Hi,
So these are created if you use the basic math captcha.
A pair will be created when someone attempts to login and currently they are removed on successful login.
These left overs are then cleaned on a daily cron (so you should also check that your cron is working and running)
So it’s likely you are getting a lot of failed login attempts and they are being blocked by the captcha but it’s leaving a mess in the database.
You should check the audit log and see where the failed logins are coming from and how you can block them to prevent this.
Best Wishes,
Ashley
Hi Ashley
Thank you for response
Can u tell me cron hook name and action pls, so I can check it…
Here we have list of AIOS cron hooks and actions:
action_scheduler_run_queue => ActionScheduler_QueueRunner->run() => Every minute
aios_15_minutes_cron_event => AIOWPSecurity_Cronjob_Handler->aios_15_minutes_cron_event() => Every 15 minutes
aiowps_clean_old_events => AIOWPSecurity_Audit_Event_Handler->delete_old_events() => Daily
aiowps_daily_cron_event => AIOWPSecurity_Cronjob_Handler->aiowps_daily_cron_event_handler() => Daily
aiowps_hourly_cron_event => AIOWPSecurity_Cronjob_Handler->aiowps_hourly_cron_event_handler() => Hourly
And all of theme are working and running.
And I checked the audit log failed logins, failed logins are no more than 4-5 times a week.
So is it safe that I start removing pairs of “aiowps_captcha_string_info_xxxxxx” and “aiowps_captcha_string_info_time_xxxxxx” from wp_options table? and likely do u have or know mysql query for removing them?
Hi,
The cron that is supposed to clean them is:
aiowps_daily_cron_event
Try manually running that and see if it cleans them up, if it doesn’t can you check your PHP error logs for any errors.
Yes it’s safe to remove them.
Best Wishes,
Ashley
Unfortunately, I deleted them all by querying directly in MySQL. the query is:
DELETE FROM wp_options where option_name like 'aiowps_captcha_string_info%' LIMIT 200000 ;
And it was about 4 million records!
I’ll monitoring this situation and aiowps_daily_cron_event and inform here…
As I said before, I checked the condition of the aiowps_daily_cron_event.
aiowps_daily_cron_event is enabled and running.
But we are accumulating “aiowps_captcha_string_info_time_xxxxxx” records again in the table.
I check the audit log too, and there is no failed login attempts.
You said it before “Try manually running that and see if it cleans them up, if it doesn’t can you check your PHP error logs for any errors.” can u guide me pls, how to manually running aiowps_daily_cron_event and where to check for PHP error logs?
Hi,
You can manually run the cron by installing a plugin like wp-crontrol.
Your PHP error logs you may need to check with your hosts or you could enable WP_DEBUG by adding the following to your wp-config.php:
define(‘WP_DEBUG’, true);
define(‘WP_DEBUG_LOG’, true);
Then your log file should be found at:
wp-content/debug.log
Best Wishes,
Ashley
