About: Cheryl Del Colliano

Bruce,
Unfortunately I did not have logging enabled until after the incident. I was not aware that they were off (because I used to have them on all the time before upgrading to the latest plugin version.)

They are on now, so I suppose I have to wait for something like this to happen again before we know what happened?

I’ve deactivated all plugins that would affect any sort of member details and still getting same weird results when I do a search.

I’m running the site on a custom theme based off of Twenty Eleven, but have not changed core functionality, just the looks of things.

Any other ideas why this might be happening?

Thank you Bruce. It would really mean alot to me if anyone on your development team had any ideas on how we could keep sharing to a minimum. I have a temp solution for Safari Reader, but am very stumped on the “Mail contents of this Page” tool.

I know that some of my subscribers are sharing this way, and again I do know that it will be impossible to completely lock everything down these days. People will sharing it however they can….but I would just like to see if it’s possible.

Thanks!

So help me understand….when it says “punish for 15min”, this just means that they will not be able to log in for 15min. But after the 15 min, does their IP counter reset?

Or does it reset after the 12hours, which is what I have it set on…. “1 IP every 12 hours”.

It doesn’t happen often, but it does happen on rare occasion. I havn’t seen a pattern between those that this has happened. I suppose from now on if it happens again, then I will track everything to see if I can find some anomolies.
Thanks for your help!

So from the looks of it, all of my sign up form shortcodes and upgrade form shortcodes have the correct custom attribute set to “insidemusicemedia.com”.

So if it works sometimes, and is left out other times, what could be causing that? That is confusing since the shortcodes are the same and havn’t been chnaged.

Bruce,
Thank you for your response. I looked over the “Shortcode Attributes (explained)” page and according to the custom attribute given in the description, I have exactly what is needed. My custom attribute is simple “insidemusicmedia.com”. Should it be something else?

The weird thing is that this only happens every so often. Most of the time is works fine! What else could be a reason for this happening? Any common issues out there that result in something like this?

Appreciate your help

i understand. NO worries, I wasn’t asking for a debug. Just wanted to know if it looked like I was on the right track.

Thanks for all of your help.

So I’ve attempted at adding a filter and I’m not a php wizard!

This is an attempt to change the IP restrictions length from 30 days to 24 Hours. Does this look about right?

<?php
add_filter("ws_plugin__s2member_ip_restrictions__concurrency_time_per_ip", "set_new_restrict_period");
function set_new_restrict_period($original_value, $vars = array())
	{
		if($original_value !== "24 Hours")
			return ($my_custom_value = "24 Hours");
 
		else # Return original value.
			return $original_value;
 
	}
?>

This is in my mu-plugins folder.

Will this do the trick?

Bruce,

Again, I’m having more and more people complaining (and leaving) as members of our site due to this issue. I am actually working for the owner of the site, and he wants nothing less than a 5 IP limit, however, wants everyone to be able to access the site via mobile (as they should). I’ve expressed that there is nothing that pleases both sides (as you suggested in your previous response), and that just frustrates him.

Do you have others that struggle with this? And if so, how are they dealing with it?

Any thoughts? I’m sorry if I’m being a pain, but we just want to know the best solution.

Thank you!

Bruce,
Thanks for the reply and thanks for the code snippet.

I would also like to know your thoughts on account security. One of the biggest problems that we’ve had in the past is finding out we had MANY people sharing accounts. We want to try and stop this as much as possible, and we had initially thought that the IP restriction would work great.

However we are getting many subscribers that are reaching their limits and my belief is that it’s because of the mobile devices and how they are dealt a unique (dynamic) ip address upon every connection over a 3g or 4g network.

Right now we are limited to 5 IP, which doesn’t seem to last long especially for our travelers. What we really want is to just keep people from sharing their accounts with other people to get our content. Is there a different way that we secure user accounts than by ip address?

I’m sorry to keep bringing it up. Thanks for your input.

By the way,

I also am curious, since all their credit card info is in the logs, is there a way to capture information like their card’s expiration date from the log? Or perhaps before the info is sent from the form to Paypal.

Would love a way to notify folks of their expiring credit cards before they expire and trying to find a way to do that.