getStorageEngine();
if (!isset($collapseable)) {
$collapseable = true;
}
?>
-
'loginSecurityEnabled',
'value' => wfConfig::get('loginSecurityEnabled') ? '1': '0',
'titleHTML' => '' . esc_html__('Enable brute force protection', 'wordfence') . '',
'subtitle' => __('This option enables all "Brute Force Protection" options, including strong password enforcement and invalid login throttling. You can modify individual options below.', 'wordfence'),
'states' => array(
array('value' => '0', 'label' => __('Off', 'wordfence')),
array('value' => '1', 'label' => __('On', 'wordfence')),
),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_ENABLE_LOGIN_SECURITY),
'noSpacer' => true,
'alignment' => 'wf-right',
))->render();
?>
-
$b, 'label' => $b);
}
echo wfView::create('options/option-select', array(
'selectOptionName' => 'loginSec_maxFailures',
'selectOptions' => $options,
'selectValue' => wfConfig::get('loginSec_maxFailures'),
'title' => __('Lock out after how many login failures', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_LOCK_OUT_FAILURE_COUNT),
))->render();
?>
-
$b, 'label' => $b);
}
echo wfView::create('options/option-select', array(
'selectOptionName' => 'loginSec_maxForgotPasswd',
'selectOptions' => $options,
'selectValue' => wfConfig::get('loginSec_maxForgotPasswd'),
'title' => __('Lock out after how many forgot password attempts', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_LOCK_OUT_FORGOT_PASSWORD_COUNT),
))->render();
?>
-
$b, 'label' => wfUtils::makeDuration($b * 60));
}
echo wfView::create('options/option-select', array(
'selectOptionName' => 'loginSec_countFailMins',
'selectOptions' => $options,
'selectValue' => wfConfig::getInt('loginSec_countFailMins'),
'title' => __('Count failures over what time period', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_COUNT_TIME_PERIOD),
))->render();
?>
-
$b, 'label' => wfUtils::makeDuration($b * 60));
}
echo wfView::create('options/option-select', array(
'selectOptionName' => 'loginSec_lockoutMins',
'selectOptions' => $options,
'selectValue' => wfConfig::getInt('loginSec_lockoutMins'),
'title' => __('Amount of time a user is locked out', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_LOCKOUT_DURATION),
))->render();
?>
-
'loginSec_lockInvalidUsers',
'enabledValue' => 1,
'disabledValue' => 0,
'value' => wfConfig::get('loginSec_lockInvalidUsers') ? 1 : 0,
'title' => __('Immediately lock out invalid usernames', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_IMMEDIATELY_LOCK_OUT_INVALID_USERS),
))->render();
?>
-
'loginSec_userBlacklist',
'tokenValue' => $users,
'title' => __('Immediately block the IP of users who try to sign in as these usernames', 'wordfence'),
'subtitle' => __('Hit enter to add a username', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_IMMEDIATELY_BLOCK_USERS),
))->render();
?>
-
'loginSec_breachPasswds_enabled',
'enabledToggleValue' => 1,
'disabledToggleValue' => 0,
'toggleValue' => !!wfConfig::get('loginSec_breachPasswds_enabled') ? 1 : 0,
'selectOptionName' => 'loginSec_breachPasswds',
'selectOptions' => array(array('value' => 'admins', 'label' => __('For admins only', 'wordfence')), array('value' => 'pubs', 'label' => __('For all users with "publish posts" capability', 'wordfence'))),
'selectValue' => wfConfig::get('loginSec_breachPasswds'),
'title' => __('Prevent the use of passwords leaked in data breaches', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_PREVENT_BREACH_PASSWORDS),
))->render();
?>
-
'' . esc_html__('Additional Options', 'wordfence') . '',
'noSpacer' => true,
))->render();
?>
-
'loginSec_strongPasswds_enabled',
'enabledToggleValue' => 1,
'disabledToggleValue' => 0,
'toggleValue' => !!wfConfig::get('loginSec_strongPasswds_enabled') ? 1 : 0,
'selectOptionName' => 'loginSec_strongPasswds',
'selectOptions' => array(array('value' => 'pubs', 'label' => __('Force admins and publishers to use strong passwords (recommended)', 'wordfence')), array('value' => 'all', 'label' => __('Force all members to use strong passwords', 'wordfence'))),
'selectValue' => wfConfig::get('loginSec_strongPasswds'),
'title' => __('Enforce strong passwords', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_ENFORCE_STRONG_PASSWORDS),
))->render();
?>
-
'loginSec_maskLoginErrors',
'enabledValue' => 1,
'disabledValue' => 0,
'value' => wfConfig::get('loginSec_maskLoginErrors') ? 1 : 0,
'title' => __('Don\'t let WordPress reveal valid users in login errors', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_MASK_LOGIN_ERRORS),
))->render();
?>
-
'loginSec_blockAdminReg',
'enabledValue' => 1,
'disabledValue' => 0,
'value' => wfConfig::get('loginSec_blockAdminReg') ? 1 : 0,
'title' => __('Prevent users registering \'admin\' username if it doesn\'t exist', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_PREVENT_ADMIN_REGISTRATION),
))->render();
?>
-
'loginSec_disableAuthorScan',
'enabledValue' => 1,
'disabledValue' => 0,
'value' => wfConfig::get('loginSec_disableAuthorScan') ? 1 : 0,
'title' => __('Prevent discovery of usernames through \'/?author=N\' scans, the oEmbed API, the WordPress REST API, and WordPress XML Sitemaps', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_PREVENT_AUTHOR_SCAN),
))->render();
?>
-
'loginSec_disableApplicationPasswords',
'enabledValue' => 1,
'disabledValue' => 0,
'value' => wfConfig::get('loginSec_disableApplicationPasswords') ? 1 : 0,
'title' => __('Disable WordPress application passwords', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_DISABLE_APPLICATION_PASSWORDS),
))->render();
?>
-
'other_blockBadPOST',
'enabledValue' => 1,
'disabledValue' => 0,
'value' => wfConfig::get('other_blockBadPOST') ? 1 : 0,
'title' => __('Block IPs who send POST requests with blank User-Agent and Referer', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_BLOCK_BAD_POST),
))->render();
?>
-
'blockCustomText',
'textValue' => wfConfig::get('blockCustomText'),
'title' => __('Custom text shown on block pages', 'wordfence'),
'alignTitle' => 'top',
'subtitleHTML' => esc_html__('HTML tags will be stripped prior to output and line breaks will be converted into the appropriate tags.', 'wordfence'),
'subtitlePosition' => 'value',
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_CUSTOM_BLOCK_TEXT),
))->render();
?>
-
'other_pwStrengthOnUpdate',
'enabledValue' => 1,
'disabledValue' => 0,
'value' => wfConfig::get('other_pwStrengthOnUpdate') ? 1 : 0,
'title' => __('Check password strength on profile update', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_CHECK_PASSWORD),
))->render();
?>
-
'other_WFNet',
'enabledValue' => 1,
'disabledValue' => 0,
'value' => wfConfig::get('other_WFNet') ? 1 : 0,
'title' => __('Participate in the Real-Time Wordfence Security Network', 'wordfence'),
'helpLink' => wfSupportController::supportURL(wfSupportController::ITEM_FIREWALL_WAF_OPTION_PARTICIPATE_WFSN),
))->render();
?>