chrisguitarguy

Simple login lock down is a way to protect your WordPress blog from brute force login attacks.
How it works: 
1. An attacker attempts to login and fails 
2. Simple Login Lockdown record that failed login 
3. After a certain number of failed attemps (defaults to five), further attemps to access the wp-login.php page are blocked for a time (defaults to one hour).
If you happen to forget your password and make a failed login attemp yourself, the plugin will clear out the lockdown count data on successful login.
Note: This uses $_SERVER[‘REMOTE_ADDR’] directly. If you’re behind a proxy (load balancer, etc), it’s not going to work as expected. Eg. Several folks could be attempting logins at once, and all fail. As such, the plugin would pick up on all those requests coming from the same IP — the load balancer — and lock the login down. No good. If you’re using a load balancer or in some other situation where you’re behind a proxy, use this as an example and write your own. Or filter the IP as your desire using <code>cd_sll_pre_ip</code>.
<h3>Hooks</h3>
<pre><code>simple_login_lockdown_ip -- Alter the requesting IP address. Might be useful if you site is behind a proxy or load balancer.

simple_login_lockdown_allow_ip -- Allows you to "whitelist" an IP address. It first when a log attempt fails before the attempt count is incremented. Return true and no count will be taken for the IP.

simple_login_lockdown_should_die -- A filter that allows you to prevent the login page from `die`ing if a the requesting IP is temporarily blacklisted or the login limit has been reached.

simple_login_lockdown_count_reached -- Fires when the requesting IP has reached its count and will be added to the blacklist for your time limit.

simple_login_lockdown_attempt -- Fires when a login attempt is made but the requestin IP is blocked to to excessive requests.

simple_login_lockdown_response -- Change the HTTP response code of that gets sent when a blacklisted IP attempts to login.

simple_login_lockdown_time_values -- Allows you to alter values in the login lockdown time dropdown in the admin area.
</code></pre>

Simple Login Lockdown

Simple Login Lockdown prevents brute force login attacks/attempts on your WordPress installation.

Tareq Hasan

weDevs

Nizam Uddin

podpirate

Integrate reCaptcha in your blog. Supports no Captcha as well as old style recaptcha. 
Provides of the box integration for signup, login, comment formsand Ninja Forms as well 
as a plugin API for your own integrations.
<h4>Features:</h4>
<ul>
<li>Secures login, signup und comments with a recaptcha.</li>
<li>Supports old as well as new reCaptcha.</li>
<li>
Works together with
<ul>
<li>WP Multisite</li>
<li>bbPress</li>
<li>BuddyPress</li>
<li>AwesomeSupport (thanks to <a href="http://julienliabeuf.com/" rel="nofollow ugc">Julien Liabeuf</a> )</li>
<li>WooCommerce (Only checkout, registration and login form. Not password reset)</li>
<li><a href="http://ninjaforms.com/" rel="nofollow ugc">Ninja Forms</a></li>
<li>cformsII</li>
</ul>
</li>
<li>
For integration in your self-coded forms see this <a href="https://github.com/tareq1988/wp-recaptcha-integration/wiki/Custom-Themes-and-Forms" rel="nofollow ugc">wiki article</a> for details.
</li>
</ul>
<h4>Localizations</h4>
<ul>
<li>Brazilian Portuguese (thanks to <a href="http://www.viniciusferraz.com" rel="nofollow ugc">Vinícius Ferraz</a>)</li>
<li>Spanish (thanks to <a href="https://github.com/yivi" rel="nofollow ugc">Ivan Yivoff</a>)</li>
<li>Italian (thanks to <a href="http://blog.salaros.com/" rel="nofollow ugc">Salaros</a>)</li>
<li>German</li>
</ul>
Latest Files on GitHub: <a href="https://github.com/tareq1988/wp-recaptcha-integration" rel="nofollow ugc">https://github.com/tareq1988/wp-recaptcha-integration</a>
<h4>Compatibility</h4>
On a WP Multisite you can either activate the plugin network wide or on a single site.
Activated on a single site everything works as usual.
With network activation entering the API key and setting up where a captcha is required 
is up to the network admin. A blog admin can override the API key e.g. when his blog is 
running under his/her own domain name.
<h4>Known Limitations</h4>
<ul>
<li>
You can’t have more than one old style reCaptcha on a page. This is a limitiation of 
reCaptcha itself. If that’s an issue for you, you should use the no Captcha Form.
</li>
<li>
A No Captcha definitely requires client side JavaScript enabled. That’s how it does its 
sophisticated bot detection magic. There is no fallback. If your visitor does not have 
JS enabled the captcha test will not let him through.
</li>
<li>
On a Contact Form 7 when the reCaptcha is disabled (e.g. for logged in users) the field 
label will be still visible. This is due to CF7 Shortcode architecture, and can’t be fixed.
To handle this there is a filter <code>recaptcha_disabled_html</code>. You can return a message for your logged-in 
users here. Check out the <a href="https://github.com/tareq1988/wp-recaptcha-integration" rel="nofollow ugc">GitHub Repo</a> for details.
</li>
<li>
As of version 4.3 CF7 comes with its own recaptcha. Both are supposed to work together. 
I you want to keep the WP ReCaptcha functionality, e.g. if you want to hide the captcha 
from known users, leave the integration in the CF7 settings unconfigured.
</li>
<li>
Old style reCaptcha does not work together with WooCommerce.
</li>
<li>
In WooCommerce the reset password form can not be protected by a captcha. Woocommerce does 
not fire any action in the lost password form, so there is no way for the plugin to hook in. 
Take a look at <a href="https://wordpress.org/support/topic/captcha-not-showing-on-lost-password-page?replies=7" rel="ugc">this thread</a> for a workaround.
</li>
<li>
Due to a lack of filters there is no (and as far as one can see, there will never be) 
support for the MailPoet subscription form.
</li>
</ul>
<h3>Plugin API</h3>
The plugin offers some filters to allow themes and other plugins to hook in.
See <a href="https://github.com/tareq1988/wp-recaptcha-integration" rel="nofollow ugc">GitHub-Repo</a> for details.

ReCaptcha Integration for WordPress

This plugin is very robust. It replaces another reCAPTCHA plugin I was using. I like this one because it works with WooCommerce, and protects login, lost password, and commenting forms.

Very Robust. Easy To Setup

This was the only plugin I could find that added a Captcha to the WooCommerce guest checkout. All the others either need to be paid for or only add a captcha to the login and registration pages. I wish this plugin was more visible so I hadn't wasted time with inferior offerings.

Nice job weDevs and thanks!

Only plugin to add WooCommerce checkout Captcha

reCaptcha for login, signup, comment forms, Ninja Forms and woocommerce.

Simple Login Lockdown vs ReCaptcha Integration for WordPress