[BUG] Banned URLs are Case Sensitive

Hi

I’m using the banned URL feature of Wordfence a lot to immediately block hackers from accessing unwanted URLs.

Today I realized that the URLs entered into banned URLs list are case-sensitive. For example, if we add /phpmyadmin URL to the list and if someone try to access /phpMyAdmin URL, he’ll not be blocked. There might be many variations of a URL if we change case of each and every character and it’ll be very hard for us to block all variants.

In my opinion the entered banned URLs should be case-insensitive. So that we add one URL one time and can be sure that Wordfence will block visitors from accessing that URL no matter what case they choose.

I noticed it because I have entered /phpMyAdmin to the banned list and today someone tried to access /phpmyadmin and he was not banned. I tried it myself and I was also not blocked. I got 404 not found page.

So please fix this bug and make banned URLs case-insensitive.

Thank you.