Title: Doesn't block Admin when using uppercase A
Last modified: August 21, 2016

---

# Doesn't block Admin when using uppercase A

 *  [Zachary DuBois](https://wordpress.org/support/users/zachary-dubois/)
 * (@zachary-dubois)
 * [12 years, 8 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/)
 * When using a uppercase A in Admin, it bypasses this setting:
    Blacklist login
   attempts using ‘admin’ userid
 * Please fix this because I just had a huge attempt to break that password when
   that userid doesn’t even exist.
 * [http://wordpress.org/plugins/stop-spammer-registrations-plugin/](http://wordpress.org/plugins/stop-spammer-registrations-plugin/)

Viewing 10 replies - 1 through 10 (of 10 total)

 *  [DrKevGuitar](https://wordpress.org/support/users/drkevguitar/)
 * (@drkevguitar)
 * [12 years, 8 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/#post-4546226)
 * Agreed. Multiple attacks in a short space of time on “Admin” getting passed and
   cached as good IPs seems quite silly.
 * Thank you!
 *  Plugin Contributor [Keith P. Graham](https://wordpress.org/support/users/kpgraham/)
 * (@kpgraham)
 * [12 years, 8 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/#post-4546227)
 * I am not checking for the admin (or Admin) user id. I check to see if the user
   has admin privileges. When the “check for admin” option is on, before I check
   for a spammer, I check to see if the user is an “admin” type user and that the
   password is correct. The plugin doesn’t care what username is used – it checks
   everything.
 * Keith,
 *  Thread Starter [Zachary DuBois](https://wordpress.org/support/users/zachary-dubois/)
 * (@zachary-dubois)
 * [12 years, 8 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/#post-4546228)
 * Well, I’ve just been getting a lot of spam logins to ‘Admin’
 *  Plugin Contributor [Keith P. Graham](https://wordpress.org/support/users/kpgraham/)
 * (@kpgraham)
 * [12 years, 8 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/#post-4546232)
 * I’ve been getting a lot, too. This are criminals. If they had any brains they
   would be making honest money.
 * Keith
 *  Thread Starter [Zachary DuBois](https://wordpress.org/support/users/zachary-dubois/)
 * (@zachary-dubois)
 * [12 years, 8 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/#post-4546233)
 * Agreed. I have yet to find a smart spammer. The smartest one figured out my username
   so, I put it in SFS and now it can cause no harm.
 *  [DrKevGuitar](https://wordpress.org/support/users/drkevguitar/)
 * (@drkevguitar)
 * [12 years, 7 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/#post-4546238)
 * Sorry Keith but I am confused.
 * If you are not checking for “admin” user id, what on earth does “Blacklist login
   attempts using ‘admin’ userid:” mean? This is what we are talking about.
 * And I don’t even see “check for admin” as an option! (Yes, I’m running version
   5.5)
 *  Plugin Contributor [Keith P. Graham](https://wordpress.org/support/users/kpgraham/)
 * (@kpgraham)
 * [12 years, 7 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/#post-4546239)
 * My admin userid is not “admin”. You should not have a userid named “admin”. I
   think the wording is unclear; it should read “the Administrative user id”. I 
   was using admin userid to mean the user id that the admin uses to log in. I will
   change the wording to be clearer in the next release.
 * Sorry about the lack of clarity.
 * Keith
 *  [DrKevGuitar](https://wordpress.org/support/users/drkevguitar/)
 * (@drkevguitar)
 * [12 years, 7 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/#post-4546241)
 * OK. Now I understand better and see where my confusion came from. Thank you.
 * BUT, I do not have a userid named “admin” yet the plugin is blocking those attempts
   that try to use “admin” as a userid. Why is this?
 * My admin account did have “admin” set as both nickname and public display name(
   I have just changed it). BTW, I have never seen a login attempt on my actual 
   login id (which is a random string).
 * Thanks so much for your time, I’m finally understanding this better and seeing
   the errors in what I thought I understood before.
 *  Plugin Contributor [Keith P. Graham](https://wordpress.org/support/users/kpgraham/)
 * (@kpgraham)
 * [12 years, 7 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/#post-4546242)
 * Before it blocks them, it checks the userid to see if it is an administrative
   user. It then checks the password. This prevents admins from being locked out
   of their own website.
 * I recommend that you uncheck this box when you are sure that you can log into
   wordpress without being blocked. (I think I say this on the settings page.)
 * It is set “ON” in a new installation, but should be unchecked when it is not 
   needed. Then, anyone using your administrative id will be checked, even if they
   have the right password.
 * Keith
 *  [DrKevGuitar](https://wordpress.org/support/users/drkevguitar/)
 * (@drkevguitar)
 * [12 years, 7 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/#post-4546243)
 * It is unchecked. Always has been.

Viewing 10 replies - 1 through 10 (of 10 total)

 The topic ‘Doesn't block Admin when using uppercase A’ is closed to new replies.

 * ![](https://ps.w.org/stop-spammer-registrations-plugin/assets/icon-256x256.png?
   rev=3377746)
 * [Stop Spammers Classic](https://wordpress.org/plugins/stop-spammer-registrations-plugin/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/stop-spammer-registrations-plugin/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/stop-spammer-registrations-plugin/)
 * [Active Topics](https://wordpress.org/support/plugin/stop-spammer-registrations-plugin/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/stop-spammer-registrations-plugin/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/stop-spammer-registrations-plugin/reviews/)

## Tags

 * [admin](https://wordpress.org/support/topic-tag/admin/)
 * [uppercase](https://wordpress.org/support/topic-tag/uppercase/)

 * 10 replies
 * 3 participants
 * Last reply from: [DrKevGuitar](https://wordpress.org/support/users/drkevguitar/)
 * Last activity: [12 years, 7 months ago](https://wordpress.org/support/topic/doesnt-block-admin-when-using-uppercase-a/#post-4546243)
 * Status: not resolved