Matt Miller

mikemm01

Did you find this plugin helpful? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/ip-blacklist-cloudflare/" rel="ugc">leaving a 5-star review</a>.
Cloudflare provides security and optimization services for websites all around the internet. WordPress sites are often attacked by bots or hackers and, while Cloudflare has preset firewall rules to help, it doesn’t always filter out all malicious activity.
Cloudflare IP Blacklist allows WordPress admins to add a list of prohibited usernames and if someone attempts to log in with one of these usernames, this users IP address is automatically added to the Cloudflare blacklist. By doing this, the next time this user attempts to load the site, they will be blocked by Cloudflare before their requests get to your site’s server. Add an extra layer of security today to your site!
** This plugin relies on the use of Cloudflare, a third-party service that increases security and performance for web sites and services across the internet. For more information, visit the <a href="https://www.cloudflare.com/" rel="nofollow ugc">Cloudflare website</a> and their <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">privacy policy</a>. This plugin is not officially endorsed, built or maintained by the Cloudflare team; rather, we are a development company that uses their services every day! **
<h3>Request</h3>
If you find that a part of this plugin isn’t working, please don’t simply click the WordPress “It’s broken” button. Let us know what’s broken in <a href="https://wordpress.org/support/plugin/ip-blacklist-cloudflare/" rel="ugc">its support forum</a> so we can make it better.

IP Blacklist for Cloudflare

Blacklist IP addresses that attempt to login with a banned username through Cloudflare.

edward_plainview

Prevent password resets or changes to specific users or user roles. User-specific exceptions to the sweeping user roles can be set. The user’s password is then protected from modification:
<ul>
<li>In the user’s profile editor</li>
<li>Using the password reset link in the login window</li>
</ul>
The settings are available to either the super admin on the network, or normal admins on a single installation. If you wish to hide the settings completely, put the following in your wp-config.php:
<pre><code>define( 'PLAINVIEW_PROTECT_PASSWORDS_HIDE', true );
</code></pre>
Requires PHP 5.4.

Plainview Protect Passwords

I love that is works well with network sites so I don't have to replicate my settings across each of my sites. 

The only issue I ran into is that only network roles are added to the network settings. Maybe it's by design, but it would be awesome if it picked up the roles from the sites because that is where plugins like User Role Editor and WooCommerce have registered them. In order to protect these I would have to modify the settings for each of my network sites separately. Annoying but totally doable. 

Thanks for the quick and easy solution today!

Gets the job done

Selectively protect passwords from being reset or modified.

IP Blacklist for Cloudflare vs Plainview Protect Passwords