email to notify user failed logins causing IP lockout

I have tested it on another website where I use no custom login and I could see how it works.

I would really like to have it working on my other website, the one that uses Profile Builder Pro to manage login and profile forms.

I had a quick look to the files inside the all-in-one-wp-security-and-firewall plugin folder.
Any advice on where to start digging?
Is the DIV containing the Unlock Request button added to the login form through a WP hook or via Javascript?
May I ask which file has the code that generates the button and the two hidden input values?

Česlav, thank you so much!

Thanks to your input, I managed to quickly hack together a solution that gives me the Unlock request button on my custom login page.
The whole Unlocking process does work as well.

Now there are a few things I want to customize:
send_unlock_request_email .. both subject and body .. is there a way to do that without touching the plugin files?

I would like to have the “submit email for unlocking request” form on a page of my own (like mydomain.com/unlock_request/ , not the wp login url …
is there a function that outputs that form, similar to what AIOWPSecurity_User_Login::insert_unlock_request_form() does for the button?

thank you again Česlav.

using your hints I succeeded having the “Request Unlock ” button in my custom login page.
also I have the whole unlock request process happening in : mydomain.com/unlock_request/

my website is multilingual, through the use of the WPML plugin.
with that said, the less elegant part of my implementation is having to work around some messages that are hard coded and not available for translation in the other-includes/wp-security-unlock-request.php file:

"You are here because you have been locked out due to too many incorrect login attempts.";
"Please enter your email address and you will receive an email with instructions on how to unlock yourself.";
"Send Unlock Request"
"An email has been sent to you with the unlock instructions."

not a big deal.

bigger problem for me (as it might/will break with updates) is with:

static function send_unlock_request_email($email, $unlock_link)

I had to comment that out and rewrite my version.

my issues are:

$subject = '['.get_option('siteurl').'] '. __('Unlock Request Notification','all-in-one-wp-security-and-firewall');

get_option(‘siteurl’) returns the url to the WP installation not the website’s base url
even then, I would have preferred the website name… I changed that to:

$subject = get_bloginfo( 'name' ) . '  ' . __('Unlock Request Notification','all-in-one-wp-security-and-firewall');

and I had to broke down into smaller parts $email_msg in order to be able to provide translations through WPML.
this:

$email_msg .= __('You have requested for the account with email address '.$email.' to be unlocked. Please click the link below to unlock your account:','all-in-one-wp-security-and-firewall')."\n";

would have been made available for translation as : “You have requested for the account with email address myownemail@mydomain.com to be unlocked. Please click the link below to unlock your account:”

so I did rewrite it as:

$email_msg .= __('You have requested for the account with email address ','all-in-one-wp-security-and-firewall');
$email_msg .= $email;
$email_msg .= __(' to be unlocked. Please click the link below to unlock your account:','all-in-one-wp-security-and-firewall')."\n";

I just thought I would mention it just in case….

Hi Česlav, thank you for the quick reply.

I replaced the function in my script and added echo in front of it; works perfectly.

I still have to patch the plugin on every update to fix my issue with the email that is sent after the unlock request…. do you think the small changes I suggest will ever be considered in the next updates?
(copy and paste from above)

bigger problem for me (as it might/will break with updates) is with:

static function send_unlock_request_email($email, $unlock_link)
I had to comment that out and rewrite my version.

my issues are:

$subject = '['.get_option('siteurl').'] '. __('Unlock Request Notification','all-in-one-wp-security-and-firewall');

get_option(‘siteurl’) returns the url to the WP installation not the website’s base url
even then, I would have preferred the website name… I changed that to:

$subject = get_bloginfo( 'name' ) . ' ' . __('Unlock Request Notification','all-in-one-wp-security-and-firewall');

and I had to broke down into smaller parts $email_msg in order to be able to provide translations through WPML.
this:

$email_msg .= __('You have requested for the account with email address '.$email.' to be unlocked. Please click the link below to unlock your account:','all-in-one-wp-security-and-firewall')."\n";
would have been made available for translation as : “You have requested for the account with email address myownemail@mydomain.com to be unlocked. Please click the link below to unlock your account:”

so I did rewrite it as:

$email_msg .= __('You have requested for the account with email address ','all-in-one-wp-security-and-firewall');
$email_msg .= $email;
$email_msg .= __(' to be unlocked. Please click the link below to unlock your account:','all-in-one-wp-security-and-firewall')."\n";