LoicTheAztec
Forum Replies Created
-
Hi 🙂
This feature is very sensitive (and dangerous for me). Otherwise, all other features are ok, and this plugin is a must have.look at this thread : How do I rename the folder back to “wp-content?
L..
Hello,
Don’t care about SSL warning! i have the same issue, but ssl works for my back-end.For your front end, if you want people to access only in https mode, you have to put it in wordpress general settings the correct url “https://…”,
You have to add a rewrite rule on your .htaccess file for http => https, something like this :RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteRule ^(.*)$ https://www.example.com/$1 [R,L]Try to find the correct script searching in google “htaccess https redirect“
hope it will work for you
L..Good ! 🙂
@esmi
Hi,
I am relatively new on wordpress forums, even i use wordpress from a long time.
So i am learning rules and habits…
I have been advice recently by a moderator to do not make cross threadind links… But it was about my own threads. So i have extend this advice too much.
Then i will do what you suggest me with care. 🙂
Thanks
LHello OfficialMagicPgCom,
I am just a user like you, trying to help.
have you tried to cleanup like i suggest in this thread:
Continuous LOCKOUTS cannot do anything!!!! Backup problems too!!
Hope it will help.Have you updated to version 4.2.8 ?
May be you can report this bug with more details in the link that you can find in the third sticky thread on this support forum.@Cheryl-K
like i was telling nadworks, may be you have to clean up some files… have a look at this thread “Continuous LOCKOUTS cannot do anything!!!! Backup problems too!!“.
Let us know with more details…best regards.
L..
@nadworks
Look at this thread named “How to RESET iThemes Security plugin to fix issues“. May be you have to clean your database, .htaccess and wp-config.php files from all entries made by this plugin (backup before your database in case…).
I am running multiple web sites with different configurations, and i don’t have this kind of problem now. I think that some old settings somewhere are in conflict with new ones…
Try it on one web site, and tell us.
L..@GreatKeelyOne
May be you have miss the check-box “Write to Files” on settings section… don’t you?
Then click on any “Save All Changes” button located down. You are done…@Chris Wiegman
First thing, thanks 🙂
How contacting you directly? using the link on third sticky thread to report bugs or there is another way?
L..With 4.2.8 update of iThemes Security, the bug still exist and wildcard character still not working in IP for:
• “Global settings” section =>”Lockout White List” field
• “Banned users” section => “Ban Hosts” fieldTo enable range of IPs, you can add to your .htaccess file IPs using the wildcard character (*) in this form:
# BEGIN PERSONNAL SETTINGS # ===> RESTRICT ACCESS [BLOCKING] - BLACK LISTING RewriteEngine On Order allow,deny # Using 1 wildcard character SetEnvIF REMOTE_ADDR "^###\.###\.###\.*$" DenyAccess SetEnvIF X-FORWARDED-FOR "^###\.###\.###\.*$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^###\.###\.###\.*$" DenyAccess # Using 2 wildcard character SetEnvIF REMOTE_ADDR "^###\.###\.*\.*$" DenyAccess SetEnvIF X-FORWARDED-FOR "^###\.###\.*\.*$" DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP "^###\.###\.*\.*$" DenyAccess # ===> ALLOW ACCESS [UNBLOCKING] - WHITE LISTING # Using 1 wildcard character SetEnvIF REMOTE_ADDR "^###\.###\.###\.*$" AllowAccess SetEnvIF X-FORWARDED-FOR "^###\.###\.###\.*$" AllowAccess SetEnvIF X-CLUSTER-CLIENT-IP "^###\.###\.###\.*$" AllowAccess # Using 2 wildcard character SetEnvIF REMOTE_ADDR "^###\.###\.*\.*$" AllowAccess SetEnvIF X-FORWARDED-FOR "^###\.###\.*\.*$" AllowAccess SetEnvIF X-CLUSTER-CLIENT-IP "^###\.###\.*\.*$" AllowAccess Deny from env=DenyAccess Allow from env=AllowAccess Allow from all # END PERSONNAL SETTINGShere “###” are numbers from 0 to 255 and all the lines begining with “#…” are comments. For each rage of Ip you have to add a group of:
SetEnvIF REMOTE_ADDR "^###\.###\.###\.*$" SetEnvIF X-FORWARDED-FOR "^###\.###\.###\.*$" SetEnvIF X-CLUSTER-CLIENT-IP "^###\.###\.###\.*$"…adding at the end “DenyAccess” to Black list or “AllowAccess” to White list.
Like this you can allow or block range of IPs to stop hacking attempts from some countries (like China, Russsia, Ukraine…)
I hope this feature will work in next iThemes Security update.
L..With the new updated version 4.2.8 this issue is corrected. have a look at this thread:
[resolved] My admin account getting lockedout. The author of the plugin confirm it.
May be you can change this thread to resolved…The author of the pluggin has just confirm that the problem with lockout is resolved, and white list feature is working in the new update 4.2.8… Have a look at this thread :
[resolved] My admin account getting lockedout 🙂Thanks Chris, good news
Sorry the white listing feature is working, have a look to this thread:
“My admin account getting lockedout”
Chris Wiegman the author of this plugin confirm it works on 4.2.8 update
On next update he will correct the display of “Brute Force Protection” section showing “• Is this computer white-listed:”.
Thanks to Chris 🙂I forget, with phpMyAdmin go in general table named “xxx_options”, in this table search with care in “option_name” column for all the entries beginning by “itsec_” and delete them.
You can make a direct query :
`
SELECT *
FROM <code>xxx_options</code>
WHERE <code>option_name</code> LIKE ‘itsec_%’
LIMIT 0 , 30
`(xxx is to replace with your table prefix)
Pues espero que funcione esto
L..PS: The autor of the plugin just confirmed that the white list feature is now working in the new update 4.2.8, and “will no longer stop the locked out user from logging in on a locked out host”. Have a look at this thread “[resolved] My admin account getting lockedout“.
White listing still not working with 4.2.8 update 🙁