chrisguitarguy

<p>Simple login lock down is a way to protect your WordPress blog from brute force login attacks.</p>
<p>How it works:<br />
1. An attacker attempts to login and fails<br />
2. Simple Login Lockdown record that failed login<br />
3. After a certain number of failed attemps (defaults to five), further attemps to access the wp-login.php page are blocked for a time (defaults to one hour).</p>
<p>If you happen to forget your password and make a failed login attemp yourself, the plugin will clear out the lockdown count data on successful login.</p>
<p>Note: This uses $_SERVER[‘REMOTE_ADDR’] directly.  If you’re behind a proxy (load balancer, etc), it’s not going to work as expected.  Eg. Several folks could be attempting logins at once, and all fail.  As such, the plugin would pick up on all those requests coming from the same IP — the load balancer — and lock the login down.  No good.  If you’re using a load balancer or in some other situation where you’re behind a proxy, use this as an example and write your own. Or filter the IP as your desire using <code>cd_sll_pre_ip</code>.</p>
<h3>Hooks</h3>
<pre><code>simple_login_lockdown_ip -- Alter the requesting IP address. Might be useful if you site is behind a proxy or load balancer.

simple_login_lockdown_allow_ip -- Allows you to "whitelist" an IP address. It first when a log attempt fails before the attempt count is incremented. Return true and no count will be taken for the IP.

simple_login_lockdown_should_die -- A filter that allows you to prevent the login page from `die`ing if a the requesting IP is temporarily blacklisted or the login limit has been reached.

simple_login_lockdown_count_reached -- Fires when the requesting IP has reached its count and will be added to the blacklist for your time limit.

simple_login_lockdown_attempt -- Fires when a login attempt is made but the requestin IP is blocked to to excessive requests.

simple_login_lockdown_response -- Change the HTTP response code of that gets sent when a blacklisted IP attempts to login.

simple_login_lockdown_time_values -- Allows you to alter values in the login lockdown time dropdown in the admin area.
</code></pre>


Simple Login Lockdown

Simple Login Lockdown prevents brute force login attacks/attempts on your WordPress installation.

Marcus (aka @msykes)

Marcus

Pixelite

<p>Login With Ajax is for sites that need user logins or registrations and would like to avoid the normal wordpress login pages, or add AJAX effects to the regular login pages. This plugin adds the capability of placing a login widget in the sidebar with smooth AJAX login effects.</p>
<p>Some of the features:</p>
<ul>
<li>AJAX-powered logins, no screen refreshes!
<ul>
<li>Login</li>
<li>Registration</li>
<li>Remember/Reset Password</li>
</ul>
</li>
<li>PassKeys <strong>(new in 4.4)</strong>
<ul>
<li>Next-Generation security, no passwords required!</li>
<li>Users can log in without a username AND password.</li>
<li>Biometric support (fingerprint, face ID, etc.)</li>
</ul>
</li>
<li>2FA – Two-Factor Authentication
<ul>
<li>TOTP – Time-based One-Time Password</li>
<li>Scan a QR code with popular authenticator apps like Google Authenticator, Authy, etc.</li>
<li>Email – Send a code to the user’s email address</li>
<li>Backup Codes – Generate and use backup codes</li>
</ul>
</li>
<li>Integrate 2FA setup options in other plugin account pages
<ul>
<li>WooCommerce</li>
<li>BuddyPress</li>
<li>BuddyBoss</li>
</ul>
</li>
<li>“AJAXify” other login forms
<ul>
<li>Create a better login experience in the default WP login form with AJAX effects for logins, password recovery and registration.</li>
<li>Regular WP login and registration forms</li>
<li>WooCommerce login forms</li>
<li>Events Manager login forms</li>
</ul>
</li>
<li>Many ways to display and customize your login form:
<ul>
<li>Gutenberg Blocks</li>
<li>Full-site editor compatible</li>
<li>Widgets (classic and blocks)</li>
<li>Shortcode</li>
<li>Template Tags</li>
<li>PHP API</li>
</ul>
</li>
<li>Flexible templates and options
<ul>
<li>Multiple templates to choose from</li>
<li>Including Modal/Pop-Up login forms</li>
<li>Responsive and Accessible!</li>
<li>Choose a base color for each individual login form.</li>
<li>Individual display options via all display methods (e.g. Gutenberg Blocks, Shortcode etc.)</li>
<li>Create your own upgrade-safe templates, or override our own ones.</li>
</ul>
</li>
<li>Custom Login/Logout redirections
<ul>
<li>Redirect users to custom URLs on Login and Logout</li>
<li>Redirect users with different roles to custom URLs</li>
<li>WPML – Language-specific redirects</li>
</ul>
</li>
<li>Modify registration email templates</li>
<li>Other Features
<ul>
<li>Disable CSS styling (via shortcode or PHP display methods)</li>
<li>SSL-compatible</li>
<li>Fallback mechanism, will still work on javascript-disabled browsers</li>
<li>Compatible with WordPress, MultiSite, BuddyPress and many other plugins</li>
</ul>
</li>
<li>Developer Friendly
<ul>
<li>Multiple PHP and JS hooks</li>
<li>Overridable CSS and JS files</li>
<li>Easy-to-customize and overridable template files</li>
<li>Well-documented</li>
</ul>
</li>
</ul>
<p>First released in 2009, the oldest login plugin for WordPress, regularly maintained and updated since then!</p>
<h4>Pro Add-On Features</h4>
<p>As of version 4.0, <a href="https://loginwithajax.com/" rel="nofollow ugc">we now offer a Pro add-on</a> which extends Login With AJAX with multiple new features:</p>
<ul>
<li><em>Security Features</em> – Harden the security of your login forms
<ul>
<li>2FA – Additional Two-Factor Authentication Methods:</li>
<li>SMS – Send a code to the user’s phone</li>
<li>WhatsApp – Send a message, user clicks a button, done!</li>
<li>Telegram – Send a message, user clicks a button, done!</li>
<li>reCaptcha (v2, v2 Invisible and v3)</li>
<li>Login limiter</li>
</ul>
</li>
<li><em>3rd Party Page Builder Blocks/Widgets/Modules</em>
<ul>
<li>Divi</li>
<li>Elementor</li>
</ul>
</li>
<li>More on the way!</li>
</ul>
<h4>Getting Help/Support</h4>
<blockquote><p> Version 4 is a major overhaul of the plugin, which has remained largely unchanged for 11 years yet remained a staple tool for logins to WordPress! Changes include a complete rewrite of login templates updated to modern stadnards and practices, as well as new WP features such as Gutenberg Blocks. </p></blockquote>
<p>If you’re stuck, we strongly suggest visiting our <a href="https://docs.loginwithajax.com/" rel="nofollow ugc">Documentation Site</a> which contains exensive information and advice on setup and troubleshooting.</p>
<p>If you have any problems with the plugin after reading our <a href="https://doocs.loginwithajax.com/troubleshooting/" rel="nofollow ugc">Troubleshooting</a>, please visit our freely supported <a href="https://wordpress.org/support/plugin/login-with-ajax" rel="ugc">community forums</a>, or <a href="https://loginwithajax.com/gopro/" rel="nofollow ugc">Go Pro</a> for premium support.</p>
<h3>Notes</h3>
<p>Please visit our <a href="https://docs.loginwithajax.com" rel="nofollow ugc">documentation site</a>, which is regularly and extensively maintained and updated with all the information relevant to getting started, advanced setup and troubleshooting common issues.</p>


Login With Ajax – Fast Logins, 2FA, Redirects

I have it working on several websites, awesome!

Add beautiful login forms with smooth AJAX login/registration effects, 2FA support, custom redrection options and many more login-related features!

Simple Login Lockdown vs Login With Ajax – Fast Logins, 2FA, Redirects