• tmcgraw

    (@tmcgraw)


    I have been using iThemes Security (formerly WP Better Security) for a couple of years and in the last couple of weeks (since before the last update) I have had problems keeping the options checked – they will uncheck after I log off and back on or even without logging out, just by clicking the “Settings” tab. My hosting provider has been of some help but specifically we cannot get these options to stay active: 404 Detection, Banned Users and Brute Force Protection (I recently reset my API key, it did not seem to help). Is there some server setting that might be affecting these options (Linux + Apache)? Or is it likely just db corruption? We’re stumped.

    https://www.ads-software.com/plugins/better-wp-security/

Viewing 4 replies - 1 through 4 (of 4 total)
  • westdael

    (@westdael)

    I am having the same problem with my “banned users” function. I have a lot of banned ip addresses and I noticed that if I remove/reduce the number of ip addresses it will work.

    I wonder if there is a limit to how many IP addresses that the plugin will ban.

    I’m glad someone else is experiencing this mysterious settings reset, as tmcgraw outlines.

    Literally, I go into the iThemes security settings and set all the check boxes (since it somehow reset a few updates ago). The most important to me is the hide-backend feature.

    Literally, I set all these settings, five minutes later I try to login to another site on the network and my hidden URL is broken…

    I have a nice 404 page that recognizes the compatibility slug and checks the referring address – if the hidden URL feature is turned off, the 404 redirects after ten seconds to the normal /wp-admin so my clients won’t get upset about not being able to access – but of course if it’s not hidden I get a lot of would be hackers trying to get in.

    I’m curious why this is happening. I’m 99.9% sure my login and password is uncompromised and I’m the only super admin etc – no one is actually getting into the site.

    Any feedback on this?

    iThemes Support

    (@ithemes-support)

    Hi,

    Is it possible to check for a plugin conflict? Deactivate all other plugins and see if that helps. If it does help, then reactivate the plugins one at a time until you find the culprit(s), if any.

    Thanks,

    Gerroald

    Hi Gerroald,

    I did in fact go through and troubleshoot the problem by disabling plugins etc. I had to manually disable the plugins prior to disabling WP Security because disabling more than one from admin caused crazy memory problems on our VPS and timed out. Of all the plugins I disabled and tweaked settings, our multisite only acted like it should after your plugin was disabled. I really like the plugin too ??

    There are several issues involving this plugin but also other plugins. It took a combination of disabled plugins to finally get things working. Our VPS was forced to reboot many times over the last several months and some of the security features didn’t act right or consistent.

    Anyway, for the time being I’ve had to disable several plugins including this and default to utilizing certain .htaccess related security work-around solutions as well as other stuff. I don’t have time to figure out where in our network these other problems are originating from interim so I will check back on iThemes WP Security and likely pay for your support to assist in the ideal configuration.

    Thank you for your response btw.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Options mysteriously get unchecked’ is closed to new replies.