Bottlehead Forum

General Category => General Discussion => Topic started by: kevin flynn on March 15, 2016, 09:17:45 AM

Title: problems with site security
Post by: kevin flynn on March 15, 2016, 09:17:45 AM
Trying to order product, but can't log on, due to site security message?  "you do not have permission to enter", "Security-net" or some such...! Criminy.
Any fixes?

Kevin

This:  Sucuri WebSite Firewall - CloudProxy - Access Denied

 
What is going on?
 You are not allowed to access the requested page. If you are the site owner, please open a ticket in our support page if you think it was caused by an error: https://support.sucuri.net. If you are not the owner of the web site, you can contact us at [email protected]. Also make sure to include the block details (displayed below), so we can better troubleshoot the error.
 
Block details
•Your IP: Loading...
ʉۢURL: http://bottlehead.com/my-account-2/?login=failed&wp-error=%253Cstrong%253EERROR%253C%252Fstrong%253E%253A%2BInvalid%2Busername.%2B%253Ca%2Bhref%253D%2522http%253A%252F%252Fbottlehead.com%252Fmy-account-2%252Flost-password%252F%2522%253ELost%2Byour%2Bpassword%253F%253C%252Fa%253E
ʉۢYour Browser: Loading...
ʉۢBlock ID: XSS027
ʉۢBlock reason: An attempted XSS (Cross site scripting) was detected and blocked.
ʉۢTime: Loading...
ʉۢServer ID: cp11004
 

Sucuri CloudProxy
 
CloudProxy is the WebSite Firewall from Sucuri. It stands between your site and the rest of the world and protects against attacks, malware infections, DDOS, brute force attempts and mostly anything that can harm it.
 
Not only that, but your sites get cached, speeding it up quite a bit. Interested? Visit https://sucuri.net/website-firewall
 
Title: Re: problems with site security- access granted
Post by: kevin flynn on March 15, 2016, 10:29:21 AM
Eventually was able to log on...
but that was strange.

Cheers,

K.
Title: Re: problems with site security
Post by: Doc B. on March 15, 2016, 10:55:38 AM
Edit by Josh:
I have yet to encounter a user login problem that was anything other than a username/password issue. Once the username has been confirmed and the password either remembered or reset, the "problem" disappears. I have requested our website manager change the failed login page to make this clearer, but even the message above shows an error message stating a wrong username.

Typically this is due to attempting to log in from other than the IP address you registered from. For example we had a customer who usually accesses the online store from the East Coast via laptop attempting to order by smart phone from the West Coast. We are very intent to keep our customers' personal data secure and this is a side effect of that high security. If anyone is wishing to use more than one IP address to access their user account for orders let us know the additional IP address and we can white list it.
Title: Re: problems with site security
Post by: Tarquinflimbim on May 13, 2017, 08:03:42 AM
I am having the same issue.  It's my normal computer, and I'm at home, so normal IP range.
Title: Re: problems with site security
Post by: fullheadofnothing on May 13, 2017, 09:54:17 AM
The most common reason for this error is a wrong username or password. Read the URL in the original post, notice where it says: "Invalid%2Busername.%2"

Do note that the accounts for the forum and shopping cart are completely separate. By default, the user name is your e-mail, and the password can be reset at the login page http://bottlehead.com/my-account-2/ if necessary.

I also note that you haven't posted anything for several years. If you have not made a recent purchase (Since August 2014, when our site was redone) you would not have a shopping cart account at all.
Title: Re: problems with site security
Post by: Mordicai on May 13, 2017, 03:17:08 PM
Same problem here. My home computer, normal log in. I accessed the site just fine but when I went to order  received that notification, Finally gave up and called Queen instead.
Title: Re: problems with site security
Post by: fullheadofnothing on May 13, 2017, 07:25:34 PM
Again, I reiterate, these problems are based on password issues. NOT website issues. Multiple orders have come in today. There is NOTHING wrong with the website. If you are having issues, use the password reset option on the login page, as that will resolve your issue. If you cannot reset your password on your own, email me at replacementparts at bottlehead dot com and I can reset your password for you. We are not in the office on the weekends. DO NOT call on the weekend, as this will achieve nothing to resolve your problem.
Title: Re: problems with site security
Post by: JamieMcC on May 13, 2017, 10:12:11 PM

Do note that the accounts for the forum and shopping cart are completely separate.


lol that explains four or so years of swearing at the shopping cart each time I have wanted to place an order  ::)

Just warming up the Eros getting ready for some Sunday morning tunes  :)
Title: Re: problems with site security
Post by: fullheadofnothing on May 14, 2017, 05:16:52 AM
An update: Tarquinflimbim has multiple email addresses and was trying to use the wrong one. He is now able to login without issue, because he found the problem.