Locked out of own site

Hi Folks:

Which version of Login Security Solution were you using? 403 Error? LSS doesn’t return 403 responses. Please elaborate with specifics of what was happening in the environment, attacks that were happening, what steps you took to get a 403 in your browser and exact messages you received.

As far as SQL, this plugin stores failure attempts in the <prefix>login_security_solution_fail table. Deleting the data in there should resolve most issues.

–Dan

Thanks for the details.

The problems accessing wp-login.php were via web browser, correct? You mention an Andriod app, so just making sure.

First, LSS doesn’t do any special checking on arrival at wp-login.php. If LSS is letting you see other parts of the site, LSS will let you see wp-login.php too.

Second, LSS doesn’t produce 403’s.

Perhaps you have a modified version of LSS? I’ve seen some folks use LSS’s data and/or modified versions of the plugin to reject access to the login page. More likely, you have another plugin that’s at issue.

Which plugin are you using for your two factor auth? What other plugins do you have installed? What comes out if you run grep -r 403 . on your plugins directory?

I’m not trying to pass the buck here. But like I said above, the behavior being described doesn’t match how LSS works.

I hear you that removing LSS solved the problem. That _could_ be a coincidence.

Hi csckauf:

Network IP 0 107.xx
Username 7 xxx
Password MD5 0 xxx

That means someone tried to log into using your your user name seven times. They didn’t get in. The 0 for “Network IP” and “Password MD5” indicates the attacker (or whomever) was coming from a different IP and using a different password than you used to successfully log in. Login Security Solution noticed those prior seven failures and immediately logged you out and is requiring you to reset your password (to ensure you are who you say you are).

Please enter your username or email address. You will receive a link to create a new password via email.

That message is produced by WordPress’ “Lost Password” page. The fact that you didn’t receive an email from WP’s password reset process could be due to several problems (spam filteres, incorrect user name or email address, etc). Login Security Solution is not involved with that process.

Note: If you want to override the password reset requirement, and you have direct access to your database, you can run the following query (adjust the wp_ in the table name to be whatever your $table_prefix is):

DELETE FROM wp_usermeta WHERE user_id = <yourID> AND meta_key = 'login-security-solution-pw-force-change';

Good luck,

–Dan