very easy to block admin out if use “multisite-auth”

  • Hello,

    For me, the most important and complicated is Multisite login, and it is great that I can find a great plugin of Multisite Auth, which support custom a subsite as Multisite login／signup site, it is the most useful plugin for us:

    https://www.ads-software.com/plugins/multisite-auth/

    but I found the it is very easy block administrator out if use both IP-geo-block and Multisite-Auth, it would be great if you can give some suggestion or any way to improve the situation, thanks a lot.

    @Samuel_Elh

    Alex

    • This topic was modified 7 years, 2 months ago by alexlii.
Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author tokkonopapa

    (@tokkonopapa)

    Sorry but I can not have enough time to look into multisite-auth plugin. (I should also respond your about the topic “any suggest on configration with Defender“).

    But unfortunately, I should say it’s difficult to redirect between multi-domain sites especially when you enables “Prevent Zero-day Exploit” for admin area.

    I’d like to leave this topic open until I think up a good idea to resolve this topic.

    Thanks for your asking.

    Thread Starter alexlii

    (@alexlii)

    Hello @tokkonopapa,

    How is going, this is reply from the author of Multisite-auth, any suggestion on make them compatible?

    https://github.com/DevriX/multisite-auth/issues/1

    Dear Alex,

    Sorry for the delays, I have been away for quite some time.

    Please note that this plugin uses WordPress API to authenticate users, so WordPress is what processes the auth cookies and tokens, and not mu-auth.

    It uses wp_set_current_user() and wp_set_auth_cookie() functions to do so (see User::loginUser method), and if you configure WordPress correctly then it should work. I think maybe you need to do some sort of domain mapping or something? anyways if you can help me reproduce your case then I’ll be able to help, I have couple test domains or I can test it locally as long as I can reproduce the issue.

    Thank you!

    Best,
    Samuel

    Alex

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘very easy to block admin out if use “multisite-auth”’ is closed to new replies.