alamana

Seems to work great! Thank you very much again!

I see WordPress image upload failed. Please see here: https://imgur.com/a/fkQKjbB

Thank you again for your reply. I hope this image will be helpful.

After one or two page navigations, the session is logged out.

Thanks for your reply and for you great plugin. Unfortunately I don’t have the line numbers, but in one of the JS files from the plugin it tries to create a web worker or some sort of worker, and loading that counts as a blob.

When it fails to load it seemingly causes the logout logic to trigger immediately. Disabling the plugin resolved the issue, and I’ve got it disabled for the time.

Thank you again!

Thank you for your reply @mplusb. I saw that option but I don’t want to disable the reports – I only want to disable associating logged-in user’s usernames with the downloads in the reports. Is this possible? If not, will you please consider adding such a feature for compliance with privacy laws?

Thank you.

Hi Mark and thank you for your reply.

All of those options are checked and there are no directories excluded. I made changes to our custom theme files and they were not reported. This may be because at least 10 files change on the server most days and those may have pre-empted the changes I expected so see, but that seems improbable – and the limit of 10 files seems not particularly useful and might give users a false sense of security.

We use other mechanisms to detect unexpected changes but I always considered Wordfence more convenient for day-to-day checks, but the 10 file limit seems really easy for a malicious actor to work around by waiting until 10 other files have changed.

Thanks again.

Thanks for the speedy and informative reply Chris! It sounds like this won’t land before 2024 – is that a safe bet?

Is there any update on PHP 8.2 support?

The iThemes team uncovered the cause. I guess the setting previously didn’t work and now does.

https://www.ads-software.com/support/topic/unable-to-login-due-to-ithemes-but-reason-is-not-clear/page/2/#post-17087004

@shanedelierrr that appears to be the issue. We have it set to email-only. That never used to be a problem for us to login as an admin with username in the past. I guess perhaps iTSec fixed that feature recently and that led me to think something broke.

With that in mind, I think we can close this issue. Thank you for all of your help.

It seems like the problem might only affect logging in with a username – but logging in with an email seems to work. Is there some reason that might be based on the way things were coded in the plugin?

Thanks again!

It seems like the problem might only affect logging in with a username – but logging in with an email seems to work. Is there some reason that might be based on the way things were coded in the plugin?

Thanks again!

Hello @shanedelierrr and @shalomt could you please advise on this? Otherwise I guess I will be uninstalling iThemes Security.

Thanks again for reading.

Just a friendly bump @wfpeter

Just an update – I sent the diagnostics immediately after my last message. I hope they might provide some insight. Thank you again!