Locked me out during initial setup

  • sloppysmusic

    (@sloppysmusic)


    1 week, 1 day ago

    Waste of an hour of my time.

    Installed, went through wizard chose via email otp ALL users instant no delay setup.

    At end it asked me to set up my admin 2fa.. I whitelisted address, then pressed I’m ready. Spinning logo then NOTHING. same screen. Tried 3 times then exited. Except now Im locked out of my dashboard until I press the ready button on a form that does NOTHING.

    Straight to cpanel – find that plugin INSTANT DELETE.

    Fixed issue I can access MY site again.

    YES I did search for this issue before deleting found nothing.

    Why is there zero documentation for when the most important of all 2fa functions (the actual setting up) fails completely BEFORE an email is even sent?

    Took a screenshot but no insert image here and not wasting time sharing it on my site.

    EDIT:
    Fluent SMTP found 3 failed sent emails. smpt host issue. But your dialog should have some way of detecting a failed SEND attempt so user can then roll back and UNDO 2fa settings so can then diagnose issue without being locked out/needing brute force delete approach.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter sloppysmusic

    (@sloppysmusic)

    1 week, 1 day ago

    Are there any other files or traces left by the plugin during the setup wizard I need to find and delete from my site? Deleted the plugin directory that’s all at present.

    Thread Starter sloppysmusic

    (@sloppysmusic)

    1 week, 1 day ago

    Actual error was caused by CloudFlare mail server proxy. Editing the DNS record fixed my email send issue so will try this again and report back.

    There still should be some way of the setup wizard reporting error after timeout. It clearly is not responding but instead of returning a fail condition it just leaves you and your site locked out.

    Would suggest either auto fail check and rollback of plugin activation OR asking admin (during initial wizard) if they want to temporarily disable the plugin during diagnosis. This should be possible even if NO error detected by plugin.

    The ONLY way I could access my email logs to find and fix the issue was to brute force delete the plugin from my hosting file manager. Messy

    Will report back if it works this time.

    Plugin Contributor robertabela

    (@robert681)

    1 week, 1 day ago

    I’m sorry to hear about your experience with WP 2FA.

    I’m glad you managed to identify and resolve the email delivery issue.

    Regarding the setup wizard not responding as expected; we do our best to detect potential issues and prevent users from being locked out of their websites. However, with so many different hosting environments and WordPress configurations, it’s not always possible to anticipate every scenario, which seems to be the case for you.

    We’d like to investigate why the wizard didn’t handle this situation better in your case. If you could contact us at support@melapress.com, our team would be happy to help you troubleshoot the issue and investigate what happened.

    Thank you again for your feedback as it helps us improve the plugin.

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this review.