justmo

Thanks for that Tony, much appreciated. I will try that and see if I can access the site. At the moment I cannot log in at all.

Yesterday I installed Better WP Security. Sorry I did! I’m locked out of my site and have been trying to get back in for the last day.

I wouldn’t mind but I had only just restored my site after being hacked.
I thought I’d up the ante on security so I installed ‘Admin Username Changer so I could change the username from ‘Admin; then I looked for additional security and found Better WP Security, installed it, followed instructions to the letter and still now locked out.

In PhpMyAdmin the wp-users table showed 1 user with an ID of 2, the user_pass for which keeps changing. Why does the password keep changing?

So when I try to login with the currently displayed password in PhpMyAdmin, I get a login error “ERROR: The password you entered for the username xxx is incorrect.” If I do a password retrieval, the confirmation link is sent

Logging in with a new user I created in PhpMyAdmin, password from PhpMyAdmin doesn’t work, when I reset password I get “You do not have sufficient permissions to access this page.

I’ve been locked now out a couple of times – received a site lockout notification in my email. Tried deleting the log entries, tried waiting for the lockout period.

I’ve cleared the cache, cookies etc.

I changed the htaccess file to the following (from a thread on this forum) however when I access site.com/wp-admin I get “You do not have sufficient permissions to access this page.”

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

It was this beforehand.

# BEGIN Better WP Security
Options All -Indexes

Order allow,deny
from all
Deny from

<IfModule mod_rewrite.c>
RewriteEngine On

# END Better WP Security

I see that some are posting about changing the .htaccess file however I seem to have several .htaccess files – should I change all of them to the above code.

I just want to get back into my wordpress site – whatever it takes. I’ve spent the last day trying different suggestions from this forum.

How can I get rid of this plugin and get back my access back.

Any assistance at all is welcome. Help!