Skip to main content
We are currently experiencing a higher than average ticket volume and as such our responses may be delayed. Searching on our Help Center articles or going to our Community is also a great resource for answers.

Wordpress Toolkit: Errors in Security Status Updates

Comments

4 comments

  • perdrix
    After looking at the log report there were some further details: 1) Security measure "Change default administrator's username" was not applied due to the following issue: Error: Administrator with 'admin' username was not found. Warning: ini_set() has been disabled for security reasons in .../utils-wp.php on line 74 Warning: ini_set() has been disabled for security reasons in .../Runner.php on line 1298 2) "Security measure "Configure security keys" was not applied due to the following issue: Security keys were not fully applied."
    0
  • cPRex Jurassic Moderator
    Hey there! Since you found those additional details did you still have questions about these warnings?
    0
  • perdrix
    Since in both instances toolkit fails to cease reflecting the website having "critical security issues", then yes there are questions. Like how do I get these messages to go away without uninstalling toolkit or detaching the website (since this is happening to all websites on the server)... it implies the WordPress installation has a "critical security issue" when in fact it does not, because in both instances the information is set in the manner the script would have set it had it been able to. This same messaging appears in the CPanel area of the website and I would prefer not to have to tell 50+ clients that the website is secure regardless of what this toolkit says. #1 especially is a lame result from toolkit. As soon as it realized that admin user could not be found, it should have indicated that "this security measure is applied." It does not it still says " Applying this security measure is critical for WordPress website security."
    0
  • cPRex Jurassic Moderator
    Thanks for the additional details. I did reach out to our WordPress Toolkit developers, and they'd like to get access to the server. If possible, could you submit a ticket to our team and then post the number here so I can follow along?
    0

Please sign in to leave a comment.