Ipstenu (Mika Epstein)

<p>We’ve all had this problem: a group of spammers from <code>mail.ru</code> are registering to your blog, but you want to keep registration open.  How do you kill the spammers without bothering your clientele?  While you could edit your theme’s <code>functions.php</code> and block the domain, once you get past a few bad eggs, you have to escalate.</p>
<p>Ban Hammer helps you do that by preventing unwanted users from registering.</p>
<p>On a single install of WordPress, instead of using its own database table, Ban Hammer pulls from your list of prohibited emails from the Disallowed Comment Keys feature, native to WordPress.  Since emails never equal IP addresses, it simply skips over and ignores them.</p>
<p>On a network instance, there’s a network wide setting for banned emails and domains. This means you only have <em>one</em> place to update and maintain your blocked list.  When a listed user attempts to register, they get a customizable message that they cannot register.</p>
<p>For advanced documentation, including how to use on WooCommerce, please visit <a href="https://github.com/Ipstenu/ban-hammer/wiki" rel="nofollow ugc">the Ban Hammer Wiki</a>.</p>
<ul>
<li><a href="https://github.com/Ipstenu/ban-hammer/" rel="nofollow ugc">Development</a></li>
<li><a href="https://github.com/Ipstenu/ban-hammer/wiki" rel="nofollow ugc">Wiki</a></li>
<li><a href="https://ko-fi.com/A236CEN/" rel="nofollow ugc">Donate</a></li>
</ul>
<h4>Privacy Policy</h4>
<p>This plugin does not track data outside of what WordPress already collects. It utilizes the submitted email address to validate the domain and compares it to the list of prohibited domains and emails. No additional data is processed.</p>
<h4>Credits</h4>
<p>Ban Hammer is a very weird fork of <a href="http://www.joeswebtools.com/wordpress-plugins/no-disposable-email/" rel="nofollow ugc">Philippe Paquet’s No Disposable Email plugin</a>. The original plugin was a straight forward .dat file that listed all the bad emails (generally ones like mailinator that are disposable) and while Ban Hammer doesn’t do that, this would not have been possible without that which was done before.</p>
<p>Many thanks are due to WP-Deadbolt, for making me think about SQL and TTC for StopForumSpam integration. MASSIVE credit to Travis Hamera for the StopForumSpam/cURL fix! And then props to Helen Hou-Sandí for not using curl at all. Protip? Use <a href="http://planetozh.com/blog/2009/08/how-to-make-http-requests-with-wordpress/" rel="nofollow ugc">WP_http</a> instead!</p>


Ban Hammer

Prevent people from registering via your disallowed comment keys.

Tony Archambeau

<p>A lot of brute-force attacks are performed on WordPress websites without you probably noticed it. These attacks are performed by computer programs and consists to try every possible password until to find the correct one. If you use a popular password such as “123456” or “qwerty” it’s very easy to access your website through a brute force attack.</p>
<p>Login Security is a plugin that tries to protect you against such attacks. Every successful or failed login attempts are recorded. You will probably discover that a lot of brute force attacks are performed on your website. This plugin can tell you how many times an IP address tried to access to the Back-Office of your WordPress website. Then you can easily block the access of this IP address in just “one click”.</p>
<p>On the tested websites there was an average of over 800 login attempts per day.</p>
<h4>Current features</h4>
<ul>
<li>Records every login attempts (failed or successful). Can be used to tell you when a user login</li>
<li>Display all the failed login or successful login with the associated IP, User-Agent and HTTP referer</li>
<li>Stats over the number of failed login during last 7 days and last 12 months</li>
<li>Discover which IP address tries the most to access your website</li>
<li>Banned an IP address</li>
<li>Multi languages : English, French (from : France, Canada, Belgium, Switzerland and Luxembourg)</li>
</ul>
<p>Want a WordPress developper? Want to add a translation? Feel free to <a href="http://en.tonyarchambeau.com/contact.html" rel="nofollow ugc">contact me</a>.</p>
<h3>How to uninstall Login Security</h3>
<p>To uninstall this plugin, you just have to de-activate the plugin from the plugins list.</p>


Login Security

Improves the security of the login page against brute-force attacks. Records every attempts to login.…

Ban Hammer vs Login Security