Closed extreme855 closed 2 years ago
There's a simple way to test if bfstop is working or not - enter some invalid credentials in the login form, try to log in with them, and see if they turn up in the "failed logins" page.
It isn't like there is automatically lots of unsuccessful login attempts on every Joomla page all by itself - so unless you make sure there is a failed login with the method mentioned above, it's hard to tell if you're not seeing anything (1) just because there is no actual failed login activity, or (2) because bfstop is missing the activity actually going on.
Made tests from different devices no activity. But from Joomla"User Activity's Log" I see activity.
By "activity" I guess you mean entries like "username and pasword wrong or account does not exist" in your error.php?
User activity log where is Action/Extension/Date/Name/IP Address/ID tabs where is different information about what are users doing.
I have some logs where like User (#username) logged in to admin User (#username) tried to logged in to admin And more ....
But bfstop doesn't see any of them.
Ah I see - I didn't know the "User Actions Log" yet, interesting, maybe I can use that information directly in a future version...
As to your problem - can you check the bfstop log file if it maybe contains something? The "System - Brute Force Stop" is also definitely enabled on that system? Since the Brute Force Stop component should warn you if it's not, so I guess that's not it...
For the moment I'm out of ideas. Maybe some more info on the system you're running this on could help - what Joomla version is it? What database? Which server software, php version etc.?
@extreme855 did you have a chance to look into this a bit more? I cannot currently reproduce your issue, and am waiting for more information from your side (see questions in my previous post).
@extreme855 without feedback there is no way for me to help any further. Closing as non-reproducible, if it still happens, re-open the issue with answers to above questions!
After installed I activated it and gave it some time. I have running of course an User actions Log to see if there was some activity and there is them a lot.
Any ideas ?