https://github.com/devuri/user-security

WordPress Plugin: Hides login errors, disables author archives (to hide usernames), changes author links to title => sitename / URL => homepage
https://github.com/devuri/user-security

Last synced: 5 months ago
JSON representation

WordPress Plugin: Hides login errors, disables author archives (to hide usernames), changes author links to title => sitename / URL => homepage

• Host: GitHub
• URL: https://github.com/devuri/user-security
• Owner: devuri
• Created: 2018-02-15T13:41:21.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2016-08-15T08:22:25.000Z (over 9 years ago)
• Last Synced: 2024-10-19T14:22:51.944Z (over 1 year ago)
• Language: PHP
• Size: 1.95 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: readme.txt

Awesome Lists containing this project

README

          
=== User Security ===

Contributors: jamesmorrison

Tags: user, security, login

Requires at least: 4.5

Tested up to: 4.5.3

Stable tag: trunk

License: GPLv2 or later

License URI: http://www.gnu.org/licenses/gpl-2.0.html

Hides login errors, disables author archives (to hide usernames), changes author links to title => sitename / URL => homepage

== Description ==

Hides login errors, disables author archives (to hide usernames), changes author links to title => sitename / URL => homepage

Out the box, WordPress gives away the usernames with WP Admin access to the site; a brute force attack on the login page reveals whether a username was correct / incorrect.

Additionally, the author links also give away valid usernames.

This plugin stops that; login errors are not a generic message, the author archives are disabled, requests to `/?author={ID}` return a 404 (page not found) header and template.

== Installation ==

1. Upload the plugin files to the `/wp-content/plugins/user-security` directory, or install the plugin through the WordPress plugins screen directly.

1. Activate the plugin through the 'Plugins' screen in WordPress

1. Done

== Frequently Asked Questions ==

= Why would I use this? =

To help stop brute force attacks by hiding information that would be useful to a potential hacker.

== Changelog ==

= 1.0.1 =

* Minor amends to readme.txt

= 1.0.0 =

* Initial release