User Policies -> Global -> Prohibited usernames stopped working

Most likely connected: https://www.ads-software.com/support/topic/prohibited-user-names-regexp/

• This reply was modified 3 years, 4 months ago by sdfgkhdfjkh.

Hi! Please check the access lists. This setting does not affect IP addresses in the white access list.

It has nothing to do with access list, it’s empty.

I have symbols like ( ) [ ] @ _ – in my Prohibited usernames.

What’s the use of such special symbols without REGEX?

Some broken bots trying to bruteforce with [login]/[password] or (login)/(password), so it blocks them rght-away.
@ and . are used to login with email.
_ can be part of any username.
I have removed -, but I guess it can be used in username as well.

• This reply was modified 3 years, 3 months ago by sdfgkhdfjkh.

I’ve added [login] to the list. When attempting to log in with it, WP Cerber works fine and blocks the IP address as it has to. What’s on your list?

admin, page, 404, administrator, demo, badmin, editor, test, wpupdateuser, [email protected], wpupdatestream, affiliates, permanently, fascinating, admin1, testuser, wpmu, (login), login, administrwp, test1, admin123, preview, guest, anonymousfox, test2, teste, user123user, testing, xrumertest, 0x1999, test123, lucas, yongpeng, webmaster, visiteur, username, user, user1, user2, testtest, tester, temp, support, z_r, subscriber, student, sophie, useradmww2, secure, roottn, redazione, qwerty, quantri, prueba, prova, phukotler, member, manager, root, left_blank, 111, 123, 123123, 1234, 12345, 123456, demouser, asdasd, author, client, cliente, commons, jsjobs_employer, indoxploit, useradmin5, adminisstrator, adminis9, admini22, adminacc, admina, admin2, price, milkwood, magico, invitado, hanhqcled, linoleumjet, cocoa, gast, chymkuduc, asd, admintest, [login], diysitem, [login][login]2017, ninja, david, frank, a, antawn, gary, jsjobs_jobseeker, schatzi, dezibel, hoangnam, www, 403, jawex, admin8, fdias, masood, wpadminreq, celinab, adminlin, vmc, wp_rest_api, inovista, cpc, admin888, webcentre, powertrainsports, astra, rpttest1, a8xj9v9d0fa9a, shan-shanmugaesan

Basically more than 1 item in the list and it stops working.
So, just “admin” works fine.
But if I put “admin, page” it stops working.

Yes same for me.

This feature has been tested and now works flawlessly on thousand of websites. So this means another plugin, the theme, or some PHP code installed on your website interferes with WP Cerber.

@pozirk