[Plugin: Better WP Security] Error Messages

Hi,

First off, great plugin! LOADED with features.

However, the same thing is happening to me. I *was* using limit login attempts, and the pink area displayed above the login form would say “ERROR: Incorrect username or password. n attempts remaining”. I expected something similar from Better WP security, but all that is displayed is the pink area (no text).

Then, after the configured number of failed login attempts, you get a blank page with the word “error” at the top left. You also can’t access other pages on the site that normally would not require authentication / authorization – i.e. you just get the same blank “error” page. This is actually a neat feature, but ideally I’d like to be able to turn it on or off – i.e. just prevent additional login attempts – not lock out the entire site.. like limit login attempts would do.

Anyway…. My “asks” for Chris are:

1). Add text to the pink area that is displayed above the login form. “ERROR: Incorrect username or password. n attempts remaining”.

2). Allow for the entire site to be locked out (i.e. the current “error” page behaviour), or just not allow additional login attempts (the “limit login attempts” flavour of doing things).

Thanks! And if you need anything from me to help get this done, just let me know.

Regards,
Mike.

Hello,
I am having the same problem here, in more than one website using Better WP Security plugin. At the moment I have just added this code in the function.php of my theme

<?php
add_filter(‘login_errors’,’login_error_message’);

function login_error_message($error){
//check if that’s the error you are looking for
$pos = strpos($error, ‘incorrect’);
if ($pos === false) {
//its the right error so you can overwrite it
$error = “The information is wrong, if you don’t remember your login details click the Lost your password link below”;
}
return $error;
}
?>

This adds a message when people put wrong details to login, but it doesn’t really sort out the problem. Hope someone can help. Thanks

There is a setting to eable/disable showing of login error messages which you can toggle on/off:

Go to the tab Tweaks -> Other tweaks -> Remove WordPress Login Error Messages
Untick the box to regain the default WP behaviour for showing the login error messages.

This setting does not affect the login protection, i.e. if someone tries to login with the wrong credentials, they will still be locked out after three tries (depending on the settings you have in the Login tab)