ianhsieh

I have find some time to disable all plugin except the Jetpack, and then it is still doing the same thing. I tried to change to a default theme, but then the sidebar disappeared and I can’t test it.

I tried to turn the subscription feature off and one. Doesn’t fix it.
I then tried to reinstalled the plugin and reconnect, same thing.

Same here, any update?

Yes, I followed the documentation step by step.

OK thanks.
I deactivated all plugins and start activating them one by one and the sliding is working now. I should be able to single out the plugin that clashes with SA.
Hopefully it’s not a crucial one that the site need.

Any update?

OK, with that checkbox beched, it now auto slides… but only once.
It seems to auto slide once after the page is loaded, then it just stops.

Hi Dave,

Here is a screenshot of part of the live traffic page.
https://snag.gy/3r1Nw2.jpg

I can see that there are more attacks happening than what our log can record, but I don’t see multiple addresses of the same starting digits showing up. For example, I see 13.59.171.57 showing up multiple times, but I on’t see 13.59.171.XXX showing up elsewhere.

Also, the IP address shown to be block in this list doesn’t seems to match the one in the block list either (https://snag.gy/bR6BgJ.jpg). Are they blocked or not?

Thanks,
Ian

[ Please do not bump. ]

Hi Dave,

– Immediately lock out invalid usernames (is this checked?)
Yes, it’s checked.

– How long is an IP address blocked when it breaks a rule (is this 4 hours or longer?)
It’s set to 6 hours.

– Amount of time a user is locked out (is this 4 hours or longer?)
It’s set to 2 months.

– How does Wordfence get IPs
I use the recommended option “Let Wordfence use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites.” When I tried with a nonexistent username, I use a server that I have RDP access to, and is locked out, with the IP listed in the block list.

——————————

Here is a screenshot of the log of my website: https://snag.gy/Qiu3Vf.jpg
As you can see, an anonymous user attempted to login with an nonexistent username, but the IP address is not blocked. They continue trying to login with the same nonexistent username.
A different event shows up last night, and none of the IP address are in the block list even though they only tried once. https://snag.gy/3porGt.jpg

Thanks,
Ian

@fourwhitesocks Nothing else should change. I haven’t have the need to rebuild my forms on the sites that applied this fix. If you want to be careful, backup the site before making any change.

@buzztone Adding a feature at request of some user while completely ignoring another side of the coin is, IMHO, the worst practice for any developer.

@fourwhitesocks There is an unofficial fix for this issue.

Warning though… this is an UNOFFICIAL FIX, so use it at your own risk. It works for me though (at least for now).

https://www.ads-software.com/support/topic/lots-of-spam-with-recaptcha-3-0-update/

@buzztone
While I agree that it’s not an official fix, that’s the quickest way to fix the issue that the author is forcing on everyone. I know people are asking for v3 support, but why remove the v2 support entire to support v3? Not to mention that the spam plaque that others has been complaining.
The author has also been deleting people’s request for adding v2 back as an option. He seems reluctant to retract and offer users option to choose which version to use.

Contact 7 5.1 forced you to use reCaptcha V3, removed your v2 keys and ignored the [recaptcha] tag.

Apply this change in the post https://www.ads-software.com/support/topic/lots-of-spam-with-recaptcha-3-0-update/ as recommended by @peterupfold

As I said in the question, I have set up so that all users with “Editor” role are able to edit FlipBox. When I login as other users with no edit permission, they don’t see the FlipBox page at all, which is correct. But when I login with the user with the appropriate permission, I can see the page, but I cannot do anything because all the page says is “You do not have sufficient permissions to access this page.”

Basically, the setting only give them the permission to see the FlipBox page, but did not grant them any permission to make any change, which defeats the purpose.

This means I am forced to give anyone who need to access this page Admin role just so that they can edit the FlipBox contents.

Screenshots
https://snag.gy/bmMHFq.jpg
When I login as the “Editor” user
https://snag.gy/zBsC3I.jpg