Solid Security – Password, Two Factor Authentication, and Brute Force Protection

Woke up to our customer’s website going down. Found out that the htaccess and wp-config files were both blank, completely empty. Everything is up to date (WP, Theme, Plugin, PHP). Restored those two files and deactivated this plugin, everything appears to be working normally.

Solid Security doesn’t have any support unless you’re a paid PRO customer with a login. Terrible customer support.

I’m using the Vimeo Gallery WordPress plugin to display my Vimeo portfolio on my website. After installing Solid Security, my portfolio stopped loading completely.

Because I can’t afford to have my portfolio offline, I removed Solid Security. The gallery started showing again, but as soon as I clicked on another portfolio item, it would freeze. In the end, I had to restore a backup of my website to fix everything.

There may be a configuration that resolves this, but I couldn’t figure out what was causing the conflict. I’m sure Solid Security is a solid plugin overall, just sharing this so other Vimeo Gallery WordPress plugin users are aware of a possible issue.

Great plugin overall, very solid and reliable in production.

When testing PHP 8.4, I’m seeing repeated deprecated notices (implicit nullable parameters) coming from Solid Security that can interfere with REST/AJAX responses in the admin. Everything is stable on PHP 8.3, so this looks like a PHP 8.4 compatibility gap rather than a configuration issue.

A future update addressing PHP 8.4 deprecations would be highly appreciated. Thanks for the continued work on this plugin.

By using next CSS rules

.auto-fold #wpcontent {
    padding-left: 0;
}

#wpcontent {
    padding-left: 0;
}

you break original WordPress CSS

#wpcontent {
    height: 100%;
    padding-left: 20px;
}

• This topic was modified 5 months, 3 weeks ago by Ilya.

I used to be very happy with the plugin. It did exactly what it needed to do, even if setup was a bit of a challenge.
Now it broke one of my sites 3 weeks in a row. First an empty wp-config file, then an error in the .htaccess (with 2 sites) and this week only the homepage of the site was live and all others were nowhere to be found (404). I deactivated this plugin and all of a sudden the pages had returned.
I am afraid I’ll have to look for another security app.