• Resolved MikeHarrison

    (@mikeharrison)


    After repeated 403 errors this morning, I confirmed the site is still online to visitors, but I cannot administer it.

    Next, via ftp, I tried disabling BPS, but that didn’t have any effect.

    Then I replaced the newly created (after updating) root htaccess file to the previous one. Doing that seems to have stopped the 403 errors, but now I receive a “too many redirects” error. I still can’t access wp-login.php.

    What should I try next?

    Thanks.

    https://wordpress.org/plugins/bulletproof-security/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author AITpro

    (@aitpro)

    Sounds like a combination of issues/problems. ie the broken cPanel HotLink Protection tool problem and/or a combination of other issues/problems. ie may or may not be directly related to BPS and may be related to another plugin that you have installed. ie you have added custom .htaccess code to BPS Custom Code that is not valid or something like your IP address has changed and is no longer whitelisted in that custom .htaccess code.
    http://wordpress.org/support/topic/plugin-bulletproof-security-broken-cpanel-hotlink-tool-404-errors-unable-to-edit-htaccess-files?replies=9

    Do these steps:
    Delete your root .htaccess file
    Rename the /bulletproof-security plugin folder
    Can you login to your site now?

    If so, then check Custom Code for any custom .htaccess code that needs to be changed/corrected before activating Root folder BulletProof Mode again.

    If not, are you using any other plugins that have Login Security? If so, you will also need to rename the plugin’s folder for troubleshooting. You can only use 1 Login Security plugin or plugin feature at a time, otherwise they will conflict or cancel each other out.

    Plugin Author AITpro

    (@aitpro)

    I see from your thread/posts history that you have or had Better WP Security installed. There is currently a login problem with that plugin. see the Better WP Security plugin support forum if you have that plugin installed.

    Thread Starter MikeHarrison

    (@mikeharrison)

    SOLVED!

    Yes, at one time I had been using Better WP Security, as well, but your BPS made it unnecessary, so I no longer use it. BPS is the only security plugin I use now.

    I followed your advice and was able to gain access. Very glad you mentioned Custom Code. We had added some code to prevent brute force logins by allowing access only to the first three quadrants of what had been my ip address. My ip address changed in the last day or two and the Custom Code worked by denying me access to the login page.

    I updated the code and now all is well.

    Many thanks for your quick and helpful response!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Updated BPS yesterday, wp-login.php now returns a 403 error’ is closed to new replies.