Plugin Author
AITpro
(@aitpro)
BPS Login Security & Monitoring will only log login attempts made using a valid username. Logging failed login attempts that are made using an invalid username would be a waste of your website/Server resources and would create a vulnerability/attack vector that could be used maliciously against your website/Server to overload your website/Server and crash your website. This is a common mistake that we see in several login security plugins. 😉
Plugin Author
AITpro
(@aitpro)
Or are you asking if there are options in BPS Login Security & Monitoring for how login error messages are displayed? You will find this help information below by clicking the Blue Read Me help button on the Login Security & Monitoring page. If you are not seeing BPS login security messages displayed then most likely you are using another plugin or theme that handles login security or membership. You can only use 1 login security feature/plugin at a time. If you use 2 login security features/plugins at the same time then either 1 will override the other or worse they will cancel each other out.
Error Messages:
Standard WP Login Errors: will display the normal WP login errors. Example1: ERROR: The password you entered for the username X is incorrect. BPS Example2: ERROR: This user account has been locked until May 14, 2013 9:31 am due to too many failed login attempts. You can login again after the Lockout Time above has expired.
User/Pass Invalid Entry Error: will display a generic Invalid Entry error message instead of displaying normal WP login errors for incorrect username or incorrect password, but if a user account is locked out then the BPS timestamp and Lockout Time error message will be displayed. Example: ERROR: Invalid Entry for either incorrect username or incorrect password. BPS Example2: ERROR: This user account has been locked until May 14, 2013 9:31 am due to too many failed login attempts. You can login again after the Lockout Time above has expired.
User/Pass/Lock Invalid Entry Error: will display a generic Invalid Entry error message instead of displaying normal WP login errors for incorrect username, incorrect password and when the user account is locked out – the BPS Lockout Time error message will NOT be displayed.
CAUTION: If the user account is locked out then no indication will be given that the user account is locked out and only a generic ERROR: Invalid Entry message will be displayed.
Thread Starter
pn1wp2
(@pn1wp2)
So it’s not possible to display “ERROR: Invalid username. Lost your password?” for real visitors who forget their usernames or passwords to log in? I do agree with you explanation and thank you to point out.
What would you suggest to do empty alert box on my website log in page? I took screenshot –
http://imgur.com/VtMm2Cf (No Error Message)
http://imgur.com/sGQivjf (Error Message Appears When I Deactivate BPS)
Plugin Author
AITpro
(@aitpro)
I see what you mean in your first screenshot. BPS does display error messages and you can choose which error messages you want to display. Since the error message field is blank then you have another login security feature/plugin/membership plugin or theme installed that is already handling login/registration/etc. and it is overriding BPS Login Security.
Plugin Author
AITpro
(@aitpro)
In these cases you would have to choose which login security feature you want to use. If you do not want to use BPS Login Security you can turn it off on the Login Security & Monitoring page.
Thread Starter
pn1wp2
(@pn1wp2)
Yes. You’re RIGHT. I was using other plugin “Theme My Login” to handle log in security and membership. After I deactivate TML plugin, the error message alert reappears. Is it possible to make BPS and TML work together on my website?
Plugin Author
AITpro
(@aitpro)
hmm maybe. TML has a login security module that can be turned on/off – enabled/disabled. I guess try and turn off the security module in TML and see what happens. TML has the capability to create a custom login page so I am not sure how that would work with BPS Login Security. I will download and install the TML plugin and see what happens.
Thread Starter
pn1wp2
(@pn1wp2)
Login Security & Monitoring feature is only available in BPS PRO version, isn’t it? 🙁
Plugin Author
AITpro
(@aitpro)
Login Security & Monitoring is in both BPS and BPS Pro. There are some additional alerting options in BPS Pro that hook into S-Monitor in BPS Pro, but the core functionality is exactly the same in BPS and BPS Pro.
Thread Starter
pn1wp2
(@pn1wp2)
I turn off Login Security & Monitoring in BPS, log in error message still doesn’t show up (when enable TML plugin at the same time). I tweak modules in TML but they don’t really help. Anyhow, I don’t want to give up my hope to use TML and BPS, getting along together on my website. But if needed to choose one, I will definitely keep BPS.
Plugin Author
AITpro
(@aitpro)
Did you click the Save Options button after selecting Turn Off Login Security? I think TML login security is well coded so choosing BPS or TML login security – either way would be fine.
It’s not a matter of BPS and TML being compatible with each other. The issue is this. WordPress has hooks – actions/filters that plugins and themes can hook into. So if 2 plugins are using the same hooks to do the same or a very similar thing then they will compete with other since they are using the same WordPress hooks. Kind of like only 1 person can drive a car at the same time. 😉
Plugin Author
AITpro
(@aitpro)
I will be installing TML shortly to see how the 2 plugins interact with each other. Will post back here in a bit.
Thread Starter
pn1wp2
(@pn1wp2)
Thank you very much. I still couldn’t believe – getting such instant and helpful support for free version user (like me) from plugin author. <blush | blush>. Not enough to say it again, but I will – THANK YOU very much and looking forward solution from you.
Plugin Author
AITpro
(@aitpro)
We are just regular folks who understand how important good support is. 😉
Here are the results of testing TML with BPS. I installed TML and did not do any additional customizations and used the default TML setup.
If both TML and BPS Login Security are turned On/enabled then TML will always override BPS login security.
When I uncheck TML Enable Security and save settings in TML (and on the TML Security Settings page) and enable login security in BPS and save settings then BPS login security works normally and login error messages displayed normally.
When I turn off BPS login security and enable TML login security then TML login security works normally.
Here is an interesting thing. With TML login security enabled and BPS login security enabled and using BPS Log All Account Logins. TML login security overrides BPS login security, but the BPS Log All Account Logins feature/option still works correctly.
So I am not sure why login security error messages were displaying blank on your site. The only logical things i can think of are: you customized TML in a way that i did not test or all setting options were not saved in either TML or BPS or both.
Thread Starter
pn1wp2
(@pn1wp2)
I think … it could be my theme issue. BPS and TML, they both get along on default theme. I will ask theme developer for this issue.
Final Conclusion: 🙂
—————–
BPS and TML work perfectly together.
Feel GREAT! – Top Notch Plugin Support @ BPS
