wpmanageninja/fluent-auth

Super Simple Security Plugin for WordPress

fluent-auth's Issues

Feature request: disable default login error messages

Very easy to implement, and it's a useful feature: https://wpcademy.com/easy-guide-to-disable-login-hints-in-wordpress-login-error/

Change Wp-login URL

Would be awesome if we could change the Login URL from Wordpress

error: no 'to' field

Fluentauth doesn't work on my website. looking at log in FluentSMTP there is the error that the 'to' field isn't filled in. All other smtp functionality works fine on my website. Any thoughts?

User Roles & Capabilities Management

Adding simple management for user roles and capabilities would make FluentAuth an alternative to XY's number of plugins which bloat WP websites.

Feature Request - allow option to only send blocked notifications for real users

This feature can result in blocked notifications for users that don't exist when too many failed login attempts are made.

The feature I am requesting is to have a separate option to receive blocked notifications only when a valid user account is blocked.

Exporting/finding logs

Where can I find the log files?

OR string and email subject translations are missing

Hey there,

Cool plugin btw! I noticed that the string OR isn’t translating at the first stage of the process in login (Before hitting the login via magic url) but it translates after you have pressed the (login via magic url).

It also seems that the “Sign in to” string is missing from that should translate the subject of the email.

Found couple others in the emails:
String: Sign in to %s (The button)
String: If you did not make this request, you can safely ignore this email.
String: This email has been sent from:

Could you add these for the translation strings?

I have posted about these bugs in the WordPress forums also 2 months ago that can be found here: https://wordpress.org/support/topic/or-string-and-email-subject-translations-are-missing/ (That you could easily tick off also when the strings are added :D)

Fluentauth is not logging new user who sign up via the shortcode from Fluentauth

If anyone signs up via the shortcode of FluentAuth then FluentAuth doesn't keep a record of the signup.

Implement Email Notification when high-level (selected into the config) login to the site

2FA problem

When receive 2FA by mail bottom still blocked

Magic Login not working in Page(While using magic login via shortcode)

Magic login not working while using a shortcode in a page, a console error is detected; kindly check the screenshot: https://prnt.sc/JrtkoR7BLBlZ

Full Activity log from users

Would be nice to have a 'full activity log' from users, if possible, as an add on to this plugin. Would make me delete another plugin

Feature request: Facebook & X (Twitter) login

It would be great to be able to allow users to login with their Facebook and X (Twitter) accounts as well.

Delete old logs based on configartion

Feature request: Block by user name

It would be great if we could block login requests by user name. For example, any attempt to login using "admin," "administrator," etc. (i.e. common brute force attempt names) would get blocked before any other action.

Feature request: Option for remembering login info after verifying two factor authentication

So user will not have to verify every time

Login redirect not applied with Magic Login

I have enabled Magic Login and also setup a Default Login Redirect URL.
The redirect works fine with a normal login, but with a Magic Login the redirect has no effect.

Feature :Maybe add API call logs

Bug: FluentAuth and LearnDash leads to strange behaviour when viewing / editing posts or pages

I have installed FluentAuth and I found out, that the combination of FluentAuth with Learndash leads to strange behaviour.
After installing FluentAuth I wanted to edit a post or a page in admin area. Then a white page with an error message appears.

Message:
There has been a critical error on this website. Please check your site admin email inbox for instructions.
Learn more about troubleshooting WordPress.

This is my environment:
WordPress-Version 6.1.1
Active Theme: BuddyBoss Theme (Version 2.2.1.2)
Actual Plugin: LearnDash LMS (Version 4.4.1.2)
PHP-Version 8.0.15

What I have tried:

1. I uninstall LearnDash. FluentAuth is still activated. I try to edit a post or a page in the admin view. No errors. It works fine.
2. I uninstall FluentAuth. LearnDash is still activated. I try to edit a post or a page in the admin view. No errors. It works fine.
3. Both plugins are installed and activated. I try to edit a post or a page in the admin view. The error happened again.
4. In the FluentAuth security settings I unchecked all settings. I try to edit a post or a page in the admin view. It had no effect. The error happened again.

Then I receive an email with the following informations:

Error-Details

Ein Fehler vom Typ E_ERROR wurde in der Zeile 124 der Datei /skilldrops-www/wp-content/plugins/sfwd-lms/includes/rest-api/v2/class-ld-rest-users-controller.php verursacht. Fehlermeldung: Uncaught TypeError: LD_REST_Users_Controller_V2::rest_prepare_response_filter(): Argument #1 ($response) must be of type WP_REST_Response, WP_User given, called in /skilldrops-www/wp-includes/class-wp-hook.php on line 308 and defined in /skilldrops-www/wp-content/plugins/sfwd-lms/includes/rest-api/v2/class-ld-rest-users-controller.php:124
Stack trace:
#0 /skilldrops-www/wp-includes/class-wp-hook.php(308): LD_REST_Users_Controller_V2->rest_prepare_response_filter(Object(WP_User), Object(WP_User), Object(WP_REST_Request))
#1 /skilldrops-www/wp-includes/plugin.php(205): WP_Hook->apply_filters(Object(WP_User), Array)
#2 /skilldrops-www/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php(1091): apply_filters('rest_prepare_us...', Object(WP_REST_Response), Object(WP_User), Object(WP_REST_Request))
#3 /skilldrops-www/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php(496): WP_REST_Users_Controller->prepare_item_for_response(Object(WP_User), Object(WP_REST_Request))
#4 /skilldrops-www/wp-includes/rest-api/class-wp-rest-server.php(1171): WP_REST_Users_Controller->get_current_item(Object(WP_REST_Request))
#5 /skilldrops-www/wp-includes/rest-api/class-wp-rest-server.php(1018): WP_REST_Server->respond_to_request(Object(WP_REST_Request), '/wp/v2/users/me', Array, NULL)
#6 /skilldrops-www/wp-includes/rest-api.php(535): WP_REST_Server->dispatch(Object(WP_REST_Request))
#7 /skilldrops-www/wp-includes/rest-api.php(2884): rest_do_request(Object(WP_REST_Request))
#8 [internal function]: rest_preload_api_request(Array, '/wp/v2/users/me')
#9 /skilldrops-www/wp-includes/block-editor.php(638): array_reduce(Array, 'rest_preload_ap...', Array)
#10 /skilldrops-www/wp-admin/edit-form-blocks.php(77): block_editor_rest_api_preload(Array, Object(WP_Block_Editor_Context))
#11 /skilldrops-www/wp-admin/post.php(187): require('/skilldrops-www...')
#12 {main}
thrown

Can I do something? Or can you help out?

Many thanks.

Feature request: Change WordPress login URL to a custom URL

A nice security enhancement to add would be the ability to change the default WP login URL (/wp-admin) to a custom URL.

Changing the default login URL can reduce failed login attempts (and server load) tremendously and makes hacking a site just a little less effortless.

Additional options when you use a custom login URL:
The ability to show a custom message to people who visit the default /wp-admin URL, or the ability to redirect people to the homepage, 404 page or a custom URL.

Example: Perfmatters handles changing the login URL in a very simple and straightforward way:
See https://perfmatters.io/docs/change-wordpress-login-url
and https://perfmatters.io/features/#wordpress-login-url

Error issue line 152 php 8.1+

WordPress version 6.2.2
Thème actif : Hello Elementor (version 2.8.1)
Extension actuelle : FluentAuth - Auth Security Plugin (version 1.0.5)
PHP version 8.1.18

Détails de l’erreur

Une erreur de type E_ERROR a été causée dans la ligne 152 du fichier /[wordpress-sites-hosting]/wp-content/plugins/fluent-security/app/Hooks/Handlers/LoginSecurityHandler.php. Message d’erreur : Uncaught ArgumentCountError: Too few arguments to function FluentAuth\App\Hooks\Handlers\LoginSecurityHandler::logAuthSuccess(), 1 passed in /[wordpress-sites-hosting]/wp-includes/class-wp-hook.php on line 308 and exactly 2 expected in /[wordpress-sites-hosting]/wp-content/plugins/fluent-security/app/Hooks/Handlers/LoginSecurityHandler.php:152
Stack trace:
#0 /[wordpress-sites-hosting]/wp-includes/class-wp-hook.php(308): FluentAuth\App\Hooks\Handlers\LoginSecurityHandler->logAuthSuccess()
#1 /[wordpress-sites-hosting]/wp-includes/class-wp-hook.php(332): WP_Hook->apply_filters()
#2 /[wordpress-sites-hosting]/wp-includes/plugin.php(517): WP_Hook->do_action()
#4 /[wordpress-sites-hosting]/wp-includes/class-wp-hook.php(308): nop_auto_login()
#5 /[wordpress-sites-hosting]/wp-includes/plugin.php(205): WP_Hook->apply_filters()
#6 /[wordpress-sites-hosting]/wp-includes/pluggable.php(616): apply_filters()
#7 /[wordpress-sites-hosting]/wp-includes/user.php(106): wp_authenticate()
#8 /[wordpress-sites-hosting]/wp-login.php(1241): wp_signon()
#9 {main}
thrown

Fluent Auth Reset Password Workflow

The workflow to reset password in FluentAuth could be better in my opinion.
whenever I ask to reset the password, it takes me back to my wp-login page, which I don't want. I would love it could be all done in the front page as I can do with the plugin Frontend Reset Password. Check the video below:
https://www.dropbox.com/s/x0qan1bl1293sux/221221%20-%20FluentAuth.mkv?dl=0

Undefined Error.

Magic Link provides error for email: https://prnt.sc/jfg4xQoWG5Yq. This works fine when using the user name