Time to move on!

Nice work guys. Now that you have the registration IPs locked in wp_usermeta, maybe time has come to go a step further and add IP checking to the WP login, meaning Username, Password and Reg IP will be checked consistently.

1. If all matches up LET HIM IN
2. If client IP doesn’t match but Name and Password do, display a message like:
“IP address used for login doesn’t match with your registration IP-address. Please, set up the connection of your browser and WordPress through the same IP, then add your current IP to the list of authorized IP-addresses here… LINK with form”
3. If client IP doesn’t match as well as Name or Password, Autoban after X retries.

Cheers.

• This topic was modified 7 years ago by zoxee.