Ross

@tejwanihemant @anandau14 Thank you for your support. Plugin is working fine on my site now.

@mstudioil thank you for helping to get this moving, and for your advice re: alternate choices.

I wish all of you an excellent week, and an excellent year. Cheers, r.

@mstudioil I know… so glad I’m not going to have to redo it.

@mstudioil thank you so much for the information. I’m glad they are fixing this one though, I have over 50 project pages that use this plugin, and I would have to redo every one of them.

@anandau14 Looking forward to the update tomorrow.

@tejwanihemant any news on this?

Thanks Hemant. Can you post here so we are alerted when the update is ready? My client is pretty mad at me (they don’t always understand that things take time) so it would be great to get an alert when it’s ready for updating. Cheers.

And it’s not working on my site either. Still waiting after 5 days for an answer.

Will do, thank you.

Hristo, I have had lot of success with the plugin except for two sites (out of about 20). All of the sites that I’m migrating to SG were on the same server with Site5. I went through the SG support chat and was told it was permission issues. So I had the host change my folder permissions to the ones provided. Still isn’t working. What else can I do besides using my one free professional migration? I think the plugin works really well most of the time. I’ve found that you must turn off all plugins, (especially security plugins) except for the SG Migrator plugin. Anyway, give me some advice if you can.

Thank you! I did find it there in a drop down that I hadn’t noticed before.

I poked around in the general forum for wordpress support. Lots of this popping up in the last year or more. I was unable to get the example.com/?author= 2 to work (sent me to home page) so maybe there is a different exploit out there? The other threads seem to indicate some changes to the htaccess file, but I’m totally afraid to do that at my level of experience.
https://www.ads-software.com/support/topic/disturbing-login-hack-attack-using-real-usernames?replies=14

I’ll bring in one of my coder buds to fix it I guess. Ultimately Wordfence has been alerting me which is good. Passwords are big ones.. so I’m not super worried about the bots getting in.. but it is disconcerting to say the least.

additionally it appears to be a wordpress issue, not wordfence so I posted in the wrong area entirely. thanks again.

Ok, sorry about that. I’ll start a new thread. It isn’t that my users are getting blocked.. it’s that the bots are trying to log in with correct user names. Im just not sure how they are seeing them or getting them. Thanks Tim!

Please forgive my ignorance with regard to code etc. I have three users on a site. I am the only admin. Wordfence has blocked many attempts to log in with incorrect user names, but recently I noticed it was doing so with actual user names. Is this a setting I need to change or is this the bug fix Tim is submitting above? I don’t think Im hijacking here.. if so please feel free to slap my wrist and I will post a separate thread. Thank you! (btw, the bots/hacks have never tried to login with my username which is listed in the number one slot on the user list)

You would put it in the “custom css” area of the theme. In this case Origami, which provides a nice place for you to do so:

Appearance > Custom CSS

This is where you would put any custom css code, it will look here first so this code takes precedence. Strangely I haven’t done much wordpress since this was resolved, so it was good for me to look at it again too.

and strangely.. if I just post the shortcode for VFB underneath all of the code, everything works.. except I have two forms and only need one…