Login Restriction by IP Address not working

[rankogrba]

I am using WPeMember for a few months now and everything seems to work fine.

Today I wanted to try a feature that I didn’t checked yet, but it is not working the way I thought it would.

The settings for “Login restriction by IP address” is set to 3. I tried it with a test user, logged in today from more than 3 IP addresses (5 to be precise), and nothing happened.

Is there something else I have not checked or I am not aware of?

[admin]

This issue usually arises from the way it is tested. Remember that if you are checking from different computers on your house, they will ALL have the same true IP address. Your connection provider will give you one IP address which you will be sharing among all your devices.

[rankogrba]

No, this is not the case.

Testing has been done like this:

1. a friend login in from work computer, checked the IP address (last login).

2. me login in from home computer, last login IP address changed (checked).

3. me login in from my mobile phone (on celular network), last login IP address changed (checked).

4. me login in from my server on azure, last login IP address changed (checked).

5. another friend login in from computer, last login IP address changed (checked).

[wzp]

Using the same eMember account user name and password?

[rankogrba]

Of course. Yes, the same wpemember account username and password.

[rankogrba]

Update:

Tried with another test account and this time when trying to login from 4th IP address, got a message that the number of login attempts is more than today’s limit (something like that).

My questions:

1. I thought that this 4th IP address and the account email address will end up in the blacklist but it didn’t. Is it not the way it should work?

2. The first account that wasn’t blocking after 3 different IP addresses was one with a “disposable” email address (@sharklasers.com). Could that be the reason why the blocking did not work?

[admin]

There is no blacklisting because that is a VALID user login. All you are saying is that, I don’t want to allow logging in from a maximum of X different IP address in one day. So yeah that feature simply locks the account from being used that day if it triggers the condition.

Blacklisting is a permanent block. That is not something you want to do to your paying customers unless you understand what you are really doing.

Email address has nothing to do with the IP blocking. If the IP condition is triggered then it will do that temporary lockout thing.

[Author]

Posts