beardedginger

Hi,

If you are unable to log in you can add the code below into the wp-config.php file anywhere as long as it is between the first line ( <?php ) and the line that says / That’s all, stop editing. Happy Blogging / to temporarily disable all features so you can log in.

define('ITSEC_DISABLE_MODULES', true);

Once you are logged back in go to Security> Settings> Local Brute Force Detection and check how stringent the lockout settings are.

Thanks,

Matt

Hi,

I am sorry to hear about the confusion. The link below is an article describing more about lockouts below.

https://ithemes.com/ithemes-security-pro-lockouts-guide/

Thanks,

Matt

Hi,

The suggestion above could certainly be the cause of a huge file change detection and you should look through the logs to see the last time the logs ran. If the changes made are from an update there is no cause for concern.

Each file that changes at all is logged. For my own sites, I scan the list and look for anything out of place; I expect changes in backups, caching, updated plugins, etc.

If I see a change for something that I personally didn’t update or have set to run automatically, that’s when I look at the file and start tracking down issues.

If your malware scan is coming up clear, that is another good indication that the changes you are seeing are part of the routine backgrounds in a WordPress site

You can exclude files and directories in the File Change Detection settings on the Settings page. The general rule is it’s okay to exclude ones that you know are going to be regularly updating. Backup and cache files are a perfect example of this. Doing so will calm a lot of the extra noise.

The plugin will only inform you of changes made (if modules are enabled) but it does not have the capability to inform you of any issues in regards to those changes.

Hi,

The Hide Backend module will allow you to redirect any user attempting to access the Dashboard Login to a ‘Page Not Found’ but there is not a way to redirect to the home page via a login slug. If you have a timeframe that you would prefer the dashboard to be inaccessible you can use the Away Mode feature, that module will allow you to disable access to the WordPress Dashboard on a schedule forcing users to the homepage.

Thanks,

Matt

Hi,

Thank you for bringing this to our attention. I have filed a report with the developers concerning this issue.

Thanks,

Matt

Hi,

I just wanted to let you know this is a known issue and will be fixed in the next release.

Thanks,

Matt

Hi,

Thank you for bringing this to our attention! I will speak with the developers about this issue and get back to you when I have more information.

Thanks,

Matt

Hi,

If you set the days to keep logs to 1, does it remove the log entries after a 24 hour period?

Thanks,

Matt