• Resolved wp_edu

    (@alemao2k6)


    I have realised that sometimes, when customers or admins change their display name to a secondary option, the function to block usernames does not work.

    When you check the user’s profile on Admin area, you can see the greyed out (cannot be changed) username. But if the user changes their display name to another option, then the function stops blocking.

    So I was checking the logs in my traffic logs and noticed that the user I was trying to block had changed their display name to a different one (he chose “firstname lastname”). I copied that into the username blocking options and I think now it began to work as expected.

    Not a question topic, but a tip for other who are facing this problem. All other threads I found were closed to comments, so I decided to make this new on on an informative attitude.

    All the best to everyone

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @alemao2k6, thanks for your message.

    The “Immediately block the IP of users who try to sign in as these usernames” ignores valid usernames that are present in your WordPress users list. This feature is to specifically prevent things such as “admin” and other variants that could be built from your site address etc. that bots may automatically try during a brute-force attack.

    I would feel that where this has been successful in the past, the user mistakenly tried to sign in with their updated nickname and were caught by the “Immediately lock out invalid usernames” feature.

    Let me know if I have the wrong impression on how you’re blocking users, or want to expand some more on this.

    Thanks,

    Peter.

    Thread Starter wp_edu

    (@alemao2k6)

    Oh now I inderstand what is happening.

    Well, I want to block a valid user who tries to make fraud on my ecommerce.

    How do you suggest I block this user with Wordfence?

    The info you gave me should have been added to the feature description when you click on the ? Icon near this feature on Wordfence All Options page. The info on the website is not specific about ignoring valid usernames, so I would never figure this out by myself.

    In this case, my suggestion does not work and I still need to block the user, can Wordfence WAF help with this? I have the paid version.

    Thank you

    Plugin Support wfpeter

    (@wfpeter)

    Hi @alemao2k6,

    I believe you may have to remove the user account altogether if you believe they are attempting fraud. However, if you’re a Premium Wordfence Customer, I recommend opening a support ticket at https://support.wordfence.com. They will be able to assist you faster and more efficiently.

    You can also access premium support via the Help menu item in the plugin, Help link on the plugin’s Dashboard page, on our documentation homepage or via the HELP link in the footer of all wordfence.com pages.

    Thanks again,

    Peter.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Simple solution to Blocking usernames not working’ is closed to new replies.