• Resolved generosus

    (@generosus)


    Is your plugin feature (i.e., setting), “Immediately lock out invalid usernames“, case sensitive?

    For example, if we enter the username “hopscotch“, will it recognize any variations of it (e.g., “Hopscotch“, “HOPScotch“, etc.)?

    Following your answer, can you kindly update your documentation to clarify the above?

    Thank you!

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @generosus,

    WordPress usernames aren’t case sensitive by default, so you’ll usually be confronted with an “Error: This username is already registered” if you tried to add user “HopScotch” when “hopscotch” already exists. Therefore Wordfence will also see every variation of “HopScotch” you input as blockable, even if you only add it once. Naturally if a real user exists with that name, “Immediately lock out invalid usernames” will be bypassed.

    We likely won’t change the plugin to prevent multiple cases of the same username from being accepted there though as it?is?possible that another plugin causes usernames to be case-sensitive (intentionally or otherwise).

    It has been detailed to the team who can make adjustments to our documentation to add a note there so it’s easily found by our customers.

    Many thanks,
    Peter.

    Thread Starter generosus

    (@generosus)

    Thanks, Peter. That’s great, it keeps us from inputting variations of the same username in that field. Also, thanks for updating your documentation. That was fast! ??

Viewing 2 replies - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.