Max Beta

I remember now. You mentioned this before and it breaks the WP iOS app. I’m not using the app very much but the problem is that when I want to use it next time several month have passed and I’ve forgotten all about this relation and will spend unnecessary time trying to fix that problem.

For me it would be good if the main panel in WPS said something about the app problem if this setting is activated.

– – –

I have activated it now so we’ll see if there’s any improvement the next hour or so.

I don’t understand much of these things but as a layman it sounds like if WP is pinging out my hidden login page?

This setting is not activated.

The DDos attack was “averted and operation restored to normal” 3 hours ago according toe the support blog but I’ve seen 5-10 emails since then too.

I’m not referring to the translation I did in my message.

I’m asking about the general usage of the word “you” in these messages. Clearly I wasn’t the one doing bad login attempts so why does the email say that I have been banned?

It should say something like this instead:
This user has been banned:
Username: admin

So my question is if this is more clear in the original English message or if it’s a general problem (you should look into)

– – –

Further more … I just mentioned that I changed the secret word but I have now received two more emails since then.

I’ve tried the Pingback Protection setting but was told it interfers with WordPress iOS app.

The main problem isn’t that I use the app a lot but rather the opposite. When I open the app the next time I will have no idea why it’s not working which will occupy my time (which I don’t have).

Would it be possible to fine tune the reporting in your plugin in a future version? If I don’t have an account named “admin” and get 300 login attempts per hour for the account “admin” it’s not much to worry about. I would surely like to know that something is going on but I don’t need a mail for each instance.

I don’t have any thought out suggestions but perhaps it could be possible to send the email once per hour with info about what happened, something like: “123 attempts to login with the account: admin. 0 attempts to login with your active accounts”

I’m sure you can see other alternatives too.

I need to use that plugin at the moment so I can move on. But it would be nice if I could use the same feature in WP Security and reduce the number of installed plugins.

I compared the source code from old login page to another 404 page. I have a text editor that can point out the parts that differ.

1. Page title
(asterisks **** hide the sites regular name)

The old login page use a strange page title
<title>30th November -0001 Archives | ****</title>

The standard 404-page use this
<title>**** | Page not found</title>

2. The old login page is missing the css files in the source code which explains the broken layout. If I use the web inspector and change a css link to the main css file the layout looks ok.

3. The old login page miss some javascript code at the end. There is a comment about W3 Total Cache which is strange since I haven’t even installed a caching plugin yet.

This shows up at the end followed by an inline script and another linked script.
<!– W3TC-include-js-head –>

I sent a question to the theme support about this. They said earlier that I should try some other plugins to rename the login page, and these plugins should not cause the same problems. I will try this next to have something to compare to.