Is it possible to auto-block specific user names?

  • Resolved zm11011

    (@zm11011)


    8 years, 8 months ago

    Is it possible to block specific user names such as admin or any types of user name which I want to block?

    I know there is “non-existent” username blocking but this is not useful as any user can easily enter wrong ID by mistake if they got blocked by one mistake there will be lots of complaining.

    what is main difference between Rename Login Page and Cookie Based Brute Force Prevention? It looks like both using different admin login URL.

    Thank you.

    https://www.ads-software.com/plugins/all-in-one-wp-security-and-firewall/

Viewing 7 replies - 1 through 7 (of 7 total)
  • Thread Starter zm11011

    (@zm11011)

    I checked Brute Force Prevention. but there are still log-in try with username of admin from random different locations.

    Thread Starter zm11011

    (@zm11011)

    I think It’s because they try to log-in my front-end page which is customer log-in, not admin page?

    Plugin Contributor wpsolutions

    (@wpsolutions)

    I checked Brute Force Prevention. but there are still log-in try with username of admin from random different locations

    If you have hidden your login page using one of the brute force features then they are probably targeting your xmlrpc.php file and not your login page.
    If you are on apache server you can prevent this by enabling the “pingback protection” feature in the firewall menu.

    Thread Starter zm11011

    (@zm11011)

    Hi.

    Yes, I can see those try from my website https://www.winebox.co.nz/xmlrpc.php

    Okay, it says NOTE: You should only enable this feature if you are not currently using the XML-RPC functionality on your WordPress installation.

    But I don’t know what whether if my site is using XML-RPC functionality currently or not.

    Is there any tip to check it?

    Plugin Contributor mbrsolution

    (@mbrsolution)

    @zm11011 do you log in using an APP through your mobile devices, like tablet or smartphone to edit or manage your WordPress website? If not then you don’t need this feature enabled.

    Thread Starter zm11011

    (@zm11011)

    Hi.

    I don’t use any APP, just using smartphone browser, and my website is woocommerce website.

    is there any harm to website functionality or customer use other than Using APP?

    Thank you.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    As far as I know no, there is no harm to website functionality. I never update any of my websites via a mobile device or any APP. I always use my laptop, desktop website or via a single control dashboard using ManageWP.

    Kind regards

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Is it possible to auto-block specific user names?’ is closed to new replies.