Opis

A Brute Force Attack aims at being the simplest kind of method to gain access to a site: it tries usernames and passwords, over and over again, until it gets in.
Brute Force Login Protection is a lightweight plugin that protects your website against brute force login attacks using .htaccess.

After a specified limit of login attempts within a specified time, the IP address of the hacker will be blocked.

Features

Limit the number of allowed login attempts using normal login form
Limit the number of allowed login attempts using Auth Cookies
Manually block/unblock IP addresses
Manually whitelist trusted IP addresses
Delay execution after a failed login attempt (to slow down brute force attack)
Option to inform user about remaining attempts on login page
Option to email administrator when an IP has been blocked
Custom message to show to blocked users

Contribute

If you’d like to make a contribution to the Brute Force Login Protection plugin, you can submit a pull request to our GitHub Repository.
You can also create a thread in our Support Forum.
Your feedback is highly appreciated!

Donate

If you’d like to make a donation to the Brute Force Login Protection plugin, you can do so via PayPal by clicking here.

Zrzuty ekranów

Plugin settings page

Instalacja

Install the plugin either via the WordPress.org plugin directory, or by uploading the files to your wp-content/plugin directory.
Activate the plugin through the WordPress admin panel.
Customize the settings on the settings page.
Done!

FAQ

Installation Instructions

Install the plugin either via the WordPress.org plugin directory, or by uploading the files to your wp-content/plugin directory.
Activate the plugin through the WordPress admin panel.
Customize the settings on the settings page.
Done!

My own IP is blocked, what do I do?

If you have FTP access to your website edit the .htaccess file and remove the line: ‚deny from x.x.x.x’, where x.x.x.x is your own IP address.
If you don’t have FTP access, the only way to unblock your IP is to log in your WordPress admin panel from another IP address and unblock it via the plugin settings page.

I get an error: .htaccess file not readable/writeable

Brute Force Login Protection will only work if your .htaccess file is writeable by WordPress. If you get this error, make sure that your .htaccess file has read and write permissions.

Recenzje

Updates

Cronka

Unfortunately too few updates, otherwise the plugin is good. Due to too few updates a star was removed.

Does not work on Apache 2.4

Pieter Daalder

This plugin uses .htaccess syntax that will not work on the current Apache version (2.4). Using this will break your website!

Great!!!

sadeq0

We got rid of brute force attack because of the specially option in your plugin: Delay in seconds when a login attempt has failed thank you so much...