Block invalid username ","

  • Resolved balestrierefariello

    (@balestrierefariello)


    9 years ago

    I know there’s a Login Security feature to immediately block the IP of users who try to sign in with certain usernames, but would a comma “,” be valid entry as a username in this field if there are several other user names blocked and this field is comma separated? For example, will the entry of the comma, followed by a comma [username1, username2, ,, username3], be a valid entry to block a comma “,” or would cause all usernames to not be recognized? Thanks.

    https://www.ads-software.com/plugins/wordfence/

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author WFMattR

    (@wfmattr)

    Currently, it is not possible to block a username that is a comma, by using this feature. Are you seeing a lot of attempts with a comma as the username?

    -Matt R

    Thread Starter balestrierefariello

    (@balestrierefariello)

    Too bad. Yes, lately, I see a few attempts per day using the comma as a username. Not a big deal, but it would be nice to automatically throttle the IP for any attempt to use a comma.

    Plugin Author WFMattR

    (@wfmattr)

    Depending on how your site is set up, you could also enable “Immediately lock out invalid usernames”. If you are the only user who logs in, that could be useful, as long as you don’t type your username incorrectly sometimes. Even then, if your lockout time isn’t set very long, it may still be worth it.

    If you have more than a few users who log into your site, it might not be the best option, though, since a typo by a real user can cause an immediate lockout, of course.

    -Matt R

    Thread Starter balestrierefariello

    (@balestrierefariello)

    Thanks, Matt. I have that option enabled and will continue to monitor.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Block invalid username ","’ is closed to new replies.