Block WP Enumeration (?author=1 etc) | WordPress.org

Resolved massimod
(@massimod)

8 years, 6 months ago

Hi.

Is there a way with your plugin to block the /?author=xx ?

Thanks

Viewing 4 replies - 1 through 4 (of 4 total)

Plugin Author Paul
(@paultgoodchild)

8 years, 6 months ago

Yep, this is under the Lockdown module.

Thread Starter massimod
(@massimod)

8 years, 6 months ago

Then it doensn’t work, i already tried it …..

Is it for all users (guests and logged in) ?

Plugin Support Jelena
(@jmisic)

8 years, 6 months ago

It only blocks the URL for non-logged-in visitors. If you are logged in, the URL will work as normal.

Please read this blog article:
https://www.icontrolwp.com/blog/block-username-fishing-using-author-ids-scans-wordpress-security-basics-series-pt-6/

Regards,
Jelena

Thread Starter massimod
(@massimod)

8 years, 6 months ago

Ok, got it. It works for Guests and not for logged-in.

So we better solve this withing .htaccess that works for everybody.

Thanks !

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Block WP Enumeration (?author=1 etc)’ is closed to new replies.

4 replies
3 participants
Last reply from: massimod
Last activity: 8 years, 6 months ago
Status: resolved