Login Errors & Lockouts

  • Resolved rrosenthal

    (@rrosenthal)


    9 months, 3 weeks ago

    Hi — We are using WordPress 6.8.1, WP Members 3.5.4.1 and User List 2.0.5. The latter is not currently under renewal. We are also using Wordfence 8.0.5. This is a homeowner association website, so budget is limited for renewals. The Member & User List are used to provide restricted access to resident-only website pages. The following issues are not new — (1) when logging in via WP Member & User List, users report persistent failures with correct credentials, (2) when clicking to reset password, all menu/nav links to hidden pages are viewable (even though the pages are not accessible to non-logged in users), (3) Wordfence locks out users for no apparent reason. Other than renewing and updating User Lists (obviously), your thoughts on troubleshooting these issues??

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Chad Butler

    (@cbutlerjr)

    9 months, 2 weeks ago

    The login issues you noted would not be related the User List, so although you should update to make sure you have the most recent version for compatibility and security, that’s not going to affect the user’s ability to log in.

    One important thing to verify is whether a user logging in with “correct credentials” actually is using correct credentials. Many times, login errors are the result user error, even when the user thinks it isn’t.

    I would look into cache issues. An overly aggressive or improperly configured cache plugin can result in login problems. If your host uses a server level cache known as “Varnish”, note that configuring exclusions for login pages is an absolute must for that cache application.

    If Wordfence is locking users out “for no apparent reason”, then you really need to trace what that reason actually is. It’s not likely to be random malfunction. That may require seeking support from Wordfence.

    airdrummer

    (@airdrummer)

    9 months, 2 weeks ago

    i’d also like to mention that browsers’ save password can be an issue when it offers to save new password, but the username is blank, contributing to the pebkac-}

    Thread Starter rrosenthal

    (@rrosenthal)

    9 months, 2 weeks ago

    Thanks Brad, airdrummer for your replies and suggestions. We had worked through most, including cut & paste credentials, before requesting support. In the interim, we reset the menu items for restricted pages from “all users” to “logged in users”, and removed the rule for each requiring the user to be logged in for display. Saves a software check and this seems to have cleared the issue(s) for now. We’ll chat back in if the issue reoccurs.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Login Errors & Lockouts’ is closed to new replies.