Hi there,
Any plans to support additional updates to the plugin so that it can get reopened?
If not, any interest in passing it along so that we may make said updates and get it reopened?
Many, many thanks for all of you efforts to date.
]]>While trying to access /wp-admin my developer was greeted with a 404 Not Found page. He was able to login successfully initially, but then immediately was booted out. I disabled the plugin, removed IP addresses denied in .htaccess, and he was able to access the WP dashboard again.
If you’d like more info to help diagnose this issue let me know and I’ll try to provide it.
I’ve been pleased with this plugin for years but just noticed it hasn’t been updated in a while. Falsely flagging users trying to access the dashboard is one thing – but I certainly hope that normal website viewers haven’t been given 404’s too.
]]>Plugin sometimes write in htaccess like this
deny from
Options without IP
After this server return Error 500
]]>We have used the Brute Force Login Protection plugin on our website. We want to update the WP version to the latest. But this plugin shows a compatibility issue with new WP version.
Are you in process to launch your new updates and support for this plugin?
Does this plugin supports protection for WooCommerce login/register forms?
Woo does register new user roles, therefore it should use the same login/register forms from WordPress. Or am I wrong?
Hello, there,
I like to use the plugin very much. But I have to tell you that my website has recently been added to the Google Blacklist, because I added an older plugin to my website. Now I swore to myself to remove plugins that won’t get an update for 2 years for security reasons, so that something like this won’t happen to me anymore.
Greetings
Cronka
I’ve build a number of new \ fresh servers recently that I installed this plugin on via the WP CLI interface. When I go to log in it’s 403ing, without a single attempted login.
I’ve used it for ages with no issues, so it’s a recent problem.
]]>Hello,
ist this plug-in compliant with GDPR?
THX in advance.
Charly
Hi
Please add an option to unblock IPs automatically after x days.
]]>Great, Great plugin!
But not support blocking specific IP addresses behind CDN, CloudFlare or proxy.
It would be useful, if this plugin would handle X-Forwarded-For header.
For example:
SetEnvIf X-FORWARDED-FOR 43.252.228.133 DenyIP
SetEnvIf X-FORWARDED-FOR 43.252.228.133 DenyIP
Order allow,deny
Deny from env=DenyIP
Allow from all
]]>
Hi,
will this awesome plugin be updated to work with Apache 2.4, and its new use of .htaccess? (‘Require’ instead of ‘Allow from’, etc.)
]]>Hi. Is there a way to clear out the blocked IP list in the plugin’s settings? The list gets long very quickly.
]]>Hello,
Will this plugin work on Windows Server at all?
Thanks!
]]>for over 24 hours ive had tens of thousands of visitors, it started with one site and has went to all of them
will the plugin stop it automatically, theres thousads of IPs
if not can you suggest a plugin or whatever
]]>I Uninstalled Brute Force Login Protection due to it blocking people who were not hacking my site. I am still getting emails from the plugin.
The app is deleted from the plugins folder, doesn’t appear in plugins list.
What did I miss?
]]>Hi,
I recently customized the URL log in page using BruteForce. I was careful to note that login… but now when I try to go there, I’m getting a “404 Not Found” page. Any help is greatly appreciated…
-jc
]]>I set my attempts to 2 – yet the last IP attempted 20 times. The plugin does not seem to block automatically. I have to block them manually in order for it to work. Please help.
]]>I recently made some changes & upgrades to my site.
In order to make everyone log in again to ensure changes are used I voided my cookies by changing the cookie hashes in wp-config
.
This however meant that anyone visiting the site receives a brute force ban instead so I had to put the old ones back.
Your insights to this would be much appreciated as I have always previously used that method to ensure everyone logs in again.
]]>In the last few days I had 50 IP addresses blocked.
First of all, the biggest problem of the plugin is that it keeps those blocked for ever, why?
Another problem is that I tried to unblock those 50 IDs only to find out that I had to do it one at a time and wait for the page to refresh, each time. Come on guys, seriously? Is it so hard to have the ability to select ALL blocked IPs and unblock them at the same time?
One more suggestion, why don’t you allow the function to block an IP for a chosen period?
https://www.ads-software.com/plugins/brute-force-login-protection/
]]>Hi I have accidentally blocked our own IP address. How can I undo this?
https://www.ads-software.com/plugins/brute-force-login-protection/
]]>Thanks for a great plugin. I have found something, though, that doesn’t work as expected.
In .htaccess, the line
ErrorDocument 403 "Custom message"
has no effect, unless these lines are removed:
<FilesMatch ".*\.(php|html?|css|js|jpe?g|png|gif)$">
</FilesMatch>
Instead of the custom message, a blocked visitor is presented with the standard Apache
Forbidden
You don't have permission to access / on this server.
Not immediatly after being blocked, but on the following attempts – when the IP has been added to .htaccess.
]]>Any chance you might add the feature of optionally labelling IP addresses in the whitelist? It’s unlikely to be a long list, and it would be handy to be able to identify with a glance of what belongs to who, or a description, a date added, or something.
https://www.ads-software.com/plugins/brute-force-login-protection/
]]>Hi,
I’ve tried this plugin v 1.4 for a couple of days. I’ve been locked out twice in the course of two days so I’m giving up. Unclear if it’s my WP version (4.4.1) or if it’s my use of WP Fastest Cache plugin.
https://www.ads-software.com/plugins/brute-force-login-protection/
]]>This plugin has been working fine for a couple of months. However, late last night it blocked an IP and instead of appending it to the blocked list it cleared my entire .htaccess except for the following:
# BEGIN Brute Force Login Protection
<FilesMatch “.*\.(php|html?|css|js|jpe?g|png|gif)$”>
order deny,allow
deny from XXX.XXX.XXX.XXX (blocked IP)
</FilesMatch>
# END Brute Force Login Protection
Which brought my site down. Any idea why? Panicked “the site’s down” calls on Saturday afternoon are no fun. ??
https://www.ads-software.com/plugins/brute-force-login-protection/
]]>Since early December, Brute Force Login Protection continues to report that IP addresses are blocked but doesn’t write them to the .htaccess file. I thought a new release was due several weeks ago that would fix this but haven’t seen any updates yet.
https://www.ads-software.com/plugins/brute-force-login-protection/
]]>I see
192.168.0.121
blocked. Isn’t this a local ip address range or i’m wrong ?
https://www.ads-software.com/plugins/brute-force-login-protection/
]]>Since i updated to wordpress 4.4 it says Brute Force Login Protection error: .htaccess file not found.
i tried to delete the htaccess file, save permalinks to create the file by wordpresss but it doesn’t work. i also tried to change permissions…
Thanks for your help!
https://www.ads-software.com/plugins/brute-force-login-protection/
]]>Basically it is a VPS, and the the wp website is in /public_html
I place /public_html and tried public_html, but still not finding htaccess file.
With my dedicated server no problem when i use /home/username/public_html/websitename/
But with virtual private server, /public_html doesn’t work.
ANY suggestions?
Thank you!
https://www.ads-software.com/plugins/brute-force-login-protection/
]]>Hi,
On several sites now I’ve had an issues with the plugin not correctly updating htaccess files. E.g. today we had a site giving 500 error because the htaccess file was missing code relating to your plugin. It had
# END WordPress
deny from 194.58.111.164
rather than
# END WordPress
# BEGIN Brute Force Login Protection
<FilesMatch “.*\.(php|html?|css|js|jpe?g|png|gif)$”>
order deny,allow
deny from 194.58.111.164
Is this a known issue?
Tks
Alan
https://www.ads-software.com/plugins/brute-force-login-protection/
]]>I updated my server to Apache 2.4 and this plugin stopped working. It seems like it does not support the Apache 2.4 syntax.
https://httpd.apache.org/docs/2.2/howto/access.html
https://httpd.apache.org/docs/2.4/howto/access.html
Old: Deny from 10.252.46.165
New: Require not ip 10.252.46.165
Can you please add Apache 2.4 support?
I also posted it at Github, I don’t know where I “should” post it: https://github.com/jpkleemans/Brute-Force-Login-Protection/issues/3
https://www.ads-software.com/plugins/brute-force-login-protection/
]]>