WordPress.org

Ready to get started?Download WordPress

Forums

Anti-Malware (Get Off Malicious Scripts)
[resolved] Repair of Infected login file caused login failure (10 posts)

  1. Pewit
    Member
    Posted 1 year ago #

    I updated the definition file and then ran the scan with the result that the login was shown as being infected.

    I applied the fix and when I tried to login on another computer I received the message:
    "What do you think you're doing Dave" (Source: 2001 A Space Odyssey)

    Fortunately I was still logged in on my main computer and restored the "fixed" file from quarantine.

    I ran the scan again and received no warnings.

    http://wordpress.org/extend/plugins/gotmls/

  2. Eli
    Member
    Plugin Author

    Posted 1 year ago #

    Hey Paul,
    I'm glad to hear this, it confirms two fetures in my new release work (the login hardening and restoring from the quarantine). I would like more information about why your login attempt was blocked though. Did you try to login more than 3 times or did you post your login from a page other than the wp-login.php page?

    Mahalo for your feedback, Eli

  3. Pewit
    Member
    Posted 1 year ago #

    I was trying to login and so was a colleague with a different login - we both got a blank page to start with and then the 2001 message. I didn't try more than twice as I figured the cause and rushed to undo the fix.

    I was using the WP login page (mydomain/wp/wp-admin ) and I presume my colleague was too.

    Paul

  4. Eli
    Member
    Plugin Author

    Posted 1 year ago #

    Aloha Paul,
    Thanks for writing me back. I know it's working for you and so you may not be concerned anymore. However, this seems like unexpected behavior on the part of my plugin's security patch and so I am concerned and would like the opportunity to get to the bottom of this issue.

    Would you be willing to let me login as an Admin on this site and check it out further? If so you can email me directly with the credentials:
    eli at gotmls dot net

    Mahalo, Eli

  5. ekeenan
    Member
    Posted 1 year ago #

    Hi Eli,

    Just to say I'm having this problem, and it spread across all my sites as I ran the plugin from my host site (www.slanabhaile.com).

    When I try to login to a site I get "Warning: Cannot modify header information - headers already sent ....." or something similar

    Sometimes after attempting to login, the screen goes completely blank.

    After the third attempt I get the 'Dave' message !!!!

    Can you help, or advise. I cannot login it to reverse the plugin changes, so I'm a little lost.

    Lest anyone consider different, this has been a lifesaver of a plugin for me, its just got a bit overzealous.....

    Edan

  6. Eli
    Member
    Plugin Author

    Posted 1 year ago #

    Hi Edan,
    I have been up all night working on a fix for this and I've just about got it. I will upload my new version as soon as I'm sure it will work for everyone.

    In the mean time you can login to your site using a different browser or computer.

    Let me know if you cannot get in at all and I'll try for you.

    Thanks, Eli

  7. ekeenan
    Member
    Posted 1 year ago #

    Hi Eli,

    Thanks for getting back so quick. I'm having trouble logging on to any site. No luck on my own laptop, so I borrowed my nephews MAC, but when I login I either get a blank page, or a half page full of 'header errors'. I then used a different laptop (from different ip address), but with same results.

    If you can try, I'd appreciate it.

    Edan

  8. Eli
    Member
    Plugin Author

    Posted 1 year ago #

    I just released a plugin update that will fix this bug. Please make sure to download this new version 1.3.04.19 on all your sites.

    Thanks, Eli

  9. ekeenan
    Member
    Posted 1 year ago #

    Thanks Eli. Top notch as usual.

    Cheers,

    Edan

  10. Pewit
    Member
    Posted 1 year ago #

    Thanks very much Eli - the scan came up clean and I was able to use the Quick scan which has failed due to memory issues previously.

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic