PHPBB Single Sign On
This plugin allows to use the password from a working phpBB installation to log into a WordPress blog. or on the other side to log into phpBB with the WordPress user. The username for the administration must be the same on the two installations. Otherwise you will end having admins that have no privileges on the other part. How it works There is no actual “sync” of the users. When the app is configured correctly. the app checks that the user who tries to log in is at least registered in one of the systems, if yes, and the password is correct : he’s logged on both systems and his account is created if missing. On password change it should also set the password on both platforms. WP2BB With WP2BB, you can now define that your posts are published in a forum, so that your community can add comments directly on them. You can add the method “wp2bb()” on your template so that you have links to your forum to add comments and a replies count There is also a widget to list the last replies in the forums P.S. : WP2BB was created by Alfredo de Hoces (http://www.alfredodehoces.com/) Uninstall To uninstall, you have a few steps to make Go the the Plugin options, revert the “auth mode” to “DB” and not “wpbb” If it doesn’t work go to the ACP in General -> Client communication -> Authentication Then go to the wordpress control panel and disable the plugin. The last step is then to go with FTP in the PHPBB folder and rename the file “common.php” to “common.wp.php” and the file “common-orig.php” to “common.php”. Your configurations should be separated again
Protect Login
Out of the box, WordPress will happily let anyone try to log in as often as they like. Type the wrong password a thousand times and it just shrugs and shows you the form again – which is exactly what someone running a brute-force script is counting on. Protect Login closes that door. It started life as a fork of Johan Eenfeldt‘s original Limit Login Attempts, a plugin a lot of us leaned on for years, and grew from there. It slows brute-force attacks to a crawl Protect Login watches failed logins per IP address. After a handful of wrong attempts that visitor has to wait before trying again, and if they keep guessing the wait grows. So a script built to try thousands of passwords ends up sitting on its hands. You decide who gets in, and who doesn’t Protect Login keeps a visible list of every address that’s currently locked out, right in the settings, and lets you release any of them with a single click. You can also keep an allowlist of addresses that skip the checks entirely (your office, your VPN’s exit node) and a blocklist of addresses that are turned away immediately. One login list, shared across all your sites If you look after more than one WordPress site – an agency, or just a small pile of your own projects — someone hammering one of them is often about to try the rest. Protect Login can link your sites together over its own Remote API: pick one site as the host, point the others at it with a URL and a key, and the block-, allow- and lockout-lists stay in sync across the lot. Block an address once and it’s blocked everywhere. And a few more things Gets the real client IP right when your site sits behind a reverse proxy or CDN — direct and proxy modes Speaks IPv6, not only IPv4 Works on Multisite, applying settings and lists across the network. Ships WP-CLI commands, so you can manage addresses and settings straight from the terminal. Lets developers set everything in code via filters — and locks the matching field in the UI, so nobody ends up fighting their own filter. Can enforce a minimum password strength for new passwords
