Fail2WP vs DocCheck Login

Important notice: This plugin is being discontinued. The DocCheck login system based on the DocCheck CReaM platform will be shut down on June 30. From that date onward, this plugin will no longer be functional. The successor plugin, DocCheck Access https://wordpress.org/plugins/doccheck-access/, is built on the new DocCheck Access platform and replaces this plugin. Please migrate your website to the new plugin before June 30 to ensure uninterrupted authentication for your users. This plugin is no longer being developed and will no longer receive updates, security patches, or support. This open source plugin provides a solution for the technical implementation of the DocCheck login onto WordPress websites and authenticates verified healthcare professionals, thus securing your website according to the German Health Services and Products Advertising Act. Features: Login-iFrame in 4 different sizes and 6 languages (GER, EN, FR, NL, IT, ES) DocCheck login integration with shortcode Protected websites in your navigation bar can be hidden from non-authorised users Information on public websites that is subject to the German Health Services and Products Advertising Act can be hidden from non-authorised users User authentication with OAuth2 User authentication with OAuth2 provides a high security standard and is part of the paid DocCheck Economy and Business license. This is why the WordPress plugin is not available for Basic login clients. DocCheck is not the author and can therefore not provide support for this plugin. If you have questions regarding the plugin, please direct them to the support forum. If you have any questions regarding the DocCheck login service and the DocCheck licenses, you can contact the DocCheck support.

This WordPress plugin provides security functionality and integration with fail2ban. It does not require fail2ban to function. Basic security functionality includes: Disabling login with username (require e-mail address) Allow/Deny login from IP address, hostname (including wildcard support) Preventing user enumeration (?author=nnn) Less detailed error messages on login failures Minimum username length Blocking specific usernames from being used to register new users Requiring e-mail address matching for new user registrations Warning about new user role setting Blocking of portions or all of WordPress REST API Disabling of RSS and Atom feeds Removal of “Generator” information from HTML and feeds Detection of Cloudflare IP addresses for logging of actual IP addresses Blocking/Allowing logins from IP addresses, IP ranges, and/or hostnames Partially or fully disable XMLRPC access Monitoring administrator accounts for unexpected role/account changes The plugin also plays nicely with Fail2ban, which is an advanced way of blocking IP addresses dynamically upon suspicious behavior. Other notes: This plugin may work with earlier versions of WordPress This plugin has been tested with WordPress 5.5-7.0.x at the time of this writing This plugin has been tested with PHP 7.4, 8.1, 8.2, and 8.3 at the time of this writing Local syntax/runtime compatibility checks have also been run on PHP 8.4 This plugin optionally makes use of mb_ PHP functions This plugin may create entries in your PHP error log (if active) This plugin contains no Javascript This plugin contains no tracking code and does not store any information about users Credits The Fail2WP Plugin was written by Joaquim Homrighausen while converting caffeine into code. Fail2WP is sponsored by WebbPlatsen i Sverige AB, Sweden. Copyright 2020-2026 Joaquim Homrighausen; all rights reserved. Commercial support and customizations for this plugin is available from WebbPlatsen i Sverige AB in Sweden. If you find this plugin useful, the author is happy to receive a donation, good review, or just a kind word. If there is something you feel to be missing from this plugin, or if you have found a problem with the code or a feature, please do not hesitate to reach out to [email protected]. This plugin can also be downloaded from code.webbplatsen.net and GitHub More detailed documentation is available at code.webbplatsen.net/documentation/fail2wp/ Kudos to Thomas Lutz.