Does the plugin really work ?

  • Resolved John Mulder

    (@john-mulder)


    4 years ago

    Hi,

    I use your plugin as an extra safety, i use the “Limit Login Attempts Reloaded” plugin to prevent malicious logins.
    This plugin still reports attempts of login attempts, after activiating your plugin ?

    When testing myself, i am directed to a 404 page, just like i set it up.

    Any ideas ?

    Best,
    John

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support MaximeWPS

    (@seinomedia)

    4 years ago

    Hello,

    Thanks for using WPS Hide Login.

    Are you saying you’re redirected to 404 when you try to reach customized login page ?

    Thread Starter John Mulder

    (@john-mulder)

    4 years ago

    Hi,

    When i enter http://www.mysite.com/wp-admin/ i am redirected to http://www.mysite.com/404/
    Which seems the right action if i understand correctly. So i think everything is installed OK. But i still get messages from “Limit Login Attempts Reloaded” that from some ip there has been an attempt to log in to my site.
    The customized login page is not easy to guess. I used the same customized login page when i had the “perfmatters” plugin active and changed the URL there. This did not make “Limit Login Attempts Reloaded” report attempts. I deactivated perfmatters and looked for another way to hide the default login page.

    Best,
    John

    Thread Starter John Mulder

    (@john-mulder)

    4 years ago

    Hi,

    I checked the log of “Limit Login Attempts Reloaded” to see that all the attempts reported were through gateway “wp_xmlrpc”.
    I guess this bypasses your plugin ? I disabled xmlrpc, see what happens next.

    Best,
    John

    Plugin Support MaximeWPS

    (@seinomedia)

    4 years ago

    Hello,

    There are many xml-rpc attacks nowadays. Don’t activate xml-rpc function to protect your site as far as possible against this kind of attack.

    Unfortunately, a sophiticated xml-rpc attack can bypass any protection around login slug. That’s why it’s important to be hosted in a well securised server.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Does the plugin really work ?’ is closed to new replies.