• frankdrake60

    (@frankdrake60)


    Hi there,

    I installed without problems your Plugin. After changing the USERNAME (via phpMyAdmin) and password, using the WP recovery tool, I no longer access the back end of the site. I am sure that I am inserting right data.

    Any suggestion about that?
    Thanks
    Frank

    PS: i already tried to deactivate the Plugin via FTP but nothing changes.

    https://wordpress.org/plugins/better-wp-security/

Viewing 3 replies - 1 through 3 (of 3 total)
  • lsgXtremes

    (@lsgxtremes)

    Hello,

    I changed the password of my admin account, after which, it said that “medium” level password is not accepted.

    So I went to the settings and disabled “strong” level password required for admin.

    And then came back to my admin profile and changed the password.

    Then went back to the better security settings and enabled “strong” password required for admin.

    After that the website just would have redirect loops and the website would not load.

    I went to the cpanel>file manager and moved the plugin in order to isolate & identify if the redirect loop is due to it. That worked, the website came back on immediately. But I don’t know if I have the security cover of better security now.

    But now if I move the better security plugin back again under plugins directory, it goes in endless redirect loop and thats it.

    To get the site working I have to move the better security plugin directory to outside the plugins directory.

    Also, I tried re-installing the plugin, but it strangely gives me an error that a plugin with that directory name already exists, even after having moved it via cpanel>file manager to outside the plugins directory.

    What do I do and how do I come of this messy situation?

    Thanks in advance.

    Regards

    Thread Starter frankdrake60

    (@frankdrake60)

    I just noticed, looking at the database table under the folder _itsec_log, the username that I set is recognized as a brute force attack.

    How can I get around this problem?

    Regards

    iThemes Support

    (@ithemes-support)

    Hi,

    @frankdrake60 – It sounds like your username is being used in a brute force attack. I’d suggest creating a new user and transferring all content to it. Then you can delete the old one. If you’re unable to access your site you can deactivate the plugin via FTP by renaming it’s directory. Then you can log in and make the changes and rename it back to reactivate it when you’re finished.

    @lsgxtremes – You may have a couple different things going on here. Where is the redirect happening and where is it taking you?

    Thanks,

    Gerroald

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘I can't get in after user and password change’ is closed to new replies.