secconsult

That’s interesting, did the process ever complete?

So the problem is apparently caused by a call to md5() in a do while loop.

if (PHP_VERSION >= '5') {
                        $hash = md5($salt . $password, TRUE);
                        do {
                                $hash = md5($hash . $password, TRUE);
                        } while (--$count);
                }

One quick solution should be to change one line in wp-content/plugins/mvis-security-center/inc/mvl_config.php line 4
$password_list = array(‘123’, …) to
$password_list = array();
This way the loop should not be executed, but you won’t have the weak password check for your wordpress users.

Unfortunately, I don’t know why this problem is occurring, but I will look into it some more.

Thanks for your feedback,
Stefan

Hello Justin,

sorry for the late response!
This problem can arise when the inital check performed by the plugin takes more than 30 seconds.

Please try either:

1. Adapting the wp-config.php:
set_time_limit(60);

Important – If you are making changes in wp-config.php, then add this line above the “/* That’s all, stop editing! Happy blogging. */” comment.

2. Adapting the /.htaccess file of your WordPress installation
php_value max_execution_time 60

3. Adapting the php.ini file
max_execution_time = 60;

Preferably the changes are made in the wp-config.php file.

Please let me know if that solves the issue.

Thanks,
Stefan

Hello Renate,

I will close this thread for now, please get back to me if the problem persists.

Thank you,
Stefan

Hello Renate,

are you using Javascript blocking extensions like NoScript or is Javascript disabled in your browser? Javascript is used to show you information if any fields in the registration form are not conforming with expected input.

Most commonly the problems are within the username and the password.

E.g. the username you choose for mvis has to be a valid e-mail address, the password needs to be at least 8 characters long and contain at least one numbers as well as one special character (!”$%/()._-=?)

I hope that solves the problem, please let me know if it worked out.

Cheers,
Stefan

great, thanks again for the feedback Ian.

Hello Ian,

thanks for pointing that out, I was not aware of it.

Trunk is now updated to use plugins_url() to determine the wp-content directory and all hardcoded references to wp-content have been removed.

Cheers,
Stefan

Thanks for your the bug report Ian.

Indeed I forgot to remove this pass by reference.

I’ll post an update by today.

Cheers,
Stefan