Hi Andreas, “Lovely” message there, but I decided to let it …

Comment on New: WordPress Security Administrator Protection by Paul G..

Hi Andreas,

“Lovely” message there, but I decided to let it go live anyway. And here’s why:

The email message you quoted there shows the plugin did the job – it alerted you to the fact that someone logged-in who shouldn’t have. They clearly went through the normal login procedure on your site, since that email could only have been received if they did.

This therefore points to the fact that you probably don’t have two-factor authentication enabled, as this plugin provides. Our plugin is great, but you need to turn on the features for it to work.

You say hackers are working hard on MySQL security holes… Where is the evidence that this is a result of a MySQL security hole? Further, why would you say we don’t give a damn about it? Of course we do… that’s a slightly ridiculous statement.

There are a million ways to circumvent website security, our plugin does the job of blocking and preventing some of them… it cannot possibly do them all. That’s your responsibility. Sorry.

There are always things to improve, but unfortunately your comment provides no constructive feedback to do so – there is no way to know how they circumvented your login procedure.

Further, I would question what plugins and themes you have running and if they are, along with your WordPress site, ALL completely up-to-date. If you are using a plugin or theme with a security vulnerability, then this plugin probably wont help you.

Just think, were it not for that email, you would NEVER have known that your site was compromised in the first place. Yay, go us! 😀

Thanks for your comment.

Recent Comments by Paul G.