Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

[Resolved] BuddyPress Branded Login – Design and security

  • Participant
    Level: Enlightened
    Posts: 41
    Linklusion on September 24, 2019 at 10:02 am #25454

    Hi Brajesh

    I have installed GWANGI template

    1 – login and reset password page from BuddyPress Branded Login do not take design of the template
    Screnshot
    LOGIN PAGE https://prnt.sc/pa810d
    RESET PASSWORD PAGE https://prnt.sc/pa812y
    LOGIN PAGE WITH GWANGI DESIGN https://prnt.sc/pa8151
    RESET PASSWORD WITH GWANGI DESIGN https://prnt.sc/pa8176

    I guess it has something to do with class
    https://prnt.sc/pa80wp
    https://prnt.sc/pa80yz

    Is there anyway that BuddyPress Branded Login takes design of the template ?

    2 – I am using WP CERBER to secrure website
    Agains Brutal force attack, it is possible to deactivate wp-login.php and return page 404
    With BuddyPress Branded Login, wp-login.php do not return page 404 it is always redireting to login page
    Bots will then have always access to login page ; wp-login.php is famous for WP website so bots acces this page to try ID and password
    Is there any way we could have this feature in BuddyPress Branded Login and not having redirection from wp-login.php ?

    3 – In WP CERBER I also limit number of attemps to login, after x unuccesfull attempt user is blocker
    Message from WP CERBER only work on wp-login page (x attemps remains etc….)
    Is there any way we could have this feature in BuddyPress Branded Login ?

    Instead of having feature of 2 and 3 which would be lot of work maybe have feature from WP CERBER compatible with BuddyPress Branded Login

    Thanks

    Johan

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 25, 2019 at 4:04 pm #25490

    Hi Johan,
    BP Branded Login needs you to create your own template.

    If your theme supplies login/password reset templates, I will suggest avoid using BP Branded login. It is not created for generic use case. It was developed when themes were very basic(7-8 years ago) and were not offering the templated login page etc.

    Most of security plugin wont recognize the templated login page(It is a page and not a url rewrite), So I do not expect them to work with it.

    My suggestion, if you can do without it, avoid it. It is not a generic solution.

    Regards
    Brajesh

  • Participant
    Level: Enlightened
    Posts: 41
    Linklusion on September 25, 2019 at 4:06 pm #25491

    Hi Brajesh

    Ok I undersatnd

    Thanks

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on September 25, 2019 at 9:03 pm #25499

    Thank you.

The topic ‘ [Resolved] BuddyPress Branded Login – Design and security’ is closed to new replies.

This topic is: resolved