Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

user enumeration #2

Closed
pjv opened this issue Aug 9, 2016 · 1 comment
Closed

user enumeration #2

pjv opened this issue Aug 9, 2016 · 1 comment

Comments

@pjv
Copy link

pjv commented Aug 9, 2016

i'm not (yet) using this plugin, but stumbled onto your repo in researching an issue i just posted for the original wp-fail2ban plugin. quickly looking at your code, i think it should have the same issue, so you might want to take a look at: https://wordpress.org/support/topic/false-positive-on-user-enumeration?replies=1

i'm not sure this is the best solution, but off the top of my head, i think that in the function starting around line 140 in /classes/class-wp-fail2ban-redux.php if you check for logged in users and exempted them from the block it would be an improvement.

@thebrandonallen
Copy link
Owner

@pjv Thanks for reporting this, by the way! Sorry it took so long to get back to you.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants