[Forum] Persistent wrong username and password error - need help

[kerry oki]

All my users, including myself get this error message when trying to sign into vbulletin 4:

Wrong username or password. You have used up your failed login quota! Please wait 15 minutes before trying again. Don't forget that the password is case sensitive. Forgotten your password? Click here!

_________

I have researched and tried the following:

added this line to the config file:

define('DISABLE_HOOKS', true);

Went into admin tools and reset the cookies and path

Reset the style to default via admin tools

Cleared my own cache and cookies, tried different browsers

Reuploaded the files for the forum

_____________

This occurred after I restored the forum using a back up mysql file from a couple years ago. When I first installed it, I was able to sign in as the Admin and the board was working fine. But when I signed out, I get the error message as above. I'm now unable to access the forum other than with admin tools.

What to do?

[TheNewOne]

1. what url are they using with www or with out
2. do you have a .htaccess file with your website address in there
3. what are the url settings in the admincp

[Lynne]

If you look in your session table, is everyone listed as having the same IP address?

[Govind4all]

If you look in your session table, is everyone listed as having the same IP address?

Yup i had same problem every one login shown in server IP

[Lynne]

You may want to see this thread - https://www.vbulletin.com/forum/show...ut-%284-1-8%29

[TheNewOne]

are you running cloudflare or something along these lines as I find it will give all members the same ip

[obetyance]

All my users, including myself get this error message when trying to sign into vbulletin 4:

Wrong username or password. You have used up your failed login quota! Please wait 15 minutes before trying again. Don't forget that the password is case sensitive. Forgotten your password? Click here!

_________

I have researched and tried the following:
added this line to the config file:
define('DISABLE_HOOKS', true);
Went into admin tools and reset the cookies and path
Reset the style to default via admin tools
Cleared my own cache and cookies, tried different browsers
Reuploaded the files for the forum
_____________

This occurred after I restored the forum using a back up mysql file from a couple years ago. When I first installed it, I was able to sign in as the Admin and the board was working fine. But when I signed out, I get the error message as above. I'm now unable to access the forum other than with admin tools.


What to do?

Fixed the problem myself.

My host settings somehow cause the forum to think everyone's IP is the same.

So I went to the control panel of my host and to the Mysql file. In the strike table, delete the file entries. This will let you sign in but won't solve the problem.

Then go sign into your forum , go to your Admin panel, and then and turn off the setting that makes the forum lock you out after five sign in attempts. In the Admin panel, go to Options = general settings = then select NO for this:

Use Login "Strikes" System
Setting this to no will disable the system that prevents a user (with a specific IP address) from logging into an account after entering an incorrect password 5 times.


SOURCE: http://www.vbulletin.org/forum/showthread.php?t=277203

- - - Updated - - -

ANOTHER SOLUTION:

The issue was that our server was behind a load balancing device that made the PHP variable $_SERVER['REMOTE_ADDR'] resolve to the load balancer's IP address. I'd like to have the environment changed so that I don't need to edit vBulletin code (makes updates even more of a hassle than they already are). If the environment can't be changed, you have to tell vBulletin to use something other than REMOTE_ADDR to get the users' IP addresses. Here are some solutions I found:

http://www.vbulletin.org/forum/archive/index.php/t-149401.html

http://forum.triphp.com/web-hosting-forum/14664-solution-vbulletin-showing-all-users-servers-ip-address.html

If you happen to be working with Rackspace and using their cloud server service, this is some useful info as well:

http://www.rackspace.com/knowledge_center/index.php/Why_does_every_visitor_to_my_website_have_the_same_IP_address

Thanks again for your help Lynne. You got me on track to solving this problem and I appreciate it.

SOURCE: https://www.vbulletin.com/forum/showthread.php/392520

[M.C.]

you may have this issue also if you have nginx + apache and have no mod_rpaf installed or properly configured. But thanks for above instructions!