jornWidgets

Quite right!

To force WP Super Cache to not cache the All-in-one-Security Plugins’ login page I’ve put the line below in the initialize() function on line 23 in “wp-security-user-login.php”.

define('DONOTCACHEPAGE', true);

We’ve fixed the problem now and it also required a define('DONOTCACHEPAGE', true); in “wp-security-user-login.php” to make sure WP Super Cache doesn’t cache the login screen also.

It took me some time to get the staging server updated but I think I have found the problem now. The issue didn’t exist on the staging server at all and the main difference between the production and staging server is the Varnish cache that’s running on the production, so after some more checking and rechecking I am almost certain the problem lies in the Varnish Cache on the production server.

Thank you very much for your help and my apologies for wasting you time on this.

Sorry about this, but I spoke too soon.

When clicking the link I now get a screen where I can create a new password so it looked like that was the solution. However, when I click the submit button there to save the new password I am still redirected to the same page which claims my key is invalid. The new login credentials won’t work after that, the old are still valid.

I’ve again tried the same after deactivating the WP-All-in-one-Security plugin and then it works as it should.

Any ideas?

Thanks for the reply, I’ve updated the core of WordPress and the issue is now resolved. Thanks very much for your assistance, and apologies for wasting your time.

Thanks for your quick reply. I’ve checked the logs but they’re empty.

I double-checked if the log file is writable but I saw something weird happening. When the file is not writable I get an error in the php.log, see below. When the file is writable the error in the php log is gone, but there still isn’t anything in the All-in-one log.

[08-Oct-2015 07:48:17 UTC] PHP Warning: fopen(/data/www/public_html/web/wordpress/wp-content/plugins/all-in-one-wp-security-and-firewall/logs/wp-security-log.txt): failed to open stream: Permission denied in /data/www/public_html/web/wordpress/wp-content/plugins/all-in-one-wp-security-and-firewall/classes/wp-security-debug-logger.php on line 52