Posts Tagged ‘limit login attempts’

Limit Login Attempts WPMU Friendly + Optimized!

I use wordpress mu(2.9+) and I just spent some time reworking the ‘Limit Login Attempts’ Plugin (1.4.1) by Johan Eenfeldt to be more WordPress MU friendly. I will mention that this plugin works FANTASTICLY with wordpress mu 2.9 + …. Other Mu users may find this usefull… A couple things…

first, I set the variables at the top of the plugins .php file i wanted to be global. The file is very well noted by the author, OMG thank you! Very easy to control what variables the plugin activates with thanks to great coding and thoughtful notation.

Then I changed the function that mails lockout notification to the administrator, so that it will email the super site admin(me) rather than that particular sub blogs admin.. what i did was modify the get_option in line394 to say:
@wp_mail(get_site_option(‘admin_email’), $subject, $message);

Then, i changed the code where it constructs the plugins dashboard submenu. I changed it so that it would show under the site admin menu instead of settings. that way only the super site admin can see it and not the sub blog administrators. I changed Line 607 to:
add_submenu_page(‘wpmu-admin.php’, ‘Limit Login Attempts’, ‘Limit Login Attempts’, 10, ‘limit-login-attempts’, ‘limit_login_option_page’);

Then I used the plugin manager to auto-activate the plugin for all users sitewide.. that way any newly generated blogs will automatically activate the plugin with the settings I want, and having moved the menu, users cant modify them.

It is important to note, that if the plugins menu is accessable to your users, they can deactivate the plugin. Rather than attempt to solve this, i will just hope that common sense prevails. Perhaps I will try this in the /mu-plugins/ folder so that it isn’t even an option. I’ll have to test it. hope this helps…

The settings I changed to my liking were;
login attempts moved to 5,
lockout time decreased to 15 min.
lockout log settings changed to ‘log, email’
and notify email after 1 lockout

To Install:

Install ‘Plugin Commander’ or ‘Plugin Management’* (get the wp3 version here )

Install ‘Limit Login Attempts Mu-Ified’ (version above) in /wp-content/plugins/

Auto-Activate ‘Limit Login Attempts’ Via ‘Plugin Management’ or ‘Plugin Commander’

*recommended

IMPORTANT! Requires:

WP 2.9+ (not tested in wp3! ..yet)

Plugin Management

Or Plugin Commander