wp-cli-login-command icon indicating copy to clipboard operation
wp-cli-login-command copied to clipboard

Possible issue when site uses a 2FA plugin

Open elindydotcom opened this issue 1 year ago • 2 comments

I'm seeing white screen "critical error has been encountered" errors when using the magic link to attempt to login to sites with 2FA enabled.

Testing with ithemes security plugin (now solidwp security with the recent rebrand) with 2fa enabled for admins.

I did try with the melapress one as well and got a similar error.

Not sure that this is something that can be resolved but since I didn't see it mentioned in the issues list yet I figured I'd add it.

elindydotcom avatar Oct 12 '23 19:10 elindydotcom

Thanks for the report! You said you encountered this with two different 2FA plugins?

Any more information you could provide would be useful, but I'll take a look 👍

aaemnnosttv avatar Oct 21 '23 03:10 aaemnnosttv

@aaemnnosttv - yeah, the plugins I tested with were these:

https://solidwp.com/security/wordpress-two-factor-authentication/ (premium) https://wordpress.org/plugins/melapress-login-security/ (free)

I think it should be straight-forward to reproduce. Here's what I just did:

  • I created a new site
  • installed the meltapress 2fa plugin (free from wordpress.org)
  • configured it for just one-time code via email for all users
  • logged out
  • used wp-cli to generate login link
  • navigated to the login link.
  • error.

debug.log showed that the error being thrown in wp-includes/script-loader.php but I suspect that's a bit misleading.

I think this should be easy to reproduce if you're going to try to reproduce it. But if you're not seeing it let me know and I'll go ahead and make a video.

If I remember correctly, the iThemes/SolidWP one had a different error in the debug.log file.

Thanks.

elindydotcom avatar Oct 21 '23 03:10 elindydotcom