soderlind/wp-denyhost

WP-DenyHost denies a spammer from accessing your WordPress blog

WP-DenyHost

Contributors: PerS
Donate link: http://soderlind.no/donate/
Tags: deny host,spam,akismet,cloudflare
Requires at least: 4.4
Tested up to: 4.5
Stable tag: 1.3.0

WP-DenyHost denies a spammer from accessing your WordPress site. WP-DenyHost can add spammers to the CloudFlare Block list

Description

Based on a users IP address, WP-DenyHost will block a spammer if he already has been tagged as a spammer. Use it together with the Akismet plugin. Akismet tags the spammer, and WP-DenyHost prevents him from accessing you site.

If you have a CloudFlare account, the plugin can add spamers to CloudFlare Block list

Installation

Manual Installation

• Upload the files to wp-content/plugins/wp-denyhost/
• Activate the plugin

Automatic Installation

• On your WordPress blog, open the Dashboard
• Go to Plugins->Install New
• Search for "wp-denyhost"
• Click on install to install WP-DenyHost

Configuration

In Settings -> WP-DenyHost, set the threshold and response. Default threshold is 3, default response is 403 Forbidden.

If you have a CloudFlare account, you can enable CloudFlare and spammers will be added to the CloudFlare Block list

Screenshots

1. Option Page

2. CloudFlare Block list

Changelog

1.3.0

• Hard-code the text-domain for better compatibility with GlotPress.
• Update plugin for WordPress Coding Standards.
• Tested & found compatible with WP 4.5.
• General housekeeping.

1.2.7

• Tested with WordPress 4.3

1.2.6

• added new languages/wp-denyhost.po file (note, renamed the language file). removed javascript from plugin (loads faster)

1.2.5

• added $wpdb->prepare() to $wpdb->getvar()

1.2.4

• replaced wp_print_scripts hook with admin_enqueue_scripts hook

1.2.3

• removed PHP 4 "constructor"

1.2.2

• bug fix

1.2.1

• added ps_wp_denyhost_admin_init, triggered by admin_init hook

1.2.0

• Added support for CloudFlare Block list + removed wp deprecated code

1.1.3

• Fixed minor bug

1.1.2

• Added response 403 Forbidden

1.1.1

• Added languages/wp-denyhost.pot

1.1.0

• Major rewrite. Added option page

1.0.1

• Replaced LIKE (‘%$suspect%’) with = ‘$suspect’ i.e. look for exact match

1.0

• initial release

wp-denyhost's Issues

WP-DenyHost Prevents Media Manager

Activating WP-Denyhost prevents doing anything in media manager EXCEPT uploading via Drag and Drop.

I first noticed this after activating and attempting to set Featured Image on new post. The Media Manager comes up, but nothing is clickable. Cannot select images in anything.

WordPress Version: 3.5.2
WP-DenyHost Version: 0.9.1

monitoring hack attempt

please add login monitor, example, block all ip that tries to login with nonexistent username
or more than 3 wrong password in 3 minutes, etc...

and perhaps also monitor other hack attempt (directory traversal, etc...)

thank you.