WordPress.org

Ready to get started?Download WordPress

Forums

Limit Login Attempts
[resolved] Can we get the tried password along with username (5 posts)

  1. Taurus Knight
    Member
    Posted 2 years ago #

    This is really a useful plugin. I keep getting locked out email notifications at least 5 per week. Without this plugin we won't know if anyone trying to hack our wordpress blog. In the email we will know the username hacker tried to get into the system. And it is most often 'admin'. So better don't use admin as your username for wordpress blog. Choose something else as your username. If would be great if this plugin could send me the password hacker tried. That would help us in many ways.

    http://wordpress.org/extend/plugins/limit-login-attempts/

  2. conservativereader
    Member
    Posted 2 years ago #

    Only problem with getting the password is that it is considered a security risk to do so... you will be able to potentially see a legitimate user's attempt to login even if they fail, you (or someone with access to the email) may be able to discern the real password.

    Just my 2 cents. :)

    Art

  3. Taurus Knight
    Member
    Posted 2 years ago #

    I think you are talking about the situation of multi-user blogging. But in my case & in most cases, there would be only a single user for the blog.

  4. johanee
    Member
    Plugin Author

    Posted 2 years ago #

    I'm very wary of potentially logging real but misspelled passwords in cleartext, and I'm not sure what additional value it would give to most users.

    I won't add this functionality unless you have an amazing argument. :)

    It would be an interesting experiment to track all attempted logins for research when you know it is a brute force attempts (for example if there is no "admin" user), but that would be a separate thing.

  5. Taurus Knight
    Member
    Posted 2 years ago #

    Yes you are right. I don't keep any admin username, from all notifications I could figure that those hackers always trying with admin username which does not exist :)

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic