Forums

[resolved] warning about WP Security Scan (12 posts)

  1. folgerj
    Member
    Posted 4 years ago #

    I just ran the WP Security Scan and my mistake... I didn't back up first. It killed my blog by having me rename my wp-blog to jp-blog. I'm not sure how to get a years worth of blogging back...
    Talk about a bad evening...
    Vista

  2. Michael Torbert
    WordPress Virtuoso
    Posted 4 years ago #

    The plugin does not tell you to do this. Posting in 3 separate threads will not undo the mistake you made.

  3. dubaidan2
    Member
    Posted 4 years ago #

    I also ran wp-security-scan. It recommended changing my login name from 'admin' to something else. I followed the instructions on the help link and made the changes in phpmyadmin.

    Now I am unable to log into my blog and I get redirected as follows:
    /wp-login.php?redirect_to=%2Fdan%2Fwp-admin%2F

    Before you ask... Yes I am trying the new login name. I tried changing the name back to admin, but still no luck. Hope someone can help me get back into my blog.
    Thanks

  4. folgerj
    Member
    Posted 4 years ago #

    I'm at about 50% on my blog not.. All my photos are refusing to align and I have a post for Alex about it.. I have to track that down.
    Go straight to the writer of this wonderful plugin and ask him to help. I believe it's the gentleman above but I can't be sure. Either way this is a very very powerful plugin that makes some serious changes to your security arrangement.
    If I was the owner of the plugin I would create a routine that allows you to reverse what it just did and zero it out. It appears that it only happens to a few of us uninitiated fools who aren't afraid to mess with the basic settings of our server's files.. And we should be.
    I wish I could offer more help but this question will take a real power user to fix.
    J

  5. Michael Torbert
    WordPress Virtuoso
    Posted 4 years ago #

    folgerj,

    Stop saying that the plugin changes your files. It neither changes a single file on your server, nor tells you to.
    As we established earlier, you did that on your own.

  6. dubaidan2
    Member
    Posted 4 years ago #

    In my case the plug-in did not make the change, but it recommends that you connect to phpmyadmin and change the userlogin from 'admin' to a more non-descript name. In doing this, I have lost the ability to log in as described above.

    Does anyone know what are the consequences of changes the admin login name from phpmyadmin when using WP2.5

  7. Ivovic
    Member
    Posted 4 years ago #

    well, I do that myself, all the time, dub... it's exactly the right thing to do, if you do it right.

    have you tried your *OLD* username? - there's a chance you didn't save your changes in phpMyAdmin.

  8. Michael Torbert
    WordPress Virtuoso
    Posted 4 years ago #

    Ivovi,

    You mean someone not doing things correctly and messing things up really isn't caused by a plugin?

    For the record, Dubaidan2's issue has nothing to do with WP Security Scan. He followed the instructions on my website for changing the admin username to something other than admin. I certainly didn't come up with this, as anyone, like Ivovic, who's used WordPress for more than a day knows, this practice has been around for a long time.

    I just wanted to clear up that the trashing of WP Security Scan is not warranted here. In both cases, the problems were caused by the user doing something incorrectly, not by anything the plugin did.

  9. folgerj
    Member
    Posted 4 years ago #

    Ok it made the prefix change to the database tables Better? in an effort to secure them, better?
    I made stupid changes to my server files in an effort to get it to talk to the database tables.. I have renamed all the "tables" back to the way they were before I hit "rename the prefix".
    I don't know what happened when I had it rename my prefix.. at the time it sounded like a good idea so I let the plugin do it. I'm not going to do it again that's all.
    Most of the bloggers out there 80-90% do not have a tech background which is why when these plugins say it's a good idea they go with it until they get bit in the rear end.. Yes by not knowing what it's going to do. (like me) We trust that it will make our blogs better and more secure. This is why these forums are busier than a one armed paper hanger... people can't get themselves fixed when something happens.
    I got unlucky and maybe another of my plugins conflicted with your plugin and caused the problem... I don't know and don't care. I just won't run any plugin that affects my database if I can help it.. Not your fault it's mine... somehow...

  10. Ivovic
    Member
    Posted 4 years ago #

    [self-mod]

    Dirty Harry said it well - "A man's got to know his limitations" you can't reasonably expect a plugin to deduce your level of competence for you.

  11. folgerj
    Member
    Posted 4 years ago #

    Very true and I will be the first to admit that I have no php knowledge. I am a quick study and can usually dig myself out of a hole once I've dug it for myself. But we hope that the programmers take into consideration that most bloggers while technically competent to run a blog or web design we are not programmers and we hope that they write these things to the lowest common denominator.
    I may have bad mouthed the Marine's plugin and I apologize but that's the way of users..
    Case closed unless someone really needs to beat this horse further. Maybe someone can help Dub up there since I would change my admin account but since it sounds like it's a bad Idea, I guess I'll leave it alone...
    Now I'll get back to the rest of my life...
    Chiao...

  12. Michael Torbert
    WordPress Virtuoso
    Posted 4 years ago #

    Folgerj,

    You don't need technical skills to use the plugin. All you have to do is click the button. As you've said, you made changes which messed up your blog.

    As for dubaidan2, Ivovic responded to his issue, which by the way, has nothing to do with my plugin, and is something that has been done by WordPress users for years.

    Making a mistake does not equal the plugin is broken. Of the two people with issues today, several times that just today have emailed me with praise for the plugin. That's out of hundreds who've downloaded the plugin in the last 24 hours.
    One would think that the forum or my inbox would have heard about it if the plugin were broken.

Topic Closed

This topic has been closed to new replies.

About this Topic