After the recent global distributed botnet attack on WordPress installations that took down servers and broke into admin accounts, I thought I'd write a plugin to prevent it happening again.
Distributed botnet attacks can come from multiple IP addresses and locations at the same time, so conventional IP-based lockouts are not effective (e.g. those found in Wordfence and other WordPress security plugins).
For example, if 1,000 different computers (with unique IP addresses) are trying to brute-force your admin password and you lock out each IP address after 5 incorrect attempts then you have still allowed 5,000 attempts. My plugin essentially ignores the different IP addresses and locks out all admin login attempts in a configurable way - so if you have it set to 5 failed attempts (default) then those 1,000 different computers will only have a total between them of 5 attempts.
You can select how many login failures causes the lockout, how much time to allow between failures, how long to block logins for and also you can input a whitelisted IP address (or multiple addresses separated with commas or spaces) which can bypass the lockdown and always log in - so you can still always get into your site even in the middle of an attack. Version 1.1 adds support for partial IP address matching for those with dynamic IP addresses.
- Any failed login is counted regardless of username or IP address (unless whitelisted)
- Once locked down, nobody can log in except from whitelisted IP addresses
- You can specify the number of login failures that triggers a lockdown
- You can specify the time between failed attempts that should be counted
- You can specify how long the lockdown should last
- You can add whitelisted IP addresses that bypass the lockdown
- Partial IP address matching for dynamically-allocated IP addresses
- Multisite compatible
- Now available in French, German, Italian and Russian
Login Dongle
Login Dongle protects your login by means of a security question
(AKA challenge/response) as an extra security layer. A bookmark is your login dongle....
WP Limit Login Attempts
Brute Force Attack aims at being the simplest kind of method to gain access to a site: it tries usernames and passwords, over and over again, until it gets in. This plugin limit rate of login attempts and block ip temporarily. It is detecting bots by captcha verification.
Go to Settings > WP Lim.........
Limit Attempts by BestWebSoft
Limit Attempts - This plugin allows you to limit users' attempts to log in to your website, as well as create and edit black- and whitelists. This way, you will be able to manage access to your website and its content and protect it from spam and unwanted visitors. There is also a premium version of.........
Limit Attempts Booster
Limit Attempts Booster was designed to manage the access to users website and provide bullet proof security to your website.
With Limit Attempts Booster, you can limit users attempts to log in to your website and consequently, block the user for a certain period of time.
Apart from that, Limit Att.........
BulletProof Security
BulletProof Security Feature Highlights
One-Click Setup Wizard
jQuery UI Dialog Form Uninstall Options: BPS Pro upgrade uninstallation or complete BPS plugin uninstallation
.htaccess Website Security Protection (Firewalls)
Login Security & Monitoring
Idle Session Logout (ISL)
Auth Cookie Expir.........
AS login
Create your own custom login page use this Plugin. Customize your login page as you choice.
Plugin Features !!!!!
1.Easy to use.
2.Plugin on/off.
3.Change Logo Link.
4.Change Logo Width.
5.Unlimited custom logo.
6.Unlimited color.
7.Change Login box width.
8.Change text color and many more....
As Nice Scroll
As nice scroll is a jquery plugin for WordPress site. This plugin will create a nice scrollbar for your site.
After installing and Activating the plugin, go to WordPress Admin Dahsbord and then go to
Appearance > As option
Here you can customize default settings. So customize settings as you choi.........
As woocomerce with owl carousel
As woocommerce with owl carousel is a jquery plugin for WordPress site. This plugin will create a nice carousel for your site. After installing and Activating the plugin, go to WordPress Admin Dahsbord and then go to
Appearance > As option
Here you can create Shortcode and publish a carousel .........
TR WP Custom Login Page
TR WP Custom Login Page by http://themeroad.net
WP Custom Login Page allows to you change your unlimited custom logo,unlimited custom text,unlimited custom background color,unlimited custom body background color easily.After publishing this plugin people enjoy custom wp login page smoothly. It's re.........
WPVKP Custom Login Page
This easy to use plugin gives you the power to convert the boring wordpress login page with much more attractive and personalized login page. This plugin helps to improve your brand authority and also helps to improve user experince. Now can customize the logo, the background, the login button and v.........
