Home › Forums › WordPress Plugins › Hide My WP › Lockout After upodated
- This topic has 8 replies, 2 voices, and was last updated 5 years, 1 month ago by palcomp.
-
AuthorPosts
-
February 15, 2019 at 6:13 am #25540palcompPost count: 5
I just updated “Hide My WP” plugin and I’m locked. I have no problem before at all.
Only way I can login is remove whole plugin via FTP.
I didn’t noticed anything wrong right after update. I logoff myself from dashboard but after a while I was locked.
Every time I was trying to login I see 404 (that’s the way I set it under plugin settings).
What is weird. I was able to login with no problem from different browsers.
Opera, Chrome, Firefox – can’t login even I clear all cookies
Brave, Edge – I can login.Any ideas what’s wrong?
And Why (after I remove plugin ) can still login with my old custom login path? /wp-login.php?logowanie=1973Can’t provide right now admin access…
February 15, 2019 at 8:41 am #25543Suman M.Post count: 12478Hi, did you also rename wp-admin path name? Please clear all the instances of HMWP from database and do fresh install of HMWP.
Do these:1) In “wp_options” table in your database, delete the rows with following “option_name”. Please backup your database first.
– hide_my_wp
– hide_my_wp_undo
– hmwp_ids_installed
– hmw_all_plugins
– external_updates-hide_my_wp
– hmwp_spam_counter
– hmwp_temp_admin_path2) comment out or remove following line from wp-config.php (if you have added it there previously)
define(“ADMIN_COOKIE_PATH”, “/NEW_WPADMIN_PATH_NAME”);And Why (after I remove plugin ) can still login with my old custom login path? /wp-login.php?logowanie=1973
>> That secret key will make sense only if HMWP is active. Without HMWP any secret key will work as it won’t matter what you append as query string to wp-login.php like /wp-login.php?anyname=anynameFebruary 15, 2019 at 7:12 pm #25547palcompPost count: 5Thanks. It works.
BEST!February 15, 2019 at 8:54 pm #25548palcompPost count: 5Sorry….but problems are back.
After an hour I’m still lock under chrome, opera browsers
Edge, Brave – works fine
Pls see screens. Looks like website is falling apart while I’m locked (this what you see on screenshots is 404 page)My iP iS: 98.213.34.94
And I’m getting emails with warnings:The following potential attack has been detected by HMWP IDS.
If it’s you please Exclude that parameter or increase Notify Threshold from IDS settings.
In most cases you don’t need to do anything. Hide My WP protects you!IP: 98.213.34.94
User ID:
Date: 2019-02-15T20:17:17+00:00
Total Impact: 30
Affected tags: xss csrf sqli id lfi rfeAffected parameters: REQUEST.mp_a36067b00a263cce0299cfd960e26ecf_mixpanel=%7B%26quot%3Bdistinct_id%26quot%3B%3A+%26quot%3B168f1f30fe3238-0ab1006eb79456-46564b55-e1000-168f1f30fe48c%26quot%3B%2C%26quot%3B%24device_id%26quot%3B%3A+%26quot%3B168f1f30fe3238-0ab1006eb79456-46564b55-e1000-168f1f30fe48c%26quot%3B%2C%26quot%3B%24initial_referrer%26quot%3B%3A+%26quot%3Bhttps%3A%2F%2Fwww.interameryka.com%2F1976%2Fplugin-install.php%3Fs%3Dbetter%2B%26amp%3Btab%3Dsearch%26amp%3Btype%3Dterm%26quot%3B%2C%26quot%3B%24initial_referring_domain%26quot%3B%3A+%26quot%3Bwww.interameryka.com%26quot%3B%7D,
Request URI: /
Origin: 74.208.59.123Attachments:
You must be logged in to view attached files.February 15, 2019 at 9:01 pm #25552palcompPost count: 5..and just checked “intrusions log file” all 95% of them are from my own IP address
98.213.34.94
Does looks like I’m hacking my own website?
Something is not right hereFebruary 16, 2019 at 9:06 am #25553Suman M.Post count: 12478Hi, IDS detects the request as harmful or probable harmful depending upon the nature of the request, parameters associated, keywords, etc. Even though the requests are listed in the log it doesn’t mean that they are blocked (they might be logged as probable harmful). Is any request blocked in your site?
And regarding the screenshots above, is it that your site is broken after applying HMWP settings? Please generate debug report from HMWP start tab and post it here as private reply.
February 18, 2019 at 6:47 pm #25585palcompPost count: 5This reply has been marked as private.February 19, 2019 at 7:11 am #25587Suman M.Post count: 12478Can you please try clearing browser cache, or try using another PC. There should not be any such browser related issue with HMWP.
February 19, 2019 at 7:28 am #25588palcompPost count: 5Yep…it was all about cookies.
Thanks much…. -
AuthorPosts
You must be logged in to reply to this topic.