Daniel Convissor
Forum Replies Created
-
Forum: Plugins
In reply to: [Login Security Solution] Stops attacks … AND YOU!0.36.0 is out the door!
Forum: Plugins
In reply to: [Login Security Solution] Stops attacks … AND YOU!@pumaonholyjade: Come on. I’ve got two kids, a full time job, taxes to file, etc, etc. Expectations of support need to keep things like that in mind when using software that is maintained on a purely volunteer basis. In that scheme of things, I’m very responsive, eventually getting to all support threads. –Dan
Forum: Plugins
In reply to: [Login Security Solution] Stops attacks … AND YOU!Hi Jeff:
I misremembered. I thought the password reset screen acted the same way as the profile edit page does. You’re right, the password reset page gives a generic error message. I set it up that way because there’s a HTTP redirect involved, so when initially writing the program last year I took that shortcut. Sorry for the misspeaking and for the lousy user experience.
BUT!… Your inquiry inspired me to change how the password validation error messaging works. Now I pass specific error message keys to the HTTP redirect and then use those keys to generate specific error messages on the password reset page. This change has been pushed to the Github repository.
You can get the latest code there now, or you can wait for the next release, 0.36.0, from the WordPress plugins repository when I get a chance to push it up there in the next day or so.
Thanks,
–Dan
Forum: Plugins
In reply to: [Login Security Solution] Stops attacks … AND YOU!Hi Jeff:
When trying to enter a new password, can you please specify the _exact_ error messages you were given? Login Security Solution explains which rule has not been met.
Something seems wrong. For example, passwords of 20 or more characters are exempt from the complexity rules. Perhaps there’s another plugin conflicting?
Thanks,
–Dan
Forum: Plugins
In reply to: [Login Security Solution] Unable To Login…LSS doesn’t do CAPTCHA. Perhaps there’s there’s a weired interaction between LSS and another plugin that does? Can you disable your CAPTCHA plugin and see what happens?
Hi Dan:
Weird. I’ll do some testing on my end when I get a chance and see what comes up, no promises as to when, sorry.
It’d be great you get a chance to put some debugging statements around the various
login_urlfilters and see what’s going on in your environment.Thanks,
–Dan
Forum: Plugins
In reply to: [Login Security Solution] Login password required twice before workingHeya: It’s really weird. Perhaps a weird interaction between LSS and some other plugins you have. The only way to figure out what’s going on issit down and debug the situation. Good luck. –Dan
Forum: Plugins
In reply to: [Login Security Solution] Feature suggestion and delay vs block rehashAs mentioned in other threads, think about how many requests per second your server can handle. Hundreds, perhaps thousands. But with Login Security Solution, those bots can only get off a few requests per minute.
Forum: Plugins
In reply to: [Login Security Solution] Let users choose Own passwordPlease provide more specifics.
Forum: Plugins
In reply to: [Login Security Solution] Blackberry App login failures not loggedGood catch. Thank you for letting me know about that. I looked into it when you wrote, but haven’t had a moment to reply. I have some ideas about how to fix it and will incorporate it into the next release.
Forum: Plugins
In reply to: [Login Security Solution] wp-login.php gives error after mistyped/bad loginHi:
Can you please edit
wp-includes/wp-db.php, go to thequery()method, and right above themysql_query()call add the following snippet. Adjust the resulting file name to be whatever you want (I set it to/tmp/lss.log).
if (!$this->dbh) {
file_put_contents('/tmp/lss.log',
var_export(debug_backtrace(DEBUG_BACKTRACE_IGNORE_ARGS), true));
}
Then make a login attempt to your site using a bad user name and password. Send me the results at danielc@analysisandsolutions.com.
Thanks.
Forum: Plugins
In reply to: [Login Security Solution] Change all passwords reloads – nothing happensYes. It doesn’t change the password for the person doing the changing because I didn’t want to boot them out in the middle of their work. The messaging does tell them that they need to change their password too, though perhaps it’s not clear enough.
Forum: Plugins
In reply to: [Login Security Solution] Back to BasicsHi: You don’t insert the code. It just works. Follow the installation instructions. http://wordpress.org/extend/plugins/login-security-solution/installation/
Forum: Plugins
In reply to: [Login Security Solution] Full IP addressNo, sorry.
Forum: Plugins
In reply to: [Login Security Solution] Feature SuggestionHi David:
Sure, I’d love to see the reporting code. Thanks,
–Dan