Daniel Convissor

Hi Dibbit:

The scenario you’re talking about only happens if the “attacker” is coming from the same IP address as you. This can happen for a few reasons:

* You’re the “attacker” (due to testing, forgetting your password, etc)
* Your web server is behind a proxy
* You’ve got malware on your computer
* You’re on some network (university, corporate, etc) that says you and the “attacker” are coming from the same IP. The “attacker” could be some other user(s) forgetting their passwords.

The way to help figure out what’s happening is to examine the <prefix>login_security_solution_fail table.

–Dan

Hi E:

Thanks for the info! I installed jetpack. Doesn’t seem to be the problem. I added some extra log calls to possibly help sort out what’s going on. Can you please do the following:

* Download the main plugin file from GitHub (https://raw.github.com/convissor/login-security-solution/master/login-security-solution.php)
* Open login-security-solution.php in your favorite text editor
* Go to the log() function and change /var/log/ to a path where your web server has the ability to write files.
* Remove the comments in front of the log() calls (by doing a search and replace of ### with nothing).
* Upload the file to my plugin’s directory in your plugins directory
* Use your site until it you replicate the behavior
* Send the output of file to me at danielc@analysisandsolutions.com

Thanks.

Hi Frisco:

You’re right. Login Security Solution doesn’t handle DDOS attacks and can be used as a vector to implement such attacks.

Naturally, someone determined to DDOS a site will do it regardless of how many processes the server can run. The appropriate tools and procedures for dealing with them involve the server and networking layers.

–Dan

Dan: So glad you figured out what’s going on. Sad to see that simple bug fix has been lingering so long. –Dan

Oh, on the computers that you’re having problems on, here are some questions:

* Does it happen only when you go to the login page, type in your user name and password then click “Log In?”
* Or is it that it happens just by viewing the login page?
* Does it happen when you access pages other than the login page?
* If either of those last two questions are true, what happens if you go into your web browser’s settings and delete the cookies for the site in question?

Thanks,

–Dan

As mentioned in the description, the plugin tracks IP, user name and password. If any of those three match earlier failed logins, we slow them down.

Hi Oudin:

The main “Description” page for Login Security Solution lays out what the plugin does and provides comparisons to other plugins. The pages for WP Login Security 2 and WP Login Security explain what they do.

If you have specific question, please reopen this thread to ask it.

Thanks,

–Dan