• Resolved +ES

    (@evelynmsdesigngraphicscom)


    Hello+

    I have installed this plugin on a second site and I am not sure it is working – or if the Theme is the culprit this time… I installed & activated this plugin on the site on 05/21/18. Today I received a login attempt notice about a nefarious individual using the actual Username of one of the accounts. I have already changed everything for that. However, I need to verify that the culprit is the Theme and not this plugin.

    I have followed the instructions you gave here:

    https://wordpress.org/support/topic/someone-got-a-username-after-i-activated-this-plugin/

    And I do get the ‘forbidden – number in author name not allowed = 1′ message… So I think the plugin is doing its job, but would like additional confirmation.

    As in that thread the leak may be via the theme – however this site is using a different theme than the site in that thread. I am not sure how to verify if this theme is the issue and if you could provide instructions on how I can go about verifying that then I can do it myself (and not keep asking you) as I realize that if your plugin is working then this is not your problem. Or if you could give me some verbiage with appropriate key words to ask that theme author about this leak…? (whatever is easier for you)

    Thank you in advance for your time and efforts. +ES

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author fullworks

    (@fullworks)

    Hi, yes you are right in that it is the theme, and also supporting this free plugin isn’t really a viable thing to also give free consultancy 🙂

    However, it is your theme leaking data as it uses CSS to ‘hide’ the author info
    .blog_holder article .post_info {
    display: none !important;
    }

    But that doesn’t hide it from robots or anyone inspecting source code.

    Rather than hiding with css, the blog template / archive template should have those elements removed. This is what I can see ( obviously I have changed the id for your sake…. )

    <div class="post_info">
    <span class="time">Posted at 08:44h</span>
    in <a href="https://cosanusa.net/category/education/" rel="category tag">Education</a>							
    <span class="post_author">
    								by								<a itemprop="author" class="post_author_link" href="https://cosanusa.net/author/LOOKTHISWASTHEIDRIGHTHERE/">Administrator</a>
    							</span>									<span class="dots"><i class="fa fa-square"></i></span><a itemprop="url" class="post_comments" href="https://cosanusa.net/water-composition-of-the-human-body/#respond" target="_self">0 Comments</a>
    							                            						</div>
    • This reply was modified 7 years, 11 months ago by fullworks.
    • This reply was modified 7 years, 11 months ago by fullworks.
    Thread Starter +ES

    (@evelynmsdesigngraphicscom)

    Hello+

    Thank you so very much! I really appreciate your time and efforts on this issue! Thank you for the code snippet that the theme should fix – I will reach out to them on this!!

    Thank you for teaching me what to look for with other site themes. Now, that I know that what I am looking at (or experiencing) is a theme issue I will reach out to those authors first from now on (using verbiage/code you have provided here)…

    I have implemented this plugin as part of my routine for all new WP sites that I make….. Please consider this issue ‘resolved’.

    Have a great day!

    Plugin Author fullworks

    (@fullworks)

    Many thanks.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Please verify if Plugin is Working for me’ is closed to new replies.