User Enumeration

  • Resolved Website Rob

    (@website-rob)


    1 year, 10 months ago

    Greetings,

    Upon a default install with no changes made, I see this added in wp-config.php

    // User Enumeration.
    define('MEOW_CORE_ENUMERATION', false);
    define('MEOW_CORE_ENUMERATION_DIE', false); // Requires …ENUMERATION=true.
    define('MEOW_CORE_ENUMERATION_FAIL', true); // Requires …ENUMERATION=true.

    Being as the 3rd define requires the first, I don’t know if that is mis-coded or not. I do have security rules within the .htaccess file restricting access by IP address. Does the plugin read the .htaccess file or does it do a check of some sort?

    Thanks

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Blobfolio

    (@blobfolio)

    Hi @website-rob,

    The wp-config constants correspond directly to settings in the GUI, which is why all three enumeration options are listed separately.

    That tab is merely provided as a reference for you. Those constants won’t be in your wp-config.php file unless you add them yourself. (Anything defined in wp-config.php will no longer be changeable via the settings page.)

    If, for example, you found that forced errors didn’t work correctly on your server, you could define only the DIE constant as a way to prevent yourself from accidentally turning it on in the future.

    If you’re already handling enumeration-type logic via .htaccess, you can leave Meow’s functions disabled. Server-side controls are more efficient than PHP ones. ??

    Thread Starter Website Rob

    (@website-rob)

    Looking at it in the light of day, I understand more thoroughly the logic and functionality of the option. Nice touch.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘User Enumeration’ is closed to new replies.