aporter

Hi,

Sorry about the inconvenience caused.

This was likely caused by a feature that wasn’t working correctly before and now that it’s been fixed and moved to the PHP based firewall it caused a lockout.

Glad you was able to resolve the issue your self.

If theres anything else you need just let me know.

Best Wishes,

Ashley

Hi,

You can set the max amount of 404 hits in a time period for example you can allow up to 5 404 events in a 10 minute window.

You can also instantly permanent ban an IP if they access a URL that contains a string (that you have set).

Theres currently no notifications on 404 block events, but a list of all the blocks can be found in the plugin. A general notification system in the plugin is something that is being worked on.

Anything that matches the smart 404 rules will result in a permanent ban, theres another section in the plugin for monitoring 404s that allow you to issue temporary bans.

There is a whitelist for IPs.

Best Wishes,

Ashley

Hi,

I’m glad it’s working for you now.

I’ll try and reproduce this upgrade problem.

If you forget your word it can now be found in:

wp-content/uploads/aios/firewall-rules/settings.php

Best Wishes,

Ashley

Hi,

Are you on the latest version of AIOS 5.1.1?

Yesterdays update changed how the brute force cookie protection works, it now runs via our PHP based firewall.

I’m unable to reproduce the above, once I change the secret word the previous cookies are invalid.

Have you got any other features turned on in the plugin to block these attempts?

Best Wishes,

Ashley

Hi,

Navigate to:

WP-Security -> Brute Force -> Login CAPTCHA

Then enable the checkbox for Google CAPTCHA.

You will need a site key and secret from Google:

https://www.google.com/recaptcha/about/

Once you’ve added the key and secret, save your settings and Google CAPTCHA should be active.

Let me know if theres any problems.

Best Wishes,

Ashley

Hi,

Can you temporarily disable AIOS, then check if the math captcha is still there?

It maybe coming from another plugin if it’s not active in AIOS.

Best Wishes,

Ashley

Hi,

Have you recently updated AIOS ?

It’s possible you have a feature turned on that wasn’t working in the past and now that we have fixed it, the feature is actually locking you out.

Could you try adding this to your wp-config.php and seeing if it resolves the issue:

define(‘AIOS_DISABLE_LOGIN_WHITELIST’, true);

If not could you send us a copy of your .htaccess file so we can inspect what rules you have active and what maybe causing the problem?

You can send your .htaccess via our private premium support, just add “00000” for the order number and add a link to this support topic:

https://aiosplugin.com/premium-support/

Best Wishes,

Ashley