Prohibited usernames case sensitive

Hi!

1. All usernames specified without using REGEX are case-sensitive.
2. For consistency reasons, all entries in the list must be lowercase.
3. To specify prohibited usernames in a case-insensitive manner, you need to use REGEX. For instance for the admin username specify /admin/. It will work for any case used by an offender.

Hi

Thanks
I will update my list with Regex

Regards

Johan

Hi Gioni @gioni

I followed your instructions and used Regex
Screenshot https://prnt.sc/tuyz4d

It showed the login attemp with prohibited username but it didn’t block the IP
Screenshot https://prnt.sc/tuyxq1
Previous attemps, without Regex, blocked the IP

I have tried it on 2 websites
I changed back to username without Regex and IP is blocked again
Screenshot https://prnt.sc/tuz2cl

Is it because the username is in between [ ] ?

Do not use square brackets.

It does not work !
The username used by bots to attempt login as square brackets

I have just tried to use /login/
Screenshot https://prnt.sc/tuzfef

Username is not prohibited any more, it does not exist and IP is not blocked
Screenshot https://prnt.sc/tuzf3c

It’s because your REGEX is wrong. For the username [login] it must be /\[login\]/ since the login in your example contains square brackets. Anyway, in the upcoming version non-REGEX entries will be processed in a case-insensitive manner.

You can play with REGEX online, e.g. here: https://regex101.com/

Hi Gioni

Thanks for your answer !
I will wait next version then

Hi Gioni

I have updated to latest version
It works fine and it is way more practical and efficient than using Regex on username list

That also makes Cerber fully compatible with username availabilty checker from Buddydev https://buddydev.com/plugins/bpdev-username-availability-checker/

Thanks for your support

Regards

Johan

You’re welcome!

I still don’t see where to enter these usernames.