Diff
9 years ago
dashboard
9 years ago
.htaccess
14 years ago
Diff.php
14 years ago
GeoIP.dat
9 years ago
GeoIPv6.dat
9 years ago
IPTraf.php
9 years ago
compat.php
10 years ago
conntest.php
11 years ago
cronview.php
10 years ago
dashboard.php
9 years ago
dbview.php
11 years ago
diffResult.php
11 years ago
email_genericAlert.php
9 years ago
email_newIssues.php
9 years ago
email_passwdChanged.php
10 years ago
email_pleaseChangePasswd.php
10 years ago
email_unlockRequest.php
11 years ago
live_activity.php
9 years ago
menu_activity.php
9 years ago
menu_blocking.php
9 years ago
menu_blocking_advancedBlocking.php
9 years ago
menu_blocking_blockedIPs.php
9 years ago
menu_blocking_countryBlocking.php
9 years ago
menu_dashboard.php
9 years ago
menu_firewall.php
9 years ago
menu_firewall_bruteForce.php
9 years ago
menu_firewall_rateLimiting.php
9 years ago
menu_firewall_waf.php
9 years ago
menu_options.php
9 years ago
menu_scan.php
9 years ago
menu_scan_options.php
9 years ago
menu_scan_scan.php
9 years ago
menu_scan_schedule.php
9 years ago
menu_tools.php
9 years ago
menu_tools_diagnostic.php
9 years ago
menu_tools_passwd.php
9 years ago
menu_tools_twoFactor.php
9 years ago
menu_tools_whois.php
9 years ago
pageTitle.php
9 years ago
schedWeekEntry.php
12 years ago
sysinfo.php
10 years ago
unknownFiles.php
11 years ago
viewFullActivityLog.php
9 years ago
wf503.php
9 years ago
wfAPI.php
9 years ago
wfAction.php
14 years ago
wfActivityReport.php
9 years ago
wfArray.php
13 years ago
wfBrowscap.php
12 years ago
wfBrowscapCache.php
9 years ago
wfBulkCountries.php
13 years ago
wfCache.php
9 years ago
wfConfig.php
9 years ago
wfCountryMap.php
13 years ago
wfCrawl.php
10 years ago
wfCrypt.php
11 years ago
wfDB.php
9 years ago
wfDashboard.php
9 years ago
wfDiagnostic.php
9 years ago
wfDict.php
14 years ago
wfDirectoryIterator.php
11 years ago
wfGeoIP.php
9 years ago
wfHelperBin.php
11 years ago
wfHelperString.php
11 years ago
wfIPWhitelist.php
9 years ago
wfIssues.php
9 years ago
wfLockedOut.php
9 years ago
wfLog.php
9 years ago
wfMD5BloomFilter.php
9 years ago
wfNotification.php
9 years ago
wfRESTAPI.php
9 years ago
wfRate.php
10 years ago
wfScan.php
9 years ago
wfScanEngine.php
9 years ago
wfSchema.php
9 years ago
wfStyle.php
9 years ago
wfUnlockMsg.php
10 years ago
wfUpdateCheck.php
9 years ago
wfUtils.php
9 years ago
wfView.php
10 years ago
wfViewResult.php
11 years ago
wordfenceClass.php
9 years ago
wordfenceConstants.php
9 years ago
wordfenceHash.php
9 years ago
wordfenceScanner.php
9 years ago
wordfenceURLHoover.php
9 years ago
menu_firewall_bruteForce.php
138 lines
| 1 | <?php |
| 2 | $w = new wfConfig(); |
| 3 | ?> |
| 4 | <div class="wordfenceHelpLink"><a href="<?php echo $helpLink; ?>" target="_blank" class="wfhelp"></a><a href="<?php echo $helpLink; ?>" target="_blank"><?php echo $helpLabel; ?></a></div> |
| 5 | <div class="wf-add-top"> |
| 6 | <form id="wfConfigForm-bruteForce" class="wf-form-horizontal"> |
| 7 | <div class="wf-form-group"> |
| 8 | <label for="blockedTime" class="wf-col-sm-5 wf-control-label">Enforce strong passwords <a href="http://docs.wordfence.com/en/Wordfence_options#Enforce_strong_passwords.3F" target="_blank" class="wfhelp"></a></label> |
| 9 | <div class="wf-col-sm-7"> |
| 10 | <select class="wf-form-control" id="loginSec_strongPasswds" name="loginSec_strongPasswds"> |
| 11 | <option value="">Do not force users to use strong passwords</option> |
| 12 | <option value="pubs"<?php $w->sel( 'loginSec_strongPasswds', 'pubs' ); ?>>Force admins and publishers to use strong passwords (recommended)</option> |
| 13 | <option value="all"<?php $w->sel( 'loginSec_strongPasswds', 'all' ); ?>>Force all members to use strong passwords</option> |
| 14 | </select> |
| 15 | </div> |
| 16 | </div> |
| 17 | <div class="wf-form-group"> |
| 18 | <label for="loginSec_maxFailures" class="wf-col-sm-5 wf-control-label">Lock out after how many login failures <a href="http://docs.wordfence.com/en/Wordfence_options#Lock_out_after_how_many_login_failures" target="_blank" class="wfhelp"></a></label> |
| 19 | <div class="wf-col-sm-7"> |
| 20 | <select id="loginSec_maxFailures" class="wf-form-control" name="loginSec_maxFailures"> |
| 21 | <option value="1"<?php $w->sel( 'loginSec_maxFailures', '1' ); ?>>1</option> |
| 22 | <option value="2"<?php $w->sel( 'loginSec_maxFailures', '2' ); ?>>2</option> |
| 23 | <option value="3"<?php $w->sel( 'loginSec_maxFailures', '3' ); ?>>3</option> |
| 24 | <option value="4"<?php $w->sel( 'loginSec_maxFailures', '4' ); ?>>4</option> |
| 25 | <option value="5"<?php $w->sel( 'loginSec_maxFailures', '5' ); ?>>5</option> |
| 26 | <option value="6"<?php $w->sel( 'loginSec_maxFailures', '6' ); ?>>6</option> |
| 27 | <option value="7"<?php $w->sel( 'loginSec_maxFailures', '7' ); ?>>7</option> |
| 28 | <option value="8"<?php $w->sel( 'loginSec_maxFailures', '8' ); ?>>8</option> |
| 29 | <option value="9"<?php $w->sel( 'loginSec_maxFailures', '9' ); ?>>9</option> |
| 30 | <option value="10"<?php $w->sel( 'loginSec_maxFailures', '10' ); ?>>10</option> |
| 31 | <option value="20"<?php $w->sel( 'loginSec_maxFailures', '20' ); ?>>20</option> |
| 32 | <option value="30"<?php $w->sel( 'loginSec_maxFailures', '30' ); ?>>30</option> |
| 33 | <option value="40"<?php $w->sel( 'loginSec_maxFailures', '40' ); ?>>40</option> |
| 34 | <option value="50"<?php $w->sel( 'loginSec_maxFailures', '50' ); ?>>50</option> |
| 35 | <option value="100"<?php $w->sel( 'loginSec_maxFailures', '100' ); ?>>100</option> |
| 36 | <option value="200"<?php $w->sel( 'loginSec_maxFailures', '200' ); ?>>200</option> |
| 37 | <option value="500"<?php $w->sel( 'loginSec_maxFailures', '500' ); ?>>500</option> |
| 38 | </select> |
| 39 | </div> |
| 40 | </div> |
| 41 | <div class="wf-form-group"> |
| 42 | <label for="loginSec_maxForgotPasswd" class="wf-col-sm-5 wf-control-label">Lock out after how many forgot password attempts <a href="http://docs.wordfence.com/en/Wordfence_options#Lock_out_after_how_many_forgot_password_attempts" target="_blank" class="wfhelp"></a></label> |
| 43 | <div class="wf-col-sm-7"> |
| 44 | <select id="loginSec_maxForgotPasswd" class="wf-form-control" name="loginSec_maxForgotPasswd"> |
| 45 | <option value="1"<?php $w->sel( 'loginSec_maxForgotPasswd', '1' ); ?>>1</option> |
| 46 | <option value="2"<?php $w->sel( 'loginSec_maxForgotPasswd', '2' ); ?>>2</option> |
| 47 | <option value="3"<?php $w->sel( 'loginSec_maxForgotPasswd', '3' ); ?>>3</option> |
| 48 | <option value="4"<?php $w->sel( 'loginSec_maxForgotPasswd', '4' ); ?>>4</option> |
| 49 | <option value="5"<?php $w->sel( 'loginSec_maxForgotPasswd', '5' ); ?>>5</option> |
| 50 | <option value="6"<?php $w->sel( 'loginSec_maxForgotPasswd', '6' ); ?>>6</option> |
| 51 | <option value="7"<?php $w->sel( 'loginSec_maxForgotPasswd', '7' ); ?>>7</option> |
| 52 | <option value="8"<?php $w->sel( 'loginSec_maxForgotPasswd', '8' ); ?>>8</option> |
| 53 | <option value="9"<?php $w->sel( 'loginSec_maxForgotPasswd', '9' ); ?>>9</option> |
| 54 | <option value="10"<?php $w->sel( 'loginSec_maxForgotPasswd', '10' ); ?>>10</option> |
| 55 | <option value="20"<?php $w->sel( 'loginSec_maxForgotPasswd', '20' ); ?>>20</option> |
| 56 | <option value="30"<?php $w->sel( 'loginSec_maxForgotPasswd', '30' ); ?>>30</option> |
| 57 | <option value="40"<?php $w->sel( 'loginSec_maxForgotPasswd', '40' ); ?>>40</option> |
| 58 | <option value="50"<?php $w->sel( 'loginSec_maxForgotPasswd', '50' ); ?>>50</option> |
| 59 | <option value="100"<?php $w->sel( 'loginSec_maxForgotPasswd', '100' ); ?>>100</option> |
| 60 | <option value="200"<?php $w->sel( 'loginSec_maxForgotPasswd', '200' ); ?>>200</option> |
| 61 | <option value="500"<?php $w->sel( 'loginSec_maxForgotPasswd', '500' ); ?>>500</option> |
| 62 | </select> |
| 63 | </div> |
| 64 | </div> |
| 65 | <div class="wf-form-group"> |
| 66 | <label for="loginSec_countFailMins" class="wf-col-sm-5 wf-control-label">Count failures over what time period <a href="http://docs.wordfence.com/en/Wordfence_options#Count_failures_over_what_time_period" target="_blank" class="wfhelp"></a></label> |
| 67 | <div class="wf-col-sm-7"> |
| 68 | <select id="loginSec_countFailMins" class="wf-form-control" name="loginSec_countFailMins"> |
| 69 | <option value="5"<?php $w->sel( 'loginSec_countFailMins', '5' ); ?>>5 minutes</option> |
| 70 | <option value="10"<?php $w->sel( 'loginSec_countFailMins', '10' ); ?>>10 minutes</option> |
| 71 | <option value="30"<?php $w->sel( 'loginSec_countFailMins', '30' ); ?>>30 minutes</option> |
| 72 | <option value="60"<?php $w->sel( 'loginSec_countFailMins', '60' ); ?>>1 hour</option> |
| 73 | <option value="120"<?php $w->sel( 'loginSec_countFailMins', '120' ); ?>>2 hours</option> |
| 74 | <option value="360"<?php $w->sel( 'loginSec_countFailMins', '360' ); ?>>6 hours</option> |
| 75 | <option value="720"<?php $w->sel( 'loginSec_countFailMins', '720' ); ?>>12 hours</option> |
| 76 | <option value="1440"<?php $w->sel( 'loginSec_countFailMins', '1440' ); ?>>1 day</option> |
| 77 | </select> |
| 78 | </div> |
| 79 | </div> |
| 80 | <div class="wf-form-group"> |
| 81 | <label for="loginSec_lockoutMins" class="wf-col-sm-5 wf-control-label">Amount of time a user is locked out <a href="http://docs.wordfence.com/en/Wordfence_options#Amount_of_time_a_user_is_locked_out" target="_blank" class="wfhelp"></a></label> |
| 82 | <div class="wf-col-sm-7"> |
| 83 | <select id="loginSec_lockoutMins" class="wf-form-control" name="loginSec_lockoutMins"> |
| 84 | <option value="5"<?php $w->sel( 'loginSec_lockoutMins', '5' ); ?>>5 minutes</option> |
| 85 | <option value="10"<?php $w->sel( 'loginSec_lockoutMins', '10' ); ?>>10 minutes</option> |
| 86 | <option value="30"<?php $w->sel( 'loginSec_lockoutMins', '30' ); ?>>30 minutes</option> |
| 87 | <option value="60"<?php $w->sel( 'loginSec_lockoutMins', '60' ); ?>>1 hour</option> |
| 88 | <option value="120"<?php $w->sel( 'loginSec_lockoutMins', '120' ); ?>>2 hours</option> |
| 89 | <option value="360"<?php $w->sel( 'loginSec_lockoutMins', '360' ); ?>>6 hours</option> |
| 90 | <option value="720"<?php $w->sel( 'loginSec_lockoutMins', '720' ); ?>>12 hours</option> |
| 91 | <option value="1440"<?php $w->sel( 'loginSec_lockoutMins', '1440' ); ?>>1 day</option> |
| 92 | <option value="2880"<?php $w->sel( 'loginSec_lockoutMins', '2880' ); ?>>2 days</option> |
| 93 | <option value="7200"<?php $w->sel( 'loginSec_lockoutMins', '7200' ); ?>>5 days</option> |
| 94 | <option value="14400"<?php $w->sel( 'loginSec_lockoutMins', '14400' ); ?>>10 days</option> |
| 95 | <option value="28800"<?php $w->sel( 'loginSec_lockoutMins', '28800' ); ?>>20 days</option> |
| 96 | <option value="43200"<?php $w->sel( 'loginSec_lockoutMins', '43200' ); ?>>30 days</option> |
| 97 | <option value="86400"<?php $w->sel( 'loginSec_lockoutMins', '86400' ); ?>>60 days</option> |
| 98 | </select> |
| 99 | </div> |
| 100 | </div> |
| 101 | <div class="wf-form-group"> |
| 102 | <label for="loginSec_lockInvalidUsers" class="wf-col-sm-5 wf-control-label">Immediately lock out invalid usernames <a href="http://docs.wordfence.com/en/Wordfence_options#Immediately_lock_out_invalid_usernames" target="_blank" class="wfhelp"></a></label> |
| 103 | <div class="wf-col-sm-7"> |
| 104 | <div class="wf-checkbox"><input type="checkbox" id="loginSec_lockInvalidUsers" name="loginSec_lockInvalidUsers" value="1" <?php $w->cb('loginSec_lockInvalidUsers'); ?>></div> |
| 105 | </div> |
| 106 | </div> |
| 107 | <div class="wf-form-group"> |
| 108 | <label for="loginSec_maskLoginErrors" class="wf-col-sm-5 wf-control-label">Don't let WordPress reveal valid users in login errors <a href="http://docs.wordfence.com/en/Wordfence_options#Don.27t_let_WordPress_reveal_valid_users_in_login_errors" target="_blank" class="wfhelp"></a></label> |
| 109 | <div class="wf-col-sm-7"> |
| 110 | <div class="wf-checkbox"><input type="checkbox" id="loginSec_maskLoginErrors" name="loginSec_maskLoginErrors" value="1" <?php $w->cb('loginSec_maskLoginErrors'); ?>></div> |
| 111 | </div> |
| 112 | </div> |
| 113 | <div class="wf-form-group"> |
| 114 | <label for="loginSec_blockAdminReg" class="wf-col-sm-5 wf-control-label">Prevent users registering 'admin' username if it doesn't exist <a href="http://docs.wordfence.com/en/Wordfence_options#Prevent_users_registering_.27admin.27_username_if_it_doesn.27t_exist" target="_blank" class="wfhelp"></a></label> |
| 115 | <div class="wf-col-sm-7"> |
| 116 | <div class="wf-checkbox"><input type="checkbox" id="loginSec_blockAdminReg" name="loginSec_blockAdminReg" value="1" <?php $w->cb('loginSec_blockAdminReg'); ?>></div> |
| 117 | </div> |
| 118 | </div> |
| 119 | <div class="wf-form-group"> |
| 120 | <label for="loginSec_disableAuthorScan" class="wf-col-sm-5 wf-control-label">Prevent discovery of usernames through '/?author=N' scans, the oEmbed API, and the WordPress REST API <a href="http://docs.wordfence.com/en/Wordfence_options#Prevent_discovery_of_usernames_through_.27.3F.2Fauthor.3DN.27_scans" target="_blank" class="wfhelp"></a></label> |
| 121 | <div class="wf-col-sm-7"> |
| 122 | <div class="wf-checkbox"><input type="checkbox" id="loginSec_disableAuthorScan" name="loginSec_disableAuthorScan" value="1" <?php $w->cb('loginSec_disableAuthorScan'); ?>></div> |
| 123 | </div> |
| 124 | </div> |
| 125 | <div class="wf-form-group"> |
| 126 | <label for="loginSec_userBlacklist" class="wf-col-sm-5 wf-control-label">Immediately block the IP of users who try to sign in as these usernames <a href="http://docs.wordfence.com/en/Wordfence_options#Immediately_block_the_IP_of_users_who_try_to_sign_in_as_these_usernames" target="_blank" class="wfhelp"></a></label> |
| 127 | <div class="wf-col-sm-7"> |
| 128 | <textarea id="loginSec_userBlacklist" class="wf-form-control" rows="4" name="loginSec_userBlacklist"><?php echo wfUtils::cleanupOneEntryPerLine($w->getHTML( 'loginSec_userBlacklist' )); ?></textarea> |
| 129 | <span class="wf-help-block">(One per line. Existing users won't be blocked.)</span> |
| 130 | </div> |
| 131 | </div> |
| 132 | <div class="wf-form-group"> |
| 133 | <div class="wf-col-sm-7 wf-col-sm-offset-5"> |
| 134 | <a class="wf-btn wf-btn-primary wf-btn-callout" href="#" onclick="WFAD.savePartialConfig('#wfConfigForm-bruteForce'); return false;">Save Options</a> <div class="wfAjax24"></div><span class="wfSavedMsg"> Your changes have been saved!</span> |
| 135 | </div> |
| 136 | </div> |
| 137 | </form> |
| 138 | </div> |