Česlav Przywara

Hi,

If you activate “Prevent Hotlinks” feature under Firewall menu, your media files should be protected from direct access.

Greets,
Česlav

Yes, SSL certificate is unrelated to what AIOWPSF offers (and any other security plugin for that matter).

By having SSL enabled on a site, you ensure that communication between your webserver and its visitors is encrypted and no one can eavesdrop on it. But SSL is not only crucial to privacy, it also improves security: your admin password is no longer sent as plain text when you log in to your WordPress back-end etc.

Hi,

send_unlock_request_email .. both subject and body .. is there a way to do that without touching the plugin files?

Have a look on send_unlock_request_email() method in AIOWPSecurity_User_Login class (still the same file). Your only chance is to provide alternative plugin translation strings (ie. load your own translation file for the plugin with those strings adapted).

I would like to have the “submit email for unlocking request” form on a page of my own (like mydomain.com/unlock_request/ , not the wp login url …
is there a function that outputs that form, similar to what AIOWPSecurity_User_Login::insert_unlock_request_form() does for the button?

The form is rendered by other-includes/wp-security-unlock-request.php file, so you can try to include it. Note that this file renders entire HTML page, so you have to include it before WP sends any output. This is how it’s done in the plugin (see classes/wp-security-general-init-tasks.php file):

//For user unlock request feature
if(isset($_POST['aiowps_unlock_request']) || isset($_POST['aiowps_wp_submit_unlock_request'])){
    nocache_headers();
    remove_action('wp_head','head_addons',7);
    include_once(AIO_WP_SECURITY_PATH.'/other-includes/wp-security-unlock-request.php');
    exit();
}

Alternatively, you may try to code your alternative to this file (as a shortcode or whatever works for you) and just make sure to call the necessary static methods of the plugin. This should work too.

Greets,
Česlav

Hi,

It sounds to me like you have enabled manual approval of new registrations (see User Registration > Manual Approval). Note that you have to approve registrations done from back-end as well.

Cheers,
Česlav

Hi,

Check the classes/wp-security-user-login.php file.

There’s a AIOWPSecurity_User_Login::insert_unlock_request_form() method that will produce a “Request Unlock” button. One problem with this method is that it is not static (it safely could be though), so will you need AIOWPSecurity_User_Login instance to be able to hook it.

I don’t know Profile Builder Pro, so I’m not sure what’s the proper place to hook it. In the AIOWPSF plugin, it is hooked twice (see AIOWPSecurity_User_Login::aiowp_auth_login() method in the same file):

add_action('login_form', array(&$this, 'insert_unlock_request_form'));
add_action('woocommerce_login_form', array(&$this, 'insert_unlock_request_form'));

Hope this helps,
Česlav

Hi,

Try turning off 5G firewall. Btw. you should be using 6G only, unless you have specific reasons to use 5G.

Cheers,
Česlav

Hi,

Go to “Filesystem Security” > “PHP File Editing” and turn off the “Disable Ability To Edit PHP Files” feature. If it doesn’t help, probably some other plugin you have installed is causing your trouble.

Cheers,
Česlav

This is strange, I’m not aware of any feature of the plugin that could cause something like this.

Can you turn off all the other plugins and switch to a default theme temporarily to check, whether the issue is really caused by AIOWPSF itself? It looks more like a plugin/theme conflict to me.