logsout you.

If you activate then using renamed login page you should login and access to site.

Also if the force logout on and due to that you are again getting forcefully logged out after you go to renamed login page login it should work and allow access.

I just have tested and I can login.

Regards

• This reply was modified 1 year, 10 months ago by hjogiupdraftplus.

Hi hjogi,

Yes, it seems like it was a combination of settings that was a one-two punch for preventing me access to the site when AIOS was activated. I restored a back up of just before I implemented the salt prefix and force logout features and everything is working fine again. I re-implemented the rename login and 2fa but didn’t implement the force logout. I will wait for a future update to test the salt prefix feature as well. Have you guys looked into drop-in argon2-based password hashing schema? The new Fortress WordPress security plugin focuses almost exclusively on login, password, and session protection and uses what it claims to be the absolute cutting-edge technology available. It would be great if you guys were looking into it to stay competitive! – Maybe to promote your premium version…

Anyways, I think my issue is resolved but I’ll have to wait before I attempt to enable the salt prefix, especially combined with the force logout feature.

Cheers,
Brandon

Hi Brandon,

Glad to know right now issue is solved. I have created the internal ticket to work for the Multisti salt prefix issue and also cross check it with force logout.

Regards

Hi Brandon,

Below copy of the plugin may resolve your issue the multisite sal postfix on and subsite access needs super admin to re login.

https://gofile.io/d/2xCFFi

Please upload the zip as Add new plugin and replace it with existing AIOS plugin.

Sorry for being slow to respond – I see that this fix was added to the plugin in version 5.1.9. I tested it in a staging site of a multisite network and the issue looks resolved. I deeply appreciate your teams work on this!

Thank You,
Brandon