AIOWPS Login lockout

  • Resolved giovannifour

    (@giovannifour)


    1 year, 2 months ago

    Hi Dears,

    I use login lockout feature in AIOWPS without any problem. Today I have installed a new booking system plugin (Amelia Booking) that allow to create an Employee user without linking it to WP User (I don’t know if it is managed internally as a wp user ). The Employee login to a Panel Dashboard (If the employee is not linked to a WordPress user, they can’t log into the back-end off the site). Every time I log with the right credentials into Employee Panel I get a login lockout with an IP BAN.

    Can AIOWPS handle this situation?

    Thanks

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    1 year, 2 months ago

    Hi @giovannifour,

    Can you please cross check the audit log it should have a Failed login entry for it. That entry have the stack trace. If you can share that using https://pastebin.com/ I can check it.

    WP security > Dashboard > Audit logs

    Basically employee should be of type wp_users and when login authenticate being called.

    Regards

    Thread Starter giovannifour

    (@giovannifour)

    1 year, 2 months ago

    Hi Dear,

    https://pastebin.com/N1YfkBiB

    Thanks

    Thread Starter giovannifour

    (@giovannifour)

    1 year, 2 months ago

    disabling

    Instantly lockout invalid usernames in WP security > User security > Login lockout

    does not ban the IP … But that’s not what I want…

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    1 year, 2 months ago

    Hi @giovannifour,

    When user try login and it has failed login with “invalid_username” user code it will lockout invalid username.

    Can you please raise a support ticket with ameliabooking plugin and check.

    ameliabooking/src/Infrastructure/WP/UserService/UserService.php the file wp_authenticate being called is making invalid username why ?

    Regards

    Thread Starter giovannifour

    (@giovannifour)

    1 year, 1 month ago

    Hi Dear

    thanks for your support and sorry for my late answer.

    Amelia support tell me that I can link the employees to a WordPress user account with the Amelia Employee role.

    This way, AIOS will recognize them as valid users and avoid the IP bans.

    I actually don’t agree with this workaround but for now it’s enough for me.

    Thanks

    Plugin Support hjogiupdraftplus

    (@hjogiupdraftplus)

    1 year, 1 month ago

    Hi @giovannifour,

    Ok, Glad to know you have workaround to solve the issue.

    Would you mind writing a quick five-star review on wordpress.org?

    https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/reviews/#new-post

    Reviews also help others to make confident decisions about our plugin.

    Regards

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘AIOWPS Login lockout’ is closed to new replies.