• Resolved worsin

    (@worsin)


    Im completely locked out of my site.

    Ive tried disabling all plugins but something that Bulletproof security did has caused none of my login pages to function at all.

    When i first went to troythomas.ninja/wp-admin i got a popup saying i needed to prove i was human so i put info in and i was redirected to a page that doesnt exist giving me a Not Found error page.

    I since then have disabled all plugins and now it just auto redirects me to
    http://troythomas.ninja/wp-login.php?redirect_to=http%3A%2F%2Ftroythomas.ninja%2Fwp-admin%2F&reauth=1

    Ive also looked for any special .htaccess files and i can find none but the default wp .htaccess file.

    At this point i would really like to just be able to access the admin area so i can remove BP security completely because i cannot have this happen again.

    https://wordpress.org/plugins/bulletproof-security/

Viewing 15 replies - 1 through 15 (of 20 total)
  • Plugin Author AITpro

    (@aitpro)

    I checked your website and your wp-admin folder has directory password protection / BasicAuth so maybe that is what you meant by a pop up? Directory password protection can be added/removed in your web host control panel. That is not something you can do from your website/WordPress.

    Login to your web host control panel and turn off Directory Password protection for your wp-admin folder. If you have mistakenly added directory password protection in your wp-admin .htaccess file without setting this up in your web host control panel first then delete your wp-admin .htaccess file.

    Plugin Author AITpro

    (@aitpro)

    [duplicate]

    Plugin Author AITpro

    (@aitpro)

    [duplicate]

    Plugin Author AITpro

    (@aitpro)

    Or if you intentionally setup Directory password protection on the wp-admin folder then login to your web host control panel and resave your wp-admin directory password protection settings. This will generate new BasicAuth .htaccess code in your wp-admin .htaccess file or create a new wp-admin .htaccess file if one does not exist.

    If you are intentionally using Directory password protection then you would need to add that BasicAuth .htaccess code to BPS Custom Code.

    Thread Starter worsin

    (@worsin)

    actually i just installed wordpress on this domain from scratch and a brand new install is doing the same thing

    No directory password protection is being used at all.

    Plugin Author AITpro

    (@aitpro)

    hmm very strange. Never seen this automatically setup by a web host before, but that is the only logical thing I can think of that could be happening.

    BPS does not do anything with BasicAuth or create a directory password authentication window at all. You would have to do additional custom steps on your own outside of BPS to do that.

    I think probably the best thing to do at this point is to contact your web host and ask them if they automatically do something like this.

    Thread Starter worsin

    (@worsin)

    yeah i even went into the directory password area and none are set for any directories.

    I use Skynethosting.net and have a ticket in…lets see what they say. Either way its unacceptable to put this feature on an account by default…its only going to confuse people and cause more support tickets for them.

    Really dumb!

    BTW thanks for the super fast response time!

    Plugin Author AITpro

    (@aitpro)

    If it turns out that this is some Brute Force Login protection that is automatically added to WordPress sites on your host, which would make logical sense, then I will post the steps to add your host’s BasicAuth .htaccess code to BPS Custom Code so that the BasicAuth login will work and you will be redirected correctly after logging in to the BasicAuth authentication window.

    Plugin Author AITpro

    (@aitpro)

    yeah i have to agree with you 100% that this should be the customer’s choice and NOT done automatically. πŸ˜‰

    Plugin Author AITpro

    (@aitpro)

    And I just checked the username again for the authentication window. Username: skywp. Seems pretty likely that your host is doing this automatically by default “sky…” is in the username by default. πŸ˜‰

    Thread Starter worsin

    (@worsin)

    yeah i noticed that also.

    Thread Starter worsin

    (@worsin)

    Next thing will be the Terminator at my door!

    Plugin Author AITpro

    (@aitpro)

    LOL πŸ™‚

    Ok here is your answer – Yup this is being done automatically by default by your Host.
    https://skynethelp.com/index.php?/News/NewsItem/View/31/protecting-your-wordpress-admin-login-area-against-brute-force-attack

    Plugin Author AITpro

    (@aitpro)

    Personally I do not like or use wp-admin directory authentication, but if you want to keep this after speaking with your host then let me know and I will post the steps you need to make everything work correctly.

    Thread Starter worsin

    (@worsin)

    yeah only it doesnt work lol

    They act as if once you input your info that you will be “correctly” taken to the admin area but this is false as we have found.

    They responded back to me with a ticket saying they disabled it but im still curious why its not working as they say it should.

Viewing 15 replies - 1 through 15 (of 20 total)
  • The topic ‘Locked out of Back of site’ is closed to new replies.