How does "Requests to deny" work

let say the robots are sending the following parameters:
get params: a=1&key=35
post params: username=test&password=test

In the text area just set the parameters you want to deny separated by comma:

a, key, username, password

is it possible (works) if I add a full url?.
I am using Wordfence plugin too and some malicious visits are using the ?_wfsf=unlockEmail option and the banned IP (or IP range) gets free access.
I’ve already tried to use the ?_wfsf=unlockEmail (part of the url) but it doesn’t work
By the way.. awesome plugin.

Hi Dan Nita,

This plugin development is over and ofc. you can use the more improved version https://www.ads-software.com/plugins/pike-firewall/ Regarding the blocking by key/value just add the following:

_wfsf,unlockEmail

and will block.

Btw on the improved version e.g. pike-firewall probably there won’t be need of the url or adding keys, because this requests will be blocked by another ids / firewall features.

Regards