Home Forums WordPress Plugins Hide My WP Lockout After upodated

This topic is: resolved
Viewing 9 posts - 1 through 9 (of 9 total)
  • Author
    Posts
  • #25540
    palcomp
    Post count: 5

    I just updated “Hide My WP” plugin and I’m locked. I have no problem before at all.
    Only way I can login is remove whole plugin via FTP.
    I didn’t noticed anything wrong right after update. I logoff myself from dashboard but after a while I was locked.
    Every time I was trying to login I see 404 (that’s the way I set it under plugin settings).
    What is weird. I was able to login with no problem from different browsers.
    Opera, Chrome, Firefox – can’t login even I clear all cookies
    Brave, Edge – I can login.

    Any ideas what’s wrong?
    And Why (after I remove plugin ) can still login with my old custom login path? /wp-login.php?logowanie=1973

    Can’t provide right now admin access…

    #25543
    Suman M.
    Post count: 12478

    Hi, did you also rename wp-admin path name? Please clear all the instances of HMWP from database and do fresh install of HMWP.
    Do these:

    1) In “wp_options” table in your database, delete the rows with following “option_name”. Please backup your database first.
    – hide_my_wp
    – hide_my_wp_undo
    – hmwp_ids_installed
    – hmw_all_plugins
    – external_updates-hide_my_wp
    – hmwp_spam_counter
    – hmwp_temp_admin_path

    2) comment out or remove following line from wp-config.php (if you have added it there previously)
    define(“ADMIN_COOKIE_PATH”, “/NEW_WPADMIN_PATH_NAME”);

    And Why (after I remove plugin ) can still login with my old custom login path? /wp-login.php?logowanie=1973
    >> That secret key will make sense only if HMWP is active. Without HMWP any secret key will work as it won’t matter what you append as query string to wp-login.php like /wp-login.php?anyname=anyname

    #25547
    palcomp
    Post count: 5

    Thanks. It works.
    BEST!

    #25548
    palcomp
    Post count: 5

    Sorry….but problems are back.
    After an hour I’m still lock under chrome, opera browsers
    Edge, Brave – works fine
    Pls see screens. Looks like website is falling apart while I’m locked (this what you see on screenshots is 404 page)

    My iP iS: 98.213.34.94
    And I’m getting emails with warnings:

    The following potential attack has been detected by HMWP IDS.

    If it’s you please Exclude that parameter or increase Notify Threshold from IDS settings.
    In most cases you don’t need to do anything. Hide My WP protects you!

    IP: 98.213.34.94
    User ID:
    Date: 2019-02-15T20:17:17+00:00
    Total Impact: 30
    Affected tags: xss csrf sqli id lfi rfe

    Affected parameters: REQUEST.mp_a36067b00a263cce0299cfd960e26ecf_mixpanel=%7B%26quot%3Bdistinct_id%26quot%3B%3A+%26quot%3B168f1f30fe3238-0ab1006eb79456-46564b55-e1000-168f1f30fe48c%26quot%3B%2C%26quot%3B%24device_id%26quot%3B%3A+%26quot%3B168f1f30fe3238-0ab1006eb79456-46564b55-e1000-168f1f30fe48c%26quot%3B%2C%26quot%3B%24initial_referrer%26quot%3B%3A+%26quot%3Bhttps%3A%2F%2Fwww.interameryka.com%2F1976%2Fplugin-install.php%3Fs%3Dbetter%2B%26amp%3Btab%3Dsearch%26amp%3Btype%3Dterm%26quot%3B%2C%26quot%3B%24initial_referring_domain%26quot%3B%3A+%26quot%3Bwww.interameryka.com%26quot%3B%7D,

    Request URI: /
    Origin: 74.208.59.123

    Attachments:
    You must be logged in to view attached files.
    #25552
    palcomp
    Post count: 5

    ..and just checked “intrusions log file” all 95% of them are from my own IP address
    98.213.34.94
    Does looks like I’m hacking my own website?
    Something is not right here

    #25553
    Suman M.
    Post count: 12478

    Hi, IDS detects the request as harmful or probable harmful depending upon the nature of the request, parameters associated, keywords, etc. Even though the requests are listed in the log it doesn’t mean that they are blocked (they might be logged as probable harmful). Is any request blocked in your site?

    And regarding the screenshots above, is it that your site is broken after applying HMWP settings? Please generate debug report from HMWP start tab and post it here as private reply.

    #25585
    palcomp
    Post count: 5
    This reply has been marked as private.
    #25587
    Suman M.
    Post count: 12478

    Can you please try clearing browser cache, or try using another PC. There should not be any such browser related issue with HMWP.

    #25588
    palcomp
    Post count: 5

    Yep…it was all about cookies.
    Thanks much….

Viewing 9 posts - 1 through 9 (of 9 total)

You must be logged in to reply to this topic.