• Resolved killerdog

    (@killerdog)


    Great plugin! Love it! Although, I do have some requests for future versions if I might leave some feedback… ??

    1: A captcha feature to immediately reset the soft lockout (the first lockout level). Preferably placing the captcha directly in the login error message itself, else if not possible, a link to a reset-login-counter page containing the captcha.

    2: Update htaccess with the blocked IP address when hitting the hard lockout (the aggressive lockout) in order to reduce the server load generated from all of the worst brute force offenders. As the aggressive lockout IP addresses are eventually removed from the database, so should they also be removed from the htaccess file to keep the file clean.

    Thanks for all your hard work with this plugin!!

    https://www.ads-software.com/plugins/wp-cerber/

Viewing 1 replies (of 1 total)
  • Plugin Author gioni

    (@gioni)

    Hi!

    Yes, you can :), but do not forget to leave your review here: https://www.ads-software.com/support/view/plugin-reviews/wp-cerber

    1. I am going to add ability to get unlock link to the admin’s email. It helps to unlock yourself. On using captcha – it maybe useful to add support for reCAPTCHA.

    2. I agree that using htaccess is certainly right way to block unwanted IPs. But it’s a big deal in some aspects. Reading/writing/modifying this file may lead to conflicts with other plugins. Also, we need to keep htaccess is up to date and don’t forget updating it constantly.
    There is also drawback: if you allow WP to write to the htaccess, that means that everyone can modify your htaccess file. Personally, I prefer to disable writing permission for it for security reasons.
    So, I consider using htaccess as additional functionality. Anyway, I have put it on the Future Features list.

Viewing 1 replies (of 1 total)
  • The topic ‘New features’ is closed to new replies.