frustrated999
Forum Replies Created
-
Forum: Plugins
In reply to: [Responsive Lightbox & Gallery] Vulnerability DiscoveredI agree and apparently issue was reported back at the end of August.
There is only an option to view log for the manually run job from last week. In this logfile it shows in part
0000.054 (0) Deleting old log file: log.1f5c42a6c29f.txt
0000.055 (0) Deleting old log file: log.4eebbf02469b.txt
0000.056 (0) Deleting old log file: log.5ba5e68915eb.txt
0000.057 (0) Deleting old log file: log.dcf72a9f4119.txt
In other words there are no other log files to view even though its set to keep 4 backups and it shows 3 almost 2 year old backup plus the manually run one from last week.
As far as I can tell me doing the manual backup with the latest version wiped out all of the other backup logs. The applicaiton only allows me to download a single log or is the log file simply appened to with each job’s output?
It is strange that other security plugin had no issue performing its backup nor did the auto updater. The thing is that I go that poorly worded email that mentioned Successfully backuped up when it wasn’t right after the Updraft plugin was automatically updated. I did nothing to either of those websites.
Again there was a link provided in the plugin which fixed the issue on Dropbox for both of these sites. I was able to do an on-demand backup and one site even ran a scheduled backup. The other side is scheduled to do one on March 1st.
My point is what the bleep was this plugin doing for almost 2 years? Why was it not at least sending out emails showing failed backup attempts due to destination issues?
There are no log files that I can see except for the log files from the manually run backup. The existing backups shows May 13, 2022 as the last backup until Feb 23, 2023, I received that previously mentioned email. Up until then, I received nothing. These backups were being stored on DropBox if that helps.
Forum: Plugins
In reply to: [Two Factor Authentication] No longer able to have function website w 1.12@greghl I did not say it was resolved on this site I had the issue with only that I was using another 2FA option on ANOTHER website without any issue.
Forum: Plugins
In reply to: [Two Factor Authentication] No longer able to have function website w 1.12Ya figured it was the automatic update of the plugin that caused this issue. I have Wordfence free on another website and it has a 2FA module that seems to be functioning fine.
If you mean by “full plugin conflict ” disabling each activated plugin one by one and seeing if any of them affect the issue then no I have not had the time to do that.
Well I deleted the unactivated 2FA plugin and logged out and then tried to login but intentionally entered an incorrect 2FA. No difference. Still seen “nil” for the response from the WF plugin
Just wanted to confirm that this “plugin conflict” you are referring to is in regards to the “nil” being displayed in the Wordfence 2FA screen if one enters an incorrect code? If so what is suppose to appear when one enters an incorrect 2FA code when attempting to login?
Regarding the issue with the inability to login at all that has not reoccurred since I initially reported it so further testing regarding that issue is not needed.
It has been sent and I used “frustrated999” for forum username.
I was using the current version of the plugin as its automatically updated.
So if you enter an invalid code in the 2FA input window are you not seeing “null” in the UI? I just tried it now and the current version of the plugin displays “null” in the rectangle area under the Wordperfect W when an invalid code is entered.
- This reply was modified 5 years, 5 months ago by frustrated999.
- This reply was modified 5 years, 5 months ago by frustrated999.
First I resolved the problem by disabling the plugin and redoing the Token.
I have two concerns regarding continuing to use Wordfence 2FA:
1) Why is the plugin displaying “nil” in the title bar when an apparent invalid 2FA code is used? Should it not handle that type of issue with more meaningful error message?
2) Also what use is the recovery codes if they even do not work? This really concerns me.Well this issue again showed up reporting that
Scan Summary
Added 610 Removed 208 Modified 1525Then the next day
Added 18922 Removed 1 Modified 19
This is with Version 7.4.0
I have serious doubts regarding this plugin when one can not trust the results of its reports due to a bug in it. That leads to becoming complacent when we see a report saying that a large number of files are changed and just chalk it up to the bug. We are trusting this plugin to give us reports that we can use as a basis for security issues. This has been a long festering issue with this plugin and sure does not act as incentive to purchase their Pro version of the plugin.
Sigh