Title: Plugin seems broken Last modified: May 18, 2017 --- # Plugin seems broken * Resolved [Ricky_1146](https://wordpress.org/support/users/ricky_1146/) * (@ricky_1146) * [9 years ago](https://wordpress.org/support/topic/plugin-seems-broken-3/) * I tested this plugin against [https://wordpress.org/plugins/no-user-enumeration/](https://wordpress.org/plugins/no-user-enumeration/) * No User enumeration seems to work and blocks the rest API, and user enumeration. * This plugin seems broken, as it still displays both, I’m sure it just needs to be updated, however it’s not doing it’s job presently, for the 20,000 installs of this plugin. * To test for yourself just use these [http://wpsite/?author=1](http://wpsite/?author=1) * [http://wpsite/?author=1/](http://wpsite/?author=1/) * [http://wpsite/?bypass=1&author%00=1](http://wpsite/?bypass=1&author%00=1) * [http://wpsite/?author%00=%001](http://wpsite/?author%00=%001) * [http://wpsite/?%61uthor=1](http://wpsite/?%61uthor=1) * curl -s [http://wpsite/wp-json/wp/v2/users/](http://wpsite/wp-json/wp/v2/users/) - This topic was modified 9 years ago by [Ricky_1146](https://wordpress.org/support/users/ricky_1146/). Viewing 7 replies - 1 through 7 (of 7 total) * Plugin Author [fullworks](https://wordpress.org/support/users/fullworks/) * (@fullworks) * [9 years ago](https://wordpress.org/support/topic/plugin-seems-broken-3/#post-9145814) * Thank you for your input. * Can you advise the version of WordPress in your tests and also any other plugins you have activated at the time? * Plugin Author [fullworks](https://wordpress.org/support/users/fullworks/) * (@fullworks) * [9 years ago](https://wordpress.org/support/topic/plugin-seems-broken-3/#post-9145849) * I have just retested and it is working as expected on all use cases. * The most likely scenario is that you are logged in to the WordPress dashboard( as logged in used are not restricted ) or your have a conflicting security plugin active. * e.g. forbidden – number in author name not allowed = 1 * and * {“code”:”rest_cannot_access”,”message”:”Only authenticated users can access the User endpoint REST API.”,”data”: {“status”:401}} * Thread Starter [Ricky_1146](https://wordpress.org/support/users/ricky_1146/) * (@ricky_1146) * [9 years ago](https://wordpress.org/support/topic/plugin-seems-broken-3/#post-9145859) * I wasn’t logged in at the time, I have 4.7.4 installed, the only possible conflicts, I can see is stop spammers, and WP Fail2ban. I will check again * Plugin Author [fullworks](https://wordpress.org/support/users/fullworks/) * (@fullworks) * [9 years ago](https://wordpress.org/support/topic/plugin-seems-broken-3/#post-9146410) * My plugin is specifically built with Fail2Ban in mind, to enable firewall lockout of non admin users looking to enumerate ( a hacker foot print ). And I have sites with Stop Spammers. * Another question I forgot to ask was what version of PHP are you on? * Can you check your error logs for any strange messages please. * I can’t vouch for all 20,000 sites but it is definitely working on the sites I can vouch for ( that doesn’t mean there isn’t an issue with a certain combination of technology ) * Thread Starter [Ricky_1146](https://wordpress.org/support/users/ricky_1146/) * (@ricky_1146) * [9 years ago](https://wordpress.org/support/topic/plugin-seems-broken-3/#post-9146601) * I need to reverse this, you are correct. I was still somehow logged into the dashboard. It’s always user error even at the admin level heh. * It is working as you said * Plugin Author [fullworks](https://wordpress.org/support/users/fullworks/) * (@fullworks) * [9 years ago](https://wordpress.org/support/topic/plugin-seems-broken-3/#post-9146614) * Thank you for getting back, not every one would be so kind as to admit human error. * Thread Starter [Ricky_1146](https://wordpress.org/support/users/ricky_1146/) * (@ricky_1146) * [9 years ago](https://wordpress.org/support/topic/plugin-seems-broken-3/#post-9147146) * Heh, Well I’m a fellow IT guy, though I’m a logical/analytical type of guy. So I know, communication is a necessity. Then, whatever works, I have to administer 100 websites. * Sometimes you get used to things working regardless, I do like the Fail2ban option Viewing 7 replies - 1 through 7 (of 7 total) The topic ‘Plugin seems broken’ is closed to new replies. * ![](https://ps.w.org/stop-user-enumeration/assets/icon-256x256.png?rev=1677689) * [Stop User Enumeration](https://wordpress.org/plugins/stop-user-enumeration/) * [Frequently Asked Questions](https://wordpress.org/plugins/stop-user-enumeration/#faq) * [Support Threads](https://wordpress.org/support/plugin/stop-user-enumeration/) * [Active Topics](https://wordpress.org/support/plugin/stop-user-enumeration/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/stop-user-enumeration/unresolved/) * [Reviews](https://wordpress.org/support/plugin/stop-user-enumeration/reviews/) * 7 replies * 2 participants * Last reply from: [Ricky_1146](https://wordpress.org/support/users/ricky_1146/) * Last activity: [9 years ago](https://wordpress.org/support/topic/plugin-seems-broken-3/#post-9147146) * Status: resolved