livingflame

@svtx
This plugin does not work with buddypress, bbpress… but thanks for comment.

Here I shared this php code, this really work, but ONLY with author Blog Posts. Not in: comments, etc.

I’m looking for a full solution based in this code or similar… But nobody help!

• This reply was modified 8 years, 1 month ago by livingflame.

@mbrsolution

In part, I think yes.

My other big problem is with this: https://www.ads-software.com/support/topic/username-exposed/

Start a new… Its not necessary for now, @mbrsolution
Here can be.

So, the problem:

— Captcha does Not work in Blog / Comments. You can comment by skipping the captcha.
— Captcha does Not work with Buddypress, Register Form.
— Captcha does Not work in Login Form. You can comment by skipping the captcha.
— Captcha does Not work with Buddypress Custom Login Form. For example, if this is: Menu / My Account / Login. Because the captcha not appear in this custom form.
— Captcha does Not work with: I forgot my password.

Please, CHECK it. And, if you can, add Google reCaptcha in Options.

Does WP Super Cache affect this plugin?

And please… Check —–>
https://www.ads-software.com/support/topic/secret-url-reveal-after-max-login-attempts/

• This reply was modified 8 years, 1 month ago by livingflame.

Another thing, You do not need to be a Subscriber… Just see the LOGIN button and try to login with any username that you see on the page. You enter a fake passwd, and after some failed attempts, you are redirected to:
yourpage.com/your-secret-login-word
ERROR: Access from your IP address has been blocked…

PLEASE, Check it yourself.

And this problem is also related to the other ===::: Username Exposed

@wpsolutions
@mbrsolution
@chesio

• This reply was modified 8 years, 1 month ago by livingflame.
• This reply was modified 8 years, 1 month ago by livingflame.
• This reply was modified 8 years, 1 month ago by livingflame.

There are Not plugins for this security measure. Only this php code and similar, but this does not work with buddypress… this code only work in Blog Posts. Changing author username for author nickname! But this php code can be adapted and improved.
@wpsolutions

• This reply was modified 8 years, 1 month ago by livingflame.

Hi!

Username Exposed is a weak point in Communities, Forums (working with BuddyPress, BbPress).

Any malicious person can hack the accounts of the Members, and bring down the Community for lack of this Security Measure.

For this reason, I am making the request.
If you can not help now, please tell another one of your colleagues. The basic code is here. Unfortunately, I do not get php. But I did try this code and it works, but ONLY with Blog Posts. @wpsolutions

Also, check this ===::: restrict-user-registration-to-emails-on-a-single-domain

Other Measure is: Force members to use strong password; yes, Wordfence has this, but does not work with BP register.

• This reply was modified 8 years, 1 month ago by livingflame.
• This reply was modified 8 years, 1 month ago by livingflame.
• This reply was modified 8 years, 1 month ago by livingflame.
• This reply was modified 8 years, 1 month ago by livingflame.

Dude, you do not seem to understand me.
If you are Subscribed to a WP page, this page has a basic Login Form in Menu (sometime called MY ACCOUNT. NOT directly > https://www.yourpage.com/wp-login.php). For example this page (working with BuddyPress): seventhqueen.com/demo/sweetdatewp *

Then, when you fail for example 3 login attempts (using AIOWSF or WordFence), you are redirected to:

wwww.yourpage.com/YOUR-SECRET-LOGIN-NAME

And you receive this message:

ERROR: Access from your IP address has been blocked for security reasons. Please contact the administrator.

And it is here when your secret name is revealed. Then, PLEASE, Check it yourself. @wpsolutions

——————————————-
* And for this same page, your Login Captcha does not work. Yes, I have this Theme. seventhqueen.com/demo/sweetdatewp

• This reply was modified 8 years, 1 month ago by livingflame.
• This reply was modified 8 years, 1 month ago by livingflame.
• This reply was modified 8 years, 1 month ago by livingflame.
• This reply was modified 8 years, 1 month ago by livingflame.

I’m having the same problem.
Any solution?

My host is HostGator

• This reply was modified 8 years, 1 month ago by livingflame.

@mbrsolution

Your login Captcha has problem with BuddyPress Login Form.

When I enable Login Captcha, my BP Login Form does not work. Nobody can login.

@wpsolutions

Remember this topic! The secret name to protect wp-login is revealed after attempts.

For example, if your secret login name is: https://www.yoursite.com/BlackCat

I. e. if you config. the plugin for max 5 attempts, the user is redirect to:

https://www.yoursite.com/BlackCat (Ouchhh! your secret wp-login name is revealed)

ERROR: Access from your IP address has blocked…

So, please, check that!

And with WordFence also. Im using All In One … and WordFence. But, you can use Login Protection of both plugins! This create a conflict, for this reason Im using WF login attempts and changing the wp-login with All In O. But does not work, The Secret Login is Revealed!

And. Forget my Passw also. Here the Secret Login Name is Revealed.

• This reply was modified 8 years, 1 month ago by livingflame.
• This reply was modified 8 years, 1 month ago by livingflame.

@wpsolutions

Please, Help here!

@mbrsolution

Help with that! Is for Security!

@mbrsolution

Help with that! Is for Security!

Continue running.

Any Solution for…?

There are a bad Vulnerability in WordPress / BuddyPress and BbPress…
First:
BuddyPress and BbPress shows in Profile @your username, with which you do login, instead of the Nickname. That is very bad! Because your login name is expose.

If you Right Click on Public Name (in Activity, Posts, Comments, etc.) you can see the Username in:

https://www.yoursite.com/members/

https://www.yoursite.com/forums/profile

https://www.yoursite.com/author/

So, please, if you know a functions php to resolve this problem…
Function: Force to Show the Nickname only (based on your first name and last name) in the Links (a.url.fn.n).

• This reply was modified 8 years, 1 month ago by livingflame.
• This reply was modified 8 years, 1 month ago by livingflame.