Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.
Sign upuser enumeration #2
Closed
Comments
This comment has been minimized.
This comment has been minimized.
|
@pjv Thanks for reporting this, by the way! Sorry it took so long to get back to you. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
i'm not (yet) using this plugin, but stumbled onto your repo in researching an issue i just posted for the original wp-fail2ban plugin. quickly looking at your code, i think it should have the same issue, so you might want to take a look at: https://wordpress.org/support/topic/false-positive-on-user-enumeration?replies=1
i'm not sure this is the best solution, but off the top of my head, i think that in the function starting around line 140 in
/classes/class-wp-fail2ban-redux.phpif you check for logged in users and exempted them from the block it would be an improvement.