Contributors: worais
Tags: wordpress, login, waf, ddos
Requires at least: 5.6
Tested up to: 6.5
Requires PHP: 7.2
License: GPLv3 or later
Stable tag: 1.1.0
Worais Login Protect plugin is an effective tool to enhance the security of your WordPress site, safeguarding it against brute force attacks and ensuring the integrity of user accounts. This plugin monitors and controls failed login attempts, implementing proactive measures to mitigate potential threats.
-
Intelligent Login Attempts Control: Detects and logs failed login attempts, analyzing behavioral patterns to identify possible attacks.
-
Automatic Lockout: After a configurable number of failed login attempts from the same IP address, the plugin automatically blocks access temporarily, significantly reducing the risk of brute force attacks.
-
Flexible Customization: Easily configure the maximum number of allowed attempts, lockout duration, and customize error messages to inform users about temporary blocks.
-
Detailed Logs: Maintain a detailed log of all activities related to login attempts, providing valuable insights for security analysis.
-
Captcha Native integration of a captcha challenge for an additional layer of security. Requires users to prove they are not automated bots before accessing the login page.
- Install this plugin using WordPress' built-in installer
- Access the Login Protect option under Settings
- Follow the instructions to set up and configure
If you encounter issues or have improvement suggestions, please open an issue.
Contributions are welcome! Feel free to fork the project and submit pull requests.
To execute the unit tests for Login Protect, you can use Docker Compose. Make sure you have Docker and Docker Compose installed on your system.
-
Open a terminal and navigate to the root directory of the repository.
-
Run the following command to start the tests:
docker-compose run wordpress php vendor/bin/phpunit