Sam Hotchkiss

Just pushed 0.9.8.4 to address these issues. Thanks!

Just pushed 0.9.8.4 to address these issues. Thanks!

That was my first choice, too, but they regularly scan your directory and put it back if it’s removed or modified.

Hey David– this hook (along with brute_log_failed_attempt) has been added into 0.9.8.3, which will be released on Monday.

Hey David– no problem, sorry for any confusion!

We can definitely add a hook in– I’m on vacation this week, so I’m running from the boat to dinner, but I’ll get it in as soon as I have a few!

Best,
Sam

Hi David– I certainly do apologize, this was not intended to make it out into our live code yet, and I’ve released an update removing it.

We didn’t want to let the cat out of the bag quite yet, but we are working on a service where we can proactively notify you when one of your plugins has been flagged as having a serious security issue (to help distinguish between minor plugin updates and major security fixes)– at this point, we have built the functionality to allow our server (and ours alone– there is a second key which is known only to your site and ours) to get back your plugin name/version, WordPress version, and whether or not you have a user named “admin”, so that we can provide feedback to help you make your site more secure.

As it stands, one API key WOULD work for multiple sites, however, we ask that you use one key per site, and we WILL start enforcing that. It’s quick and easy to get as many keys as you need, and we promise that we’ll make it worth your while down the road.

Correct– on multisite, all settings are global

Hi Tevya– right now, we only track data on a per-API-key basis, so there wouldn’t be a way to split that up. However, we plan to start tracking more granular information directly in your site DB.

Thanks for the feedback– would love to know more about your plugin, as well– feel free to shoot me an email, sam at brute protect dot com

Definitely worth a shot– I’m on vacation this week, but I’ll have one of the guys back in the office try it out and report back here.

FWIW, once we roll out our upcoming major upgrade, this won’t be an issue (BP not fully protecting you, that is).

Hey John– there is now an option for this in 0.9.8.1

Thanks!
Sam

Hi Tevya– the stats for your own site will show up as soon as we’ve blocked an attack. If you are seeing the dashboard stats and not getting a warning, then it is working.

Regarding blocking the dashboard display from non-admins– I’ll work on that! We’ve already added the ability for super-admins to hide the widget on network sites (for WPMU), so it shouldn’t be too tricky. Stay tuned!

We have not tested for conflicts with any other security plugins. That said, BP only uses standard WordPress hooks and functions, so you should be alright! Please report back and let us know how you fared!

We have not tested for conflicts with any other security plugins. That said, BP only uses standard WordPress hooks and functions, so you should be alright! Please report back and let us know how you fared!

Thanks!