Version Description
- allow comments to use author in url
Download this release
Release Info
| Developer | llocally |
| Plugin |  Stop User Enumeration |
| Version | 1.2.8 |
| Comparing to | |
| See all releases | |
Code changes from version 1.2.7 to 1.2.8
- readme.txt +5 -1
- stop-user-enumeration.php +11 -4
readme.txt
CHANGED
|
@@ -4,7 +4,7 @@ Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_i
|
|
| 4 |
Tags: User Enumeration, Security, WPSCAN, fail2ban
|
| 5 |
Requires at least: 3.4
|
| 6 |
Tested up to: 3.9.2
|
| 7 |
-
Stable tag: 1.2.
|
| 8 |
License: GPLv2 or later
|
| 9 |
License URI: http://www.gnu.org/licenses/gpl-2.0.html
|
| 10 |
|
|
@@ -41,6 +41,10 @@ Adjusted to your own requirements.
|
|
| 41 |
|
| 42 |
== Changelog ==
|
| 43 |
=
|
|
|
|
|
|
|
|
|
|
|
|
|
| 44 |
= 1.2.7 =
|
| 45 |
|
| 46 |
* bug fix to POST protection
|
| 4 |
Tags: User Enumeration, Security, WPSCAN, fail2ban
|
| 5 |
Requires at least: 3.4
|
| 6 |
Tested up to: 3.9.2
|
| 7 |
+
Stable tag: 1.2.8
|
| 8 |
License: GPLv2 or later
|
| 9 |
License URI: http://www.gnu.org/licenses/gpl-2.0.html
|
| 10 |
|
| 41 |
|
| 42 |
== Changelog ==
|
| 43 |
=
|
| 44 |
+
= 1.2.8 =
|
| 45 |
+
|
| 46 |
+
* allow comments to use author in url
|
| 47 |
+
|
| 48 |
= 1.2.7 =
|
| 49 |
|
| 50 |
* bug fix to POST protection
|
stop-user-enumeration.php
CHANGED
|
@@ -3,7 +3,7 @@
|
|
| 3 |
Plugin Name: Stop User Enumeration
|
| 4 |
Plugin URI: http://llocally.com/wordpress-plugins/stop-user-enumeration
|
| 5 |
Description: User enumeration is a technique used by hackers to get your login name if you are using permalinks. This plugin stops that.
|
| 6 |
-
Version: 1.2.
|
| 7 |
Author: llocally
|
| 8 |
Author URI: http://llocally.com/wordpress-plugins/
|
| 9 |
License: GPLv2 or later
|
|
@@ -25,12 +25,19 @@ along with this program; if not, write to the Free Software
|
|
| 25 |
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
| 26 |
*/
|
| 27 |
|
| 28 |
-
|
|
|
|
|
|
|
|
|
|
| 29 |
ll_kill_enumeration();
|
| 30 |
}
|
| 31 |
|
| 32 |
-
if
|
| 33 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
| 34 |
add_filter('redirect_canonical','ll_detect_enumeration', 10,2);
|
| 35 |
}
|
| 36 |
|
| 3 |
Plugin Name: Stop User Enumeration
|
| 4 |
Plugin URI: http://llocally.com/wordpress-plugins/stop-user-enumeration
|
| 5 |
Description: User enumeration is a technique used by hackers to get your login name if you are using permalinks. This plugin stops that.
|
| 6 |
+
Version: 1.2.8
|
| 7 |
Author: llocally
|
| 8 |
Author URI: http://llocally.com/wordpress-plugins/
|
| 9 |
License: GPLv2 or later
|
| 25 |
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
| 26 |
*/
|
| 27 |
|
| 28 |
+
|
| 29 |
+
|
| 30 |
+
if ( ! is_admin()){
|
| 31 |
+
if (!empty($_POST[author])) {
|
| 32 |
ll_kill_enumeration();
|
| 33 |
}
|
| 34 |
|
| 35 |
+
if(preg_match('/author=([0-9]*)/', $_SERVER['QUERY_STRING']) === 1)
|
| 36 |
+
ll_kill_enumeration();
|
| 37 |
+
|
| 38 |
+
// If isn't admin, requested URI isn't wp-comments-post and $_POST['author']
|
| 39 |
+
if(preg_match('/(wp-comments-post)/', $_SERVER['REQUEST_URI']) === 0 && isset($_POST['author']))
|
| 40 |
+
ll_kill_enumeration();
|
| 41 |
add_filter('redirect_canonical','ll_detect_enumeration', 10,2);
|
| 42 |
}
|
| 43 |
|
