Cookies or user IDs somehow being crossed or confused

User avatar
leejosepho
User w
User w
Posts: 5
Joined: Mon Mar 20, 2017 11:12 pm
Location: 200 miles south of Little Rock (usa)
Contact:

Cookies or user IDs somehow being crossed or confused

Post by leejosepho »

This screen shot comes from the "Live Traffic" Login report of the Wordfence Security plugin at my WordPress Dashboard. It shows two users having logged in from the same IP at the same time, and the second one ('sa-----') you can see there is correct. However, the first one ('ad-------') is me, and I was already logged in long before this and I definitely have not ever logged in from that same IP. Everything was fine for both of us while we were logged in, but I am suspecting this erroneous report might somehow be related to the W3all phpBB User Integration plugin.
Attachments
CookieTrouble03.gif
CookieTrouble03.gif (61.3 KiB) Viewed 1890 times
antoinegdln4
User www
User www
Posts: 70
Joined: Fri Nov 11, 2016 3:50 pm

Re: Cookies or user IDs somehow being crossed or confused

Post by antoinegdln4 »

Maybe it's a part of my problem too :O
antoinegdln4
User www
User www
Posts: 70
Joined: Fri Nov 11, 2016 3:50 pm

Re: Cookies or user IDs somehow being crossed or confused

Post by antoinegdln4 »

Okey i have definitly the same problem


Image

And the list is long....


(DK_Antoine4 is my pseudo)
User avatar
axew3
w3all User
w3all User
Posts: 2883
Joined: Fri Jan 22, 2016 5:15 pm
Location: Italy
Contact:

Re: Cookies or user IDs somehow being crossed or confused

Post by axew3 »

i will log/test in some while the thing and report as soon ...
but in the while i've try to install this plugin to prepare the test and see what it do (and what do wp_w3all when logging user) and i note a thing that i do not like:

Wordfence Security try to connect to
noc4.wordfence.com 443 Time Wait

The plugin loop on activating, due to my security firewall settings, or wrong redirect on localhost of the security plugin, that after the loop that lead to overload my server with many calls to the above
noc4.wordfence.com 443
return an url that try to connect localhost.com (which not exist)
i see there are many installs of this plugin, i guess somebody have take a look into what it really do.
i will see wp_w3all about the as soon, but at moment i had to disable Wordfence Security in change, to return work a clean WOrdPress install where only wp_w3all plugin was installed and running fine.
User avatar
leejosepho
User w
User w
Posts: 5
Joined: Mon Mar 20, 2017 11:12 pm
Location: 200 miles south of Little Rock (usa)
Contact:

Re: Cookies or user IDs somehow being crossed or confused

Post by leejosepho »

Maybe Wordfence is actually the problem here, and that would not surprise me. I use it for throttling hits, scanning files and watching for 404s, but I already know its reports of some things are not always accurate.
User avatar
axew3
w3all User
w3all User
Posts: 2883
Joined: Fri Jan 22, 2016 5:15 pm
Location: Italy
Contact:

Re: Cookies or user IDs somehow being crossed or confused

Post by axew3 »

here i've install:
All In One WP Security
setting it just as explained here:
viewtopic.php?f=2&t=80

and to check traffic i use:
WP Statistics
Post Reply