Quantcast
Channel: WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support
Viewing all articles
Browse latest Browse all 32701

GermanKiwi on "[Plugin: Wordfence Security] New "blocked URLs" feature"

$
0
0

Wordfence 5.1.2 introduced this handy new feature:

"You can now specify one or more URL's that if accessed will cause the IP to immediately be blocked. See below 'Other Options' for the new feature."

This is a great feature that will be very helpful in blocking attack attempts.

I'd like to suggest expanding on this new feature, so that it supports regex or wildcards too. I often find that attackers will try to hit a bunch of URLs which have only slight variations, eg. maybe they use some variable at the end (example.com/foobar?123456), where the variable is different each time. Or maybe only the base part of the URL is the same and the end part changes (eg. example.com/wordpress/foobar, where "foobar" is a different string each time).

If I could use regex, I could simply enter "example.com/wordpress/.*" as the URL to block, and it would work for all variations that the attackers use.

Further to this, it might be easier to use this feature if I could enter in multiple URLs into a panel box, one URL per line, rather than in a single line with commas separating them (which means I can't see all the URLs at once because they're too long to be visible in the field there). You could move the entire feature to another page, eg. the Advanced Blocking page, for the sake of space.

Incidentally, I have a question about this feature: do I need to enter the full URL starting with http:// or do I only need to enter the URL starting with www?

https://wordpress.org/plugins/wordfence/


Viewing all articles
Browse latest Browse all 32701

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>