• I have plugin 3.4.3 installed. I just had my client get locked out of the site for trying to log into admin incorrectly. They did not get any error messages until the were completely locked out. The only message on the screen was the word ‘error’. That was it. Nothing explaining that they had failed attempts at logging in. I found the auth.php file in the plugin editor and it shows that they should have gotten a message that said “We are sorry , your ability to login has been suspended due to too many recent failed login attempts. Please try again later.” They were using Internet Explorer 9. So why doesn’t that show? I don’t know where the single word ‘error’ is coming from. Any help would be appreciated. thanks.

    https://www.ads-software.com/extend/plugins/better-wp-security/

Viewing 7 replies - 1 through 7 (of 7 total)
  • Thread Starter crimay71

    (@crimay71)

    Here is a link to a screenprint of my login page when I don’t enter the correct password. Notice there is a pink box but the error message is missing: https://prntscr.com/fd2sy

    This has been tested on IE and FF and Safari.

    If anyone has any solutions please let me know. Thanks.

    Hi,

    First off, great plugin! LOADED with features.

    However, the same thing is happening to me. I *was* using limit login attempts, and the pink area displayed above the login form would say “ERROR: Incorrect username or password. n attempts remaining”. I expected something similar from Better WP security, but all that is displayed is the pink area (no text).

    Then, after the configured number of failed login attempts, you get a blank page with the word “error” at the top left. You also can’t access other pages on the site that normally would not require authentication / authorization – i.e. you just get the same blank “error” page. This is actually a neat feature, but ideally I’d like to be able to turn it on or off – i.e. just prevent additional login attempts – not lock out the entire site.. like limit login attempts would do.

    Anyway…. My “asks” for Chris are:

    1). Add text to the pink area that is displayed above the login form. “ERROR: Incorrect username or password. n attempts remaining”.

    2). Allow for the entire site to be locked out (i.e. the current “error” page behaviour), or just not allow additional login attempts (the “limit login attempts” flavour of doing things).

    Thanks! And if you need anything from me to help get this done, just let me know.

    Regards,
    Mike.

    Thread Starter crimay71

    (@crimay71)

    I would really like to be able to use So far I have tested this plugin on three different WP sites using three different themes but all using WP vs 3.4.1. I get the exact same errors as I did 3 weeks ago. So I’m going to assume this is a conflict between the plugin and the new WP version. Too bad. Plugin works really well other than the login part. Please let me know if there is a fix to this!

    Hello,
    I am having the same problem here, in more than one website using Better WP Security plugin. At the moment I have just added this code in the function.php of my theme

    <?php
    add_filter(‘login_errors’,’login_error_message’);

    function login_error_message($error){
    //check if that’s the error you are looking for
    $pos = strpos($error, ‘incorrect’);
    if ($pos === false) {
    //its the right error so you can overwrite it
    $error = “The information is wrong, if you don’t remember your login details click the Lost your password link below”;
    }
    return $error;
    }
    ?>

    This adds a message when people put wrong details to login, but it doesn’t really sort out the problem. Hope someone can help. Thanks

    I just checked, on the plugin description / obscure, and there it actually says about the plugin:
    -Removes login error messages
    Probably this is for security issues? If so it would be great if the plugin could have an option to enable or disable this feature.
    Great plugin anyway!

    There is a setting to eable/disable showing of login error messages which you can toggle on/off:

    Go to the tab Tweaks -> Other tweaks -> Remove WordPress Login Error Messages
    Untick the box to regain the default WP behaviour for showing the login error messages.

    This setting does not affect the login protection, i.e. if someone tries to login with the wrong credentials, they will still be locked out after three tries (depending on the settings you have in the Login tab)

    Hey thank you! i didn’t spot that setting! this sorts out the problem then, I appreciate it thanks!

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘[Plugin: Better WP Security] Error Messages’ is closed to new replies.