charlievaughan

Thanks Paolo, I did read that, but I can’t see which setting it is that he is referring to. I must be missing something.

Thanks for the help Stiofan.

I get what you are saying. I’m not sure what setting it is I need to change though. I’ve noticed this in the past but it was never an ‘issue’ before.

There’s a setting in the WordPress MU Domain Mapping plugin that flags whether the child sites should use the mapped domain for the WordPress admin pages (currently set to use mapped domain).

Is this a .htaccess setting I need to change maybe?

Excellent, yes that worked. Good job 😉

Yes you’re right it was that.

I thought I’d tried the form without that installed. But the account might already have been locked out by that point with all my attempts to diagnose the problem.

I’m using that plugin network wide on my two Multisites as for months I’ve been getting daily attempts to brute force attack user accounts.

I also use Wordfence and plugin and despite having the maximum password attempts set at 20, I’ll get several emails a day from Wordfence saying they have been locked out.

Obviously I’m experimenting with the best combination of security measures to use.

Hi

Just thought I’d let you know how I got on with this.

Over the holidays I had time to try and resolve this by creating a new node on my Multisite network and rebuilding the affected blog. This new node worked correctly until I mapped my domain to this new node. The same problems were then transferred to the new blog (and the old blog started to work).

I had raised a ticket previously with my host Hostgator over security restrictions on the server. But I don’t think they ever got back to me.

So I opening a live chat session and eventually managed to get through to the operator. After explaining the issue he tried the “Hostgator support doesn’t support WordPress Multisite” get out clause. I asked if he supported security restriction on the server and he agreed to take a look.

He seemed quite pleasantly surprised that when he checked it was in act due to a security restriction on the server and he added and exception to the rules and said it shouldn’t happen again for this domain.

I’m going to open another ticket though as I’ve just discovered the GeoDirectory login form won’t let anyone login, This may be a related issue.

So the fix I found previously didn’t work for long then the Add Listing page broke again and started to 403 without me having changed anything. And nothing I have tried since has made it work again.

Just to recap. When I’m logged out and navigate to the ‘Add Listing’ page I don’t get redirected to the login page with the sign in and register forms, but get a 403 error instead. When logged in I get the correct Add Listing form.

This obviously isn’t much good now that I want to start emailing people to claim listings and register accounts.

So this site I’m having trouble with is a node on a Multisite network. And I tried setting up GeoDirectory on the parent node to see if I could recreate the issue. But that one works fine. I get redirected to the login / registration page when I navigate to the Add Listing page without any problem. So I’m guessing this isn’t a problem with my .htaccess file or installation and might be to do with odd settings on this specific blog.

Also I have another WordPress Multisite installation on another server set up and I haven’t had any problem with that (which is also a node not the parent). I just can’t figure out what is the difference that is causing the problem.

I’ve tried changing permalinks and turning plugins on and off. At the moment I’ve only got the core GeoDirectory plugin active on the blog and I still have the problem. I’ve got some network activated plugins active. But deactivating those also doesn’t work.

I’m not sure I entirely understand the question.

I did have the GeoDirectory plugins installed on the parent site for my multisite network (I think you have to do this before the auto updates will work?).

But I uninstalled GeoDirectory and all its addons from everything but the blog I need them on. This didn’t make any difference to the 403 errors.

I since have installed all the updates you released on Nov 10th but this also hasn’t made any difference.