Page 1 of 1

Cookies or user IDs somehow being crossed or confused

Posted: Tue Mar 28, 2017 12:35 pm
by leejosepho
This screen shot comes from the "Live Traffic" Login report of the Wordfence Security plugin at my WordPress Dashboard. It shows two users having logged in from the same IP at the same time, and the second one ('sa-----') you can see there is correct. However, the first one ('ad-------') is me, and I was already logged in long before this and I definitely have not ever logged in from that same IP. Everything was fine for both of us while we were logged in, but I am suspecting this erroneous report might somehow be related to the W3all phpBB User Integration plugin.

Re: Cookies or user IDs somehow being crossed or confused

Posted: Tue Mar 28, 2017 6:30 pm
by antoinegdln4
Maybe it's a part of my problem too :O

Re: Cookies or user IDs somehow being crossed or confused

Posted: Tue Mar 28, 2017 7:11 pm
by antoinegdln4
Okey i have definitly the same problem


Image

And the list is long....


(DK_Antoine4 is my pseudo)

Re: Cookies or user IDs somehow being crossed or confused

Posted: Tue Mar 28, 2017 7:23 pm
by axew3
i will log/test in some while the thing and report as soon ...
but in the while i've try to install this plugin to prepare the test and see what it do (and what do wp_w3all when logging user) and i note a thing that i do not like:

Wordfence Security try to connect to
noc4.wordfence.com 443 Time Wait

The plugin loop on activating, due to my security firewall settings, or wrong redirect on localhost of the security plugin, that after the loop that lead to overload my server with many calls to the above
noc4.wordfence.com 443
return an url that try to connect localhost.com (which not exist)
i see there are many installs of this plugin, i guess somebody have take a look into what it really do.
i will see wp_w3all about the as soon, but at moment i had to disable Wordfence Security in change, to return work a clean WOrdPress install where only wp_w3all plugin was installed and running fine.

Re: Cookies or user IDs somehow being crossed or confused

Posted: Wed Mar 29, 2017 11:41 am
by leejosepho
Maybe Wordfence is actually the problem here, and that would not surprise me. I use it for throttling hits, scanning files and watching for 404s, but I already know its reports of some things are not always accurate.

Re: Cookies or user IDs somehow being crossed or confused

Posted: Wed Mar 29, 2017 11:43 am
by axew3
here i've install:
All In One WP Security
setting it just as explained here:
viewtopic.php?f=2&t=80

and to check traffic i use:
WP Statistics