Babak Fakhamzadeh
Forum Replies Created
-
Forum: Plugins
In reply to: [Trusona for WordPress] Unable to use Trusona on a new websiteConfirmed.
But… I just tried logging in with Trusona again, and now it’s working fine :/
Forum: Plugins
In reply to: [Trusona for WordPress] Unable to use Trusona on a new websiteThanks. But I don’t think I follow. I have four emails registered in the app, and one of them is associated with the account I try to log in with. I get a notification on my phone asking if I want to login, and when I respond affirmatively, the login redirects me back to my site, but then shows the error message.
Just posting to point out I am having similar issues. Specifically, I use the Trusona plugin requiring all users to login with Trusona’s 2FA feature. I also have turned off user registration.
So, there is no way that anyone can register on my site, nor can anyone try to login who is not already a user. And there is only one user, myself.
Yet, I get these notifications from Wordfence telling me that users have been locked out from trying to sign in.
I understand it’s possible to authenticate in other ways than using the login form, like via the REST API. But it is also my understanding that the REST API does not, out of the box, allow for account creation.So, how are these actors able to try and login, to have them banned by Wordfence?
I take your point that you do not own WordPress. Yet, classifying what I suspect are API-based methods for authentication as ‘backdoors’ seems unfair.
Anyway, thanks.
Well, what I’m asking is for Trusona to live up to its own setting called “Trusona only”. Nothing more, nothing less.
Forum: Plugins
In reply to: [Trusona for WordPress] Having to re-authorise Trusona app too oftenExcellent follow up 🙂
No, all good.
This sounds like there is some API endpoint that these ‘hackers’ are accessing. But if Wordfence can monitor this, then Trusona could block this.
Do you know what the endpoint in question is?
Forum: Plugins
In reply to: [Co-Authors Plus] 3.5.8 version of Co-Authors-Plus has a bugAh, excellent!
Forum: Plugins
In reply to: [Co-Authors Plus] 3.5.8 version of Co-Authors-Plus has a bugI use the plugin WP Rollback to allow me to roll back most plugins to a number of recent versions.
Forum: Plugins
In reply to: [Co-Authors Plus] 3.5.8 version of Co-Authors-Plus has a bugAt least one of my sites completely breaks with 3.5.8. I rolled back the plugin one minor version to 3.5.7.
Forum: Plugins
In reply to: [Web Stories] Fatal error when editing webstoriesHiya.
Problem persists in an incognito window.
I submitted the data in the form as requested.
Forum: Plugins
In reply to: [hCaptcha for WP] Not fully initialising on page loadThis seems to now be available to me. So, all good.
Forum: Plugins
In reply to: [WooCommerce] Separate ‘place order’ button from choose-payment-formThanks!
Forum: Plugins
In reply to: [WooCommerce] Separate ‘place order’ button from choose-payment-formThanks Igor. That looks like a nice plugin, but I don’t think it will do what I am looking to do.
Thanks for the help. I think I’ll have to try to make it work and see where/if the process breaks down.
Thanks for the prompt and clear response.