Support Forum

Advanced Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
general-topic
Moving Simple:Press login to prevent brute force WP attacks
Avatar
Paul Smith
Member
sp_UserOfflineSmall Offline
Sep 15, 2014 - 2:30 pm

Is Mr Papa about today? He has done some work on my site to resolve the above issue but something was lost in translation. I sent him a PM this morning but I haven't had a reply yet.

Avatar
Yellow Swordfish
Glinton, England
SP Master
sp_UserOfflineSmall Offline
Sep 15, 2014 - 2:37 pm

Steve is in Los Angeles. So it is mid-morning there at the moment and he will, no doubt, be at work. He will be around later on I am sure.
Can you tell me the issue?

andy-signature.png
YELLOW
SWORDFISH
Avatar
Paul Smith
Member
sp_UserOfflineSmall Offline
Sep 15, 2014 - 4:09 pm

Here is the message I sent him after he made the changes...

"It's not quite right I'm afraid.

DAP is used to protect paid for content on the site and not for logging in WP users to the forum. I think DAP is supposed to sync with WP but I've had problems with that in the past.The reason I didn't give you an email address and password instead of a user name and password is that currently forum users need to log in to WP (user name and password) to use the forum and log in to DAP (email address and password) for the protected content. Of course in an ideal world there would just bee one login for both but I haven't been able to resolve the issues with DAP syncing with WP.

The changes you have made now mean that forum users are being redirected to the DAP login form so won't be able to log in to the forum and new registrants are being directed to a redundant page.

I thought I asked, and maybe I didn't make myself clear, for the WP login and registration forms to be moved to courtesy of the plugin you mentioned in order to deter brute force logins and the forum login and registration links to reflect the changes. Are you able to do this?

I hope I haven't confused the issue any more!"

Avatar
Mr Papa
Simi Valley, CA
SP Master
Free Members
sp_UserOfflineSmall Offline
Sep 15, 2014 - 8:45 pm

DAP was never mentioned, but really doesnt matter...

but I think there is a misunderstanding...  there are NO SP users...  we dont have users... we use the WP users...  also, you do not log into simple press (ie the forum)...  you log into WP... 

so just to be clear, they must be WP users (sp does not create any) and they must log into wp...

I have set up several sites with WP and DAP and the syncing has always worked fine...  in fact, if your users are logging in to WP via the WP login form on the forum page (again, its a wp login form) or wp-login.php, then you do have DAP syncing them to WP for you...

So I can still make a few adjustments for you, just need a better definition of what you want to do...

so you want yet another page that logins to wp?  I can provide that with the theme my login plugin (it looks like you tried that previously)...  but what do you want the url of the page to be since the http://yoursite.com/login is being used for something else??? and its the standard page for theme my login too...

and what do you want the register link on the forum page to redirect to??  you already have /register and /register-2

Avatar
Paul Smith
Member
sp_UserOfflineSmall Offline
Sep 16, 2014 - 5:51 am

The problem that I have is that DAP and WP users don't seem to by in sync on my site. I know they are supposed to, but they aren't. Just to make sure, I've just logged in to DAP via the log in button which you have edited on the forum. I was logged successfully in to DAP but when I switched back to the forum, I wasn't logged in to the forum. I had to log in to WP separately before I was logged in to the forum.

It's a situation which has driven both me and many of my users mad over the last couple of years. There's constantly confusion which login form to use for which part of the site but I haven't had a clue how to resolve the issue so it has remained a problem.

Are you interested in giving me a price for sorting the problem out so that both DAP and WP are in sync?

If not, then here's what I need.

  • The WP login and register URLs need to be moved to thwart brute force log ins
  • The forum log in button needs to reflect the changed URL
  • The forum register button needs to reflect the changed URL

Let me know if you need more information.

Thanks,

Paul

Avatar
Mr Papa
Simi Valley, CA
SP Master
Free Members
sp_UserOfflineSmall Offline
Sep 16, 2014 - 9:20 am

Yes, the latter is what I was suggesting... I was asking you if you had a preference on what those urls were since /login and /register were already in use...

Avatar
Paul Smith
Member
sp_UserOfflineSmall Offline
Sep 16, 2014 - 10:25 am

No, I don't have a preference. Anything will do providing that they differ from the normal WP log in and register URLs.

Avatar
Mr Papa
Simi Valley, CA
SP Master
Free Members
sp_UserOfflineSmall Offline
Sep 16, 2014 - 12:50 pm

Okay, will set it up this evening when home from work...

Avatar
Paul Smith
Member
sp_UserOfflineSmall Offline
Sep 16, 2014 - 12:51 pm

When you set it up will you be able to redirect those who log in and those who register back to the forum rather than to the WP profile page?

Avatar
Mr Papa
Simi Valley, CA
SP Master
Free Members
sp_UserOfflineSmall Offline
Sep 16, 2014 - 10:20 pm

yes....

Forum Timezone: Europe/Stockholm
Most Users Ever Online: 1170
Currently Online:
Guest(s) 1
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Mr Papa: 19448
Ike: 2086
Brandon: 864
kvr28: 804
jim: 643
FidoSysop: 577
Conrad_Farlow: 531
fiddlerman: 358
Stefano Prete: 325
Member Stats:
Guest Posters: 616
Members: 17343
Moderators: 0
Admins: 4
Forum Stats:
Groups: 7
Forums: 17
Topics: 10117
Posts: 79590