S
by webvitaly
4.3 (11 reviews)
Security-Protection
Protection from login, registration and reset-password brute-force attacks. No captcha.
Tested up to WP 5.5 (Current: 6.9)
v2.3
Current Version v2.3
Updated 5 years ago
Last Update on 05 Sep, 2020
Synced 8 hours ago
Last Synced on
Rank
#9,699
-4 this week
Active Installs
400+
-17%
KW Avg Position
11
—
No change
Downloads
15.3K
+1 today
Support Resolved
0%
—
No change
Rating
86%
Review 4.3 out of 5
4.3
(11 reviews)
Next Milestone 500
400+
500+
148
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 17 more installs to reach 500+
Rank Changes
Current
#9,699
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
4.3
11 reviews
Overall
86%
5
9
(82%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
2
(18%)
Tracked Keywords
Showing 1 of 1| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| BruteForce | 11 | — | Tag | 9 hours ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 2.3
- Last Updated
- Sep 05, 2020
- Requires WP
- 3.0+
- Tested Up To
- 5.5
- PHP Version
- N/A
- Author
- webvitaly
Support & Rating
- Rating
- ★ ★ ★ ★ ☆ 4.3
- Reviews
- 11
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
7K+ installs
#2,736
Master Addons For Elementor - White Label, Free Widgets, Hover Effects, Conditions, & Animations
40K+ installs
#929
Anti-Malware Security and Brute-Force Firewall
100K+ installs
#295
WPS Limit Login
100K+ installs
#309
reCaptcha by BestWebSoft
100K+ installs
#316
Frequently Asked Questions
Common questions about Security-Protection
The blocking algorithm is based on 2 methods: 'invisible js-captcha' and 'invisible input trap'. The 'invisible js-captcha' method is based on fact that bots does not have javascript on their user-agents. The 'invisible input trap' method is based on fact that almost all the bots will fill inputs with name 'email' or 'url'.
Two extra hidden fields are added to login, register and reset-password forms. First field is the invisible captcha (copy and paste the code). Second field should be empty. If the user visits site, than first field is answered automatically with javascript, second field left blank and both fields are hidden by javascript and css and invisible for the user. If the brute-forcer tries to submit the form, he will make a mistake with answer on first field or tries to submit an empty field and brute-force attack will be automatically rejected.
If Security-Protection check was not passed than it is brute-force request and the login attempt (or registration, or reset password) is blocked even if username and password are correct. Plugin sends fake WordPress login cookies to the brute-force bot and redirects it to the admin section to emulate that the password is cracked and many brute-forcers stop their attacks after this. It is really awesome :)
You may enable sending info about blocked brute-force attacks to admin email. Edit security-protection.php file and find "$secprot_send_brute_force_log_to_admin" and make it "true".
If all plugins does not help you to stop brute-force attacks - you can simply rename wp-login.php file (for example 'wp-login-new.php') for now and maybe this can help you to reduce load on your site. And also create empty wp-login.php file for not raising WordPress 404 error because it will start whole WordPress site again during each wp-login.php access. While wp-login.php renamed - users cannot login, register and reset password. If you want to have ability to login while you renamed wp-login.php file you should replace all 'wp-login.php' strings inside of the wp-login.php file to your new filename (for example 'wp-login-new.php').