problems with site security

[kevin flynn]

Trying to order product, but can't log on, due to site security message?  "you do not have permission to enter", "Security-net" or some such...! Criminy.
Any fixes?

Kevin

This:  Sucuri WebSite Firewall - CloudProxy - Access Denied


What is going on?
You are not allowed to access the requested page. If you are the site owner, please open a ticket in our support page if you think it was caused by an error: https://support.sucuri.net. If you are not the owner of the web site, you can contact us at [email protected]. Also make sure to include the block details (displayed below), so we can better troubleshoot the error.

Block details
•Your IP: Loading...
•URL: http://bottlehead.com/my-account-2/?login=failed&wp-error=%253Cstrong%253EERROR%253C%252Fstrong%253E%253A%2BInvalid%2Busername.%2B%253Ca%2Bhref%253D%2522http%253A%252F%252Fbottlehead.com%252Fmy-account-2%252Flost-password%252F%2522%253ELost%2Byour%2Bpassword%253F%253C%252Fa%253E
•Your Browser: Loading...
•Block ID: XSS027
•Block reason: An attempted XSS (Cross site scripting) was detected and blocked.
•Time: Loading...
•Server ID: cp11004


Sucuri CloudProxy

CloudProxy is the WebSite Firewall from Sucuri. It stands between your site and the rest of the world and protects against attacks, malware infections, DDOS, brute force attempts and mostly anything that can harm it.

Not only that, but your sites get cached, speeding it up quite a bit. Interested? Visit https://sucuri.net/website-firewall

 

[kevin flynn]

Eventually was able to log on...
but that was strange.

Cheers,

K.

 

[Doc B]

Edit by Josh:
I have yet to encounter a user login problem that was anything other than a username/password issue. Once the username has been confirmed and the password either remembered or reset, the "problem" disappears. I have requested our website manager change the failed login page to make this clearer, but even the message above shows an error message stating a wrong username.

Typically this is due to attempting to log in from other than the IP address you registered from. For example we had a customer who usually accesses the online store from the East Coast via laptop attempting to order by smart phone from the West Coast. We are very intent to keep our customers' personal data secure and this is a side effect of that high security. If anyone is wishing to use more than one IP address to access their user account for orders let us know the additional IP address and we can white list it.

 

[Tarquinflimbim]

I am having the same issue.  It's my normal computer, and I'm at home, so normal IP range.

 

[fullheadofnothing]

The most common reason for this error is a wrong username or password. Read the URL in the original post, notice where it says: "Invalid%2Busername.%2"

Do note that the accounts for the forum and shopping cart are completely separate. By default, the user name is your e-mail, and the password can be reset at the login page http://bottlehead.com/my-account-2/ if necessary.

I also note that you haven't posted anything for several years. If you have not made a recent purchase (Since August 2014, when our site was redone) you would not have a shopping cart account at all.

 

[Mordicai]

Same problem here. My home computer, normal log in. I accessed the site just fine but when I went to order  received that notification, Finally gave up and called Queen instead.

 

[fullheadofnothing]

Again, I reiterate, these problems are based on password issues. NOT website issues. Multiple orders have come in today. There is NOTHING wrong with the website. If you are having issues, use the password reset option on the login page, as that will resolve your issue. If you cannot reset your password on your own, email me at replacementparts at bottlehead dot com and I can reset your password for you. We are not in the office on the weekends. DO NOT call on the weekend, as this will achieve nothing to resolve your problem.

 

[JamieMcC]

Do note that the accounts for the forum and shopping cart are completely separate.

lol that explains four or so years of swearing at the shopping cart each time I have wanted to place an order  :

Just warming up the Eros getting ready for some Sunday morning tunes 

 

[fullheadofnothing]

An update: Tarquinflimbim has multiple email addresses and was trying to use the wrong one. He is now able to login without issue, because he found the problem.