chrisguitarguy

<p>Simple login lock down is a way to protect your WordPress blog from brute force login attacks.</p>
<p>How it works:<br />
1. An attacker attempts to login and fails<br />
2. Simple Login Lockdown record that failed login<br />
3. After a certain number of failed attemps (defaults to five), further attemps to access the wp-login.php page are blocked for a time (defaults to one hour).</p>
<p>If you happen to forget your password and make a failed login attemp yourself, the plugin will clear out the lockdown count data on successful login.</p>
<p>Note: This uses $_SERVER[‘REMOTE_ADDR’] directly.  If you’re behind a proxy (load balancer, etc), it’s not going to work as expected.  Eg. Several folks could be attempting logins at once, and all fail.  As such, the plugin would pick up on all those requests coming from the same IP — the load balancer — and lock the login down.  No good.  If you’re using a load balancer or in some other situation where you’re behind a proxy, use this as an example and write your own. Or filter the IP as your desire using <code>cd_sll_pre_ip</code>.</p>
<h3>Hooks</h3>
<pre><code>simple_login_lockdown_ip -- Alter the requesting IP address. Might be useful if you site is behind a proxy or load balancer.

simple_login_lockdown_allow_ip -- Allows you to "whitelist" an IP address. It first when a log attempt fails before the attempt count is incremented. Return true and no count will be taken for the IP.

simple_login_lockdown_should_die -- A filter that allows you to prevent the login page from `die`ing if a the requesting IP is temporarily blacklisted or the login limit has been reached.

simple_login_lockdown_count_reached -- Fires when the requesting IP has reached its count and will be added to the blacklist for your time limit.

simple_login_lockdown_attempt -- Fires when a login attempt is made but the requestin IP is blocked to to excessive requests.

simple_login_lockdown_response -- Change the HTTP response code of that gets sent when a blacklisted IP attempts to login.

simple_login_lockdown_time_values -- Allows you to alter values in the login lockdown time dropdown in the admin area.
</code></pre>


Simple Login Lockdown

Simple Login Lockdown prevents brute force login attacks/attempts on your WordPress installation.

Arshid

<p>Limit Login Attempts for login protection, protect site from brute force attacks.Brute Force Attack aims at being the simplest kind of method to gain access to a site: it tries usernames and passwords, over and over again, until it gets in. WP Limit Login Attempts plugin limit rate of login attempts and block IP temporarily. It is detecting bots by captcha verification.</p>
<p>Go to <code>Settings > WP Limit Login</code>.</p>
<h4>Features</h4>
<ul>
<li>Login Security – Limit Login Attempts and track user login attempts</li>
<li>Captcha Verification </li>
<li>Light weight plugin </li>
<li>Mechanism for slow down brute force attack </li>
<li>Redirect to home page, when abnormal request (It will stop hacking tools)</li>
<li><strong>GDPR</strong> compliant. With this feature turned on, all logged IPs get obfuscated (md5-hashed).</li>
</ul>
<h4>Limit Login Attempts</h4>
<p>A brute force attack is a trial-and-error mеthоd uѕеd tо оbtаin infоrmаtiоn such аѕ a user раѕѕwоrd оr реrѕоnаl idеntifiсаtiоn number (PIN). In a brute force attack, аutоmаtеd software iѕ uѕеd tо gеnеrаtе a lаrgе numbеr оf соnѕесutivе guesses аѕ to thе value of thе desired data. Brute force attack may bе uѕеd by сriminаlѕ tо crack еnсrурtеd dаtа, оr bу security аnаlуѕtѕ to tеѕt an оrgаnizаtiоn’ѕ nеtwоrk security.</p>
<p>If уоu аdорt thе use оf this plugin, it will limit thе number оf timеѕ a uѕеr can аttеmрt tо log intо уоur ассоunt. Aftеr a сарtсhа verification would have bееn rеԛuеѕtеd, thе mесhаniѕm will ѕlоw dоwn brutе fоrсе аttасk hаving thе роwеr tо redirect tо home page аnd соmрlеtеlу аvоid intruder intо уоur рrесiоuѕ ассоunt.</p>
<h4>Captcha Verification</h4>
<p>WP Limit Login Attempts plugin provides an extra protection by Captcha.<br />
Captcha Verification in seven attempts. It will be highly helpful for removing bots.</p>
<p>For more service ,<a href="http://www.ciphercoin.com" rel="nofollow ugc">Please visit</a></p>
<h4>Donations</h4>
<p>WP Limit Login Attempts plugin protecting your admin. Please make donation, I really appreciate it .</p>
<h4>Support</h4>
<p>http://www.ciphercoin.com/contact/</p>
<span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/_T8SWmMcawo?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span>


WP Limit Login Attempts

Limit rate of login attempts and block IP temporarily. Brute force attack protection. GDPR compliant. Captcha enabled.

Simple Login Lockdown vs WP Limit Login Attempts