WP Cassify vs WPS Limit Login

If you’re happy with this plugin : As a reward for my efforts, I would like to receive T-shirts (or other goodies) as gifts from the universities or companies that use it. My size is L. Best regards. This Apereo CAS authentication plugin has no phpCas library dependency. This is not only an authentication plugin. You can build custom authorization rules according to cas user attributes populated. If user don’t exist in WordPress database, it can be created automatically. There are many features. You can customize everything. Website https://wpcassify.wordpress.com/ Development and release environment This plugin is now developed and tested from a github repository. You can find it here : https://github.com/WP-Cassify/wp-cassify-develop Don’t hesitate to contribute to this project. You can fork it and make pull requests ! Requirements Require at least PHP version 7.0 Require at least PHP CURL package Features included SLO (Single Log Out) support (thanks to dedotombo and me) Adding NCONTAINS operator (thanks to blandman) Fix bug on Gateway mode (autologin) (thanks to dedotombo again). Now it’s now necessary to hack theme files to fire it. Adding option logout on authentication failure to not disturb users Initialize PHP session at a later stage (on wp_loaded not on init) Adding some customs hooks and filters. Tested with Apereo CAS Server version 7.3.5 Compatible with CAS Protocol version 2 and 3 Automatic user creation if not exist in WordPress database. Synchronize WordPress User metas with CAS User attributes. Add support for multivaluate cas user fields. Now multivaluate fields can be serialized to be stored in custom WP User meta. Backup / Restore plugin configuration options settings You can choose CAS User attributes you want to populate. Then you can access them via PHP Session. Be careful, to access to CAS User Attributes from your theme file (from 1.8.4), use code below : wp_cassify_get_cas_user_datas() ); } ?> Set up WordPress Roles to User according to CAS User attributes. If plugin is network activated, you can define User Role Rule scope by blog id. Authorization rule editor. Compatible with WordPress Access Control Plugin. Manage URL White List to bypass CAS Authentication on certain pages. Much simpler bypass authentication with post method provided by Susan Boland (See online documentation). Create wordpress authentication form with redirect attribute like this (works only if URL bypass is enabled in settings) : true, 'remember' => true, 'redirect' => site_url( '/?wp_cassify_bypass=bypass' ), 'form_id' => 'loginform', 'id_username' => 'user_login', 'id_password' => 'user_pass', 'id_remember' => 'rememberme', 'id_submit' => 'wp-submit', 'label_username' => __( 'Username' ), 'label_password' => __( 'Password' ), 'label_remember' => __( 'Remember Me' ), 'label_log_in' => __( 'Log In' ), 'value_username' => '', 'value_remember' => false ); wp_login_form( $args ); ?> Receive email notifications when trigger is fired (after user account creation, after user login/logout). Define notifications rules based on user attributes values. Purge user roles before applying user role rules. Define user account expiration rules bases on CAS User attributes. Network activation allowed You can set Service Logout URL (Needs to have CAS Server with followServiceRedirects option configured). Add support for web application hosted behind a reverse proxy. (Thanks to franck86) Add custom hooks : wp_cassify_after_cas_authentication, wp_cassify_before_auth_user_wordpress, wp_cassify_before_redirect, wp_cassify_after_redirect. (See online documentation) Custom filter to perform custom cas server response parsing. Hook name : wp_cassify_custom_parsing_cas_xml_response (See online documentation) Custom shortcode to generate CAS login/logout link into your blog. (See online documentation) Debug settings, dump last xml cas server response. Detect if user has already authenticated by CAS from your public pages and perform auto-login with gateway mode Add ‘-IN’ and ‘-NOTIN’ operators to process array attributes values returned from CAS. When you have : $cas_user_datas['title'] = array( 'Student', 'Professor' ); Then you can use : (CAS{title} -IN "professor")

Français Limitez le nombre de tentatives de connexion possibles via la page de connexion et en utilisant les cookies auth. WordPress par défaut permet des tentatives de connexion illimitées soit via la page de connexion ou en envoyant des cookies spéciaux. Cela permet aux mots de passe (ou hashs) d’être craqués via la force brute relativement facilement. WPS Limit login limite les tentatives de connexion et bloque l’envoi d’autres tentatives à une adresse Internet après l’atteinte d’une limite spécifiée, ce qui rend une attaque par force brute difficile, voire impossible. Caractéristiques: Limiter le nombre de nouvelles tentatives lors de la connexion (pour chaque IP). Ceci est entièrement personnalisable. Limitez le nombre de tentatives de connexion en utilisant des cookies d’autorisation de la même manière. Informe l’utilisateur sur les tentatives restantes ou le temps de verrouillage sur la page de connexion. Journalisation et notification par courriel facultative. Gère le serveur derrière le proxy inverse (reverse proxy). Il est possible de mettre en liste blanche / liste noire les adresses IP. Compatibilité avec le pare-feu du site Web Sucuri. Protection de passerelle XMLRPC. Woocommerce protection de la page de connexion. Compatibilité multi-sites avec des paramètres MU supplémentaires. Pour en savoir plus lisez l’article suivant : https://wpformation.com/wps-limit-login Ce plugin vous est gentiment proposé par WPServeur l’hébergeur spécialisé WordPress. Découvrez également nos autres extensions gratuites : – WPS Hide Login pour changer votre URL de connexion en ce que vous voulez. – WPS Bidouille pour optimiser votre WordPress et faire le plein d’infos. – WPS Cleaner pour nettoyer votre site WordPress. Ce plugin est seulement maintenu, ce qui signifie que nous ne garantissons pas un support gratuit. Envisagez de signaler un problème et soyez patient. English Limit the number of login attempts that possible both through the normal login as well as using the auth cookies. WordPress by default allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be cracked via brute-force relatively easily. WPS Limit login blocks an Internet address from making further attempts after a specified limit on retries has been reached, making a brute-force attack difficult or impossible. Features: Limit the number of retry attempts when logging in (per each IP). This is fully customizable. Limit the number of attempts to log in using authorization cookies in the same way. Informs the user about the remaining retries or lockout time on the login page. Optional logging and optional email notification. Handles server behind the reverse proxy. It is possible to whitelist/blacklist IPs. Sucuri Website Firewall compatibility. XMLRPC gateway protection. Woocommerce login page protection. Multi-site compatibility with extra MU settings. To learn more read the following article: https://wpformation.com/wps-limit-login This plugin is kindly proposed by WPServeur the specialized WordPress web host. Découvrez également nos autres extensions gratuites : – WPS Hide Login to change your login URL to whatever you want. – WPS Bidouille to optimize your WordPress and get more info. – WPS Cleaner to clean your WordPress site. This plugin is only maintained, which means we do not guarantee free support. Consider reporting a problem and be patient.