JetPack Protect is locking me out

@spiritualmom This problem is not theme-related, but we found what’s causing the problem and it will be fixed in the next release.

You can read more about it here:
https://github.com/Automattic/jetpack/pull/1855/files

Jeremy
* Manually made that change to our protect.php file.
* Activated Protect module.
* Logged out then logged in: successfully and mathlessly.

Thanks for the fix.

@jeremy herve,
any suggestiosn on how to fix this issue if i don’t have ftp or panel access to my website? other than the dashboard, i have no way to log into my site… since i am unable to do so I can’t make any changes. when the new update comes up, will it automatically fix this issue or will i have to update (which i am unable to do without access to my dashboard…) Help, please!

my site is eliwestfall.org

thanks for any help

Hi,
Just started with Jetpack few days ago and already experienced this error ??
So turned off protect module ??

Anyway just to be sure about change to protect.php file. I m not familiar with github, so not sure how actual is that file there bc. protect.php is different than that one from link above.
This is what I have

function check_preauth( $user = 'Not Used By Protect', $username = 'Not Used By Protect', $password = 'Not Used By Protect' ) {

		$this->check_login_ability( true );
		$use_math = $this->get_transient( 'brute_use_math' );

		if ( 1 == $use_math && isset( $_POST['log'] ) ) {
			Jetpack_Protect_Math_Authenticate::math_authenticate();
		}

		return $user;
	}

this one is from link above

@@ -218,6 +218,7 @@ function check_preauth( $user = 'Not Used By Protect', $username = 'Not Used By
 		$use_math = $this->get_transient( 'brute_use_math' );

 		if ( 1 == $use_math && isset( $_POST['log'] ) ) {
+			include_once dirname( __FILE__ ) . '/protect/math-fallback.php';
 			Jetpack_Protect_Math_Authenticate::math_authenticate();
 		}

So do I need just add line
include_once dirname( __FILE__ ) . '/protect/math-fallback.php';
or copy/replace lines from mentioned file https://github.com/Automattic/jetpack/pull/1855/files ?

any suggestiosn on how to fix this issue if i don’t have ftp or panel access to my website?

@eliwestfall If you don’t have FTP or cPanel access to your site, I can only suggest that you contact your hosting provider and ask them to fix the issue for you.

So do I need just add line
include_once dirname( __FILE__ ) . ‘/protect/math-fallback.php’;

That will do the trick, yes. Just make sure you don’t include that + sign at the beginning of the line.

Thank you Jeremy for excellent support and work on Jetpack

So I had whitelisted my IP too and still got locked out of my site. I was able to login on my phone, however (over LTE) and disable protect. Problem solved. Wanted to put that out there as a possible solution for people who might not want to bother with FTP. If you have a phone or iPad or whatever that has its own IP, you might be able to get in and disable Protect so you can login.

But add me to the list of people who got locked out AFTER whitelisting their own IP.

Thank you, Jeremy for keeping up with this thread and providing assistance.

Okay – So, I just experienced this problem. As per the advice above.

I went to the protect.php file in jetpack and entered
this line
+ include_once dirname( __FILE__ ) . '/protect/math-fallback.php';
as such

if ( 1 == $use_math && isset( $_POST['log'] ) ) {
+			include_once dirname( __FILE__ ) . '/protect/math-fallback.php';
 			Jetpack_Protect_Math_Authenticate::math_authenticate();
 		}

And it works fine and I am able to log into wp admin panel. Are there any further steps to take to ensure that everything works in the future?

Are there any further steps to take to ensure that everything works in the future?

We’ll include the fix in the next Jetpack release. Until then, you should be all set!

Jeremy,

It looks as if the latest Jetpack release fixed my issues (can’t speak for anyone else of course). This update lets me log in each time now. The only minor issue I have is that it ‘Always’ asks me to Prove my Humanity–but after I solve the math question, it lets me log in. I would think that Whitelisting my IP should prevent this step. I guess the ‘Protectors’ really don’t like my IP address. Anyway, it basically works. So, thanks for your help.

Best regards,
Ric Esrey

i am blocked out of my site completely. i had email from wordpress for changing my password. i had not requested. now when i go to log in it says it’s blocked for security issues from jetpack. what is going on? i tried again and i just got in.

i had email from wordpress for changing my password. i had not requested.

That’s not related to Jetpack. Someone must have entered your email address in the password reset form on your site.

now when i go to log in it says it’s blocked for security issues from jetpack.

If you find yourself locked out of your site, you can follow the instructions here to unblock yourself:
https://jetpack.me/support/security-features/#unblock

thank you!

Hi
I run several sites on a VPS one site has jetpack installed, this morning I was locked out of the site with the jetpack instalation. I have tried all the suggestions to recitfy and none have worked and I am now locked out of all my WP sites.
Any suggestions, as I am panicking a bit
Thanks