HDready Graphic

Hi, since the 10/10, we have no more attempt, so it seams to solve the issue. Do you have an idea how the hackers could get the connexion url with xml-rpc ?

I have activated the plug-in and desactivate the option, let’s see what append. Thanks.

The plug-in is installed, but not activited.

Hi, since you have no answer from the author, I will list my plug-ins if something ring a bell to you.

Note that from a couple of days, the connexion attempts have dropped.

? Advanced Editor Tools
? Broken Link Checker
? Contact Form 7
? EditorsKit
? Fonts Plugin | Google Fonts Typography
? IONOS Assistant (installed by deffault)
? iThemes Security
? Limit Login Attempts Reloaded
? Real Cookie Banner (Free)
? WordPress Importer
? WPS Hide Login
? WPS Team

That’s it, all up to date, all clear. Template: twenty twenty-three.

I looked in the html code of all pages (I guess, the website doesn’t have many pages) without finding any reference to the connexion page.

Thank you.
Regards

Hi, on my side, I have WPS Team (no one can register), Limit Login Attempts Reloaded and Broken link Checker which could maybe interfer (some other for cookies and edition).

Hi, I have the same issue. I change the url 2 times this last 12 hours, with a very strong url, impossible to break it, and still receive attempts (I had this issue since a long time, but since a couple days it’s hundred of attempts per days). I looked for a link somewhere but didn’t find any, is there a process to find it ?

https://www.learning-sphere.com/

Thank you.

Hi, I’m sorry, it was 2 month ago, I don’t remember exactly. I thinh I have solve it by changing the style. Dark works, I think some other don’t.

Regards,
Greg

Ok, I have change the line 125 by :
return preg_replace_callback("/\s*<pre(?:data\-code\-lang=[\"']([\w-]*)[\"']|data\-code\-file=[\"']([\w-]*\.?[\w-]*)[\"']|data\-code\-colla=[\"']([\+\-])[\"']|data\-code\-line=[\"'](\d*|n)[\"']|\s)+>(.*)<\/pre>\s*/siU", "wp_codebox_substitute", $content);
And the line 74 by :
$code = html_entity_decode(wp_codebox_code_trim($match[5]));

The second is a correction for the html entities, the first change the code : lang="xxx" colla="+" file="xxx" line="n" by data-code-lang="xxx" data-code-colla="+" data-code-file="xxx" line="n" So in this case, the parameters are saved and it’s valid html5.

Regards,
Greg

For those who are interested, you can see the site there :
https://dev.belair-chambres-hotes.fr/en/rooms/
Just clic on a room in the right column to see the problem.

Login : visitor
Password : visitor

Thanks.

OK, so I’ve tried online and I still have the issue, so it’s definitly not a local problem…

Help, I need somebody help…

Thanks

Ok, well… too many experts there :/

No one as any idea ?
Nobody can help me ?

But the problem could be about multi site :/

Yes it is sir. It might be another problem :/
As I said, the problem is only for the children pages (I have no post, so I have not tried).

Alias "/belair" "C:/Freelance/Bel-Air/site/local"
<Directory "C:/Freelance/Bel-Air/site/local">
Options FollowSymLinks Indexes
AllowOverride All
Order deny,allow
Allow from 127.0.0.1
deny from all
</Directory>

Thanks,
Greg

Thanks, I will see if I can because I’ve some troubles with my connexion this days :/