Login is blocked, site had been hacked. Php Myadmin changes blocked.

  • Resolved appleisle

    (@appleisle)


    10 years, 4 months ago

    I have just been bombarded with Lockdown notices from All in One Security Plugin. I checked Users via PHPMyadmin and found my file record as user has been hacked, had the user name changed & presume password. So using the edit facility for this false named user I reset the password (M5).

    I have tried 3 alternate ISP Login attempts but cannot get access using this Username and the new password I setup. ERROR IS REPORTED AS:
    Warning: Missing argument 2 for AIOWPSecurity_User_Login::wp_login_action_handler() in /home/???????/public_html/wp/wp-content/plugins/all-in-one-wp-security-and-firewall/classes/wp-security-user-login.php on line 276

    Warning: Cannot modify header information – headers already sent by (output started at /home/???????/public_html/wp/wp-content/plugins/all-in-one-wp-security-and-firewall/classes/wp-security-user-login.php:276) in /home/mezethes/public_html/wp/wp-includes/pluggable.php on line 934

    I was surprised that after making the DB change to the user I could not gain access. Is All in One Security somehow saving user names & passwords separately? Hence my DB changes are useless and that is also the reason the hackers have also failed to make changes to the site? Any help will be greatly appreciated.

    How can I regain access to my site Admin Dashboard or alternatively hack into it myself via editing files?
    Thanks Dennis

    http://wordpress.org/plugins/all-in-one-wp-security-and-firewall/

Viewing 11 replies - 1 through 11 (of 11 total)
  • nene

    (@wpdreamer)

    10 years, 4 months ago

    Have you tried to delete .htaccess and the plugin via FTP?
    I had many Lockdown notices before using another similar security plugin but now I don’t use this feature anymore, I just use Captha for login and then Rename wp-login.php, works for me.

    mra13

    (@mra13)

    10 years, 4 months ago

    Hi Dennis, Please create a brand new WP Admin user account using the following tutorial then you should have access to your dashboard again:
    http://www.tipsandtricks-hq.com/create-a-wordpress-admin-user-for-a-wordpress-site-via-mysql-6649

    Thread Starter appleisle

    (@appleisle)

    10 years, 4 months ago

    Thanks mra13 – I was hoping that option was a solution, so will now chase up those tips and tricks and give it a go.
    Cheers

    Thread Starter appleisle

    (@appleisle)

    10 years, 4 months ago

    Hi Mra13 – Sorry to say. NO luck in creating a new user. I followed all steps via PHp Myadmin for new user. Tried log in and got error as per:

    Warning: Missing argument 2 for AIOWPSecurity_User_Login::wp_login_action_handler() in /home/???????/public_html/wp/wp-content/plugins/all-in-one-wp-security-and-firewall/classes/wp-security-user-login.php on line 276

    Warning: Cannot modify header information – headers already sent by (output started at /home/???????/public_html/wp/wp-content/plugins/all-in-one-wp-security-and-firewall/classes/wp-security-user-login.php:276) in /home/??????/public_html/wp/wp-includes/pluggable.php on line 934

    Appreciate your the Plugin Author, thanks for this support – Would the other advice by ‘nene’ work OR do you have any other suggestion?

    Many thanks Dennis

    Thread Starter appleisle

    (@appleisle)

    10 years, 4 months ago

    Trying to find an ERROR that may have caused the above, I re-checked the ‘User Meta Values’ and it is by default only viewing :
    SELECT *
    FROM wp_usermeta
    LIMIT 0 , 30

    Hence it shows User Id’s 1 & 2 (up to line 30) whereas my NEW User Id is 4.

    I re-inserted the User Meta values for ID:4 and it says in dbase on line 59. HOW CAN I CHANGE THE QUERY TO VIEW THE ‘user meta values’ to INCLUDE MORE LINES?

    Thread Starter appleisle

    (@appleisle)

    10 years, 4 months ago

    Re prior post – I was confused regarding the viewing of lines, so found my original new user details as line 58 page 2 of the view.

    Looking for any error I might have made when creating new user; I found checking this DBase field “wp_usermeta” that although it has created some details for ID:4 line 58 – there is no other user details like other existing users have. Such as the wp_user_level 10.

    Therefore has my new user creation failed to work? Here’s the details of the Page 2 of the ‘wp_usermeta:

    Umeta_id 58
    user_id 4
    meta_key wp_capabilities
    meta_value a:1:{s:13:”administrator”;s:1:”1″;}

    mra13

    (@mra13)

    10 years, 4 months ago

    Can you temporarily deactivate the security plugin and then do the following to reset the htaccess file:
    http://www.tipsandtricks-hq.com/how-to-restore-the-htaccess-file-when-using-the-all-in-one-wp-security-plugin-5945

    Then try and follow this tutorial to create an admin account and fix the other user account:
    http://www.tipsandtricks-hq.com/create-a-wordpress-admin-user-for-a-wordpress-site-via-mysql-6649

    I just want you to be able to get into your admin dashbaord and then you can reconfigure the security plugin later.

    Thread Starter appleisle

    (@appleisle)

    10 years, 4 months ago

    Mra13, thanks again for a prompt reply.
    How would I (as you suggest) temporarily disable the security plugin?
    I have No idea how to gain access, other than via FTP to perhaps remove the plugin, but not sure what to remove or if that would work?

    Plugin Contributor wpsolutions

    (@wpsolutions)

    10 years, 4 months ago

    You can deactivate the plugin using FTP or phpmyadmin.

    Watch the following video (fast forward to 10:01 to see the instructions about how to deactivate using FTP):

    http://www.tipsandtricks-hq.com/deactivate-wordpress-plugins-without-logging-into-wp-admin-video-tutorial-4375

    Thread Starter appleisle

    (@appleisle)

    10 years, 4 months ago

    Thanks for your help overnight for me. Now morning so I will set too reviewing the video & your advice. TA

    Thread Starter appleisle

    (@appleisle)

    10 years, 4 months ago

    Yippie, all recovered and with the latest upgrade to the plugin; All in One WP Security & Firewall I’m looking forward to a stable site!! see here http://www.mezethes.com.au

    Many thanks to the Author for the support, Tips & Tricks is such a great site, your videos so concise and easy to understand. Exemplifies what open source software and the creators are all about, Well Done.

    Cheers Dennis

Viewing 11 replies - 1 through 11 (of 11 total)
  • The topic ‘Login is blocked, site had been hacked. Php Myadmin changes blocked.’ is closed to new replies.