Comments on: Login Lockdown! Keep Wordpress Safe.

By: Login LockDown: Asegurando nuestro Wordpress | xkod

[...] Fuente : Clic aquí para ir a la pagina ] [ Más información : Clic aquí para ir a la pagina [...]

By: Lucia

Lucia — Thu, 30 Aug 2007 11:58:28 +0000

@Tricia– I added a “wait a day” feature because someone asked. So, it will follow in 24 hours. I’m going to turn that off, but I after coding, I like to use the features to double and triple check.

By: Lucia

Lucia — Thu, 30 Aug 2007 11:56:52 +0000

@Tricia– this one should only consume resources when you try to login, which isn’t very often. Also, I doubt it does much in terms of computer operations. So, it probably uses very little cpu.

The other one I mentioned this week uses even less. It just runs and creates an .htaccess files with a password. But that’s less convenient to use than this.

@S – Peterson. If someone actually hacked in and added that, you really do need this plugin! (If it turns out the person writing the theme did that, then you need to never trust that theme writer again!)

By: S Peterson

S Peterson — Thu, 30 Aug 2007 08:35:09 +0000

I just discovered a hack or an exploit that wrote “mesothel. . .” into the footer of my blog. That, of course, means that every page as well as all posts have contracted “mesothel . . . ” That was fairly easy to fix by commenting out all the php in the footer that I didn’t recognize or that wasn’t identified. What is apparently the same code is resident in the WP theme.

Is this familiar?

By: Tricia

Tricia — Thu, 30 Aug 2007 05:43:16 +0000

That’s weird … my link didn’t follow. I wonder if the slash on the end made it not follow? I don’t really care if my link follows or not, but I’m just wondering what’s up with your plugin. I took the end slash off my link this time to see if anything different happens.

By: Tricia

Tricia — Thu, 30 Aug 2007 05:41:36 +0000

Hey Lucia long time no talk.

As usual I have to wonder how much of the CPU resources this plugin uses. It sounds like a great plugin, especially if it did contact the blog owner with the ip address and possibly other details of the attempted logins.

By: John Hunter

John Hunter — Wed, 29 Aug 2007 22:17:09 +0000

Thanks this looks like another useful plugin.