• Resolved devsc2768

    (@devsc2768)


    As of today we have had issues with two sites that use your plugin. Admin users are unable to login even after resetting the password.

    WE disabled all plugins and the issue occurred as soon as we enabled your plugin.

    Your plugin was forcing sessions to die on creation as it was trying to set a new password but not accepting the old one. On some servers this triggered brute force ModSecurity rule that blocked the users IP.

    Can you please investigate as we have had to disable your plugin.

    • This topic was modified 1 year, 8 months ago by devsc2768.
Viewing 2 replies - 1 through 2 (of 2 total)
  • Hi @devsc2768 ,

    Thank you for reaching out to us.

    Unfortunately, the?issue is not getting replicated on our side.

    To help us better understand the problem,?Can you please specify the version of the plugin you are using and whether you have any custom login or registration forms? Please provide us with more details regarding the issue so that we can look into it.

    Please raise a support request through the plugin or our?website?so that we can assist you.

    Thanks,
    miniOrange Team

    Hello?@devsc2768 ,

    We have not received your response yet. For now, we are closing this ticket.

    If you are still facing this issue, please don’t hesitate to reach out to us through our support form in the plugin or on our website.

    Thanks,
    miniOrange Team

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Users unable to login. Forcing sessions to die’ is closed to new replies.