Limit login attempts

[arendaparent]

Limit Login Attempts

Is there a way to link the login modals and the hp login block with a plugin that limits login attempts? First and foremost I want to remove the default wordpress login possibilty through wp-admin, and I find that the login block that comes with hivepress can work good instead. The limiting login attempts plugins that I’ve found seems to just work with the default wp-admin / wp-login form, not with any modals or login-blocks. Also, is the login-block using the wp_login_form( ); function? Can I…

So what’s the conclusion how can i do this?

[Seegon]

Havent been able to do it yet

[ihor]

There are 2 possible solutions at the moment:

• A custom code snippet for the hivepress/v1/models/user/login action, count attempts and save them in cache with expiration (or post meta)

• Using a third-party plugin, if it has an API function for just counting the attempts by username or user ID, it’s possible to do this using the same action hook

[arendaparent]

So what do you do to safeguard your site against possible hackers?

[Seegon]

for now I have the capcha, but I dislike it alot, so looking for the 3-5 attempts implementation

[arendaparent]

I’m not so familiar with customization (you seem to be quite knowledgeable and experienced), does using a third-party plugin together with the code you and ihor chatted about, dont do the job?

[ihor]

There are the same security measures as for WordPress itself, I recommend using a solution like Fail2ban which will block any repeatable requests, not just login requests, this way a specific login request limitation will not be required. Also, enabling reCaptcha will prevent 99% of repeatable or bot requests, so brute forcing someone’s login credentials will be nearly impossible.