HTTP/1.1 403 Forbidden header on a failed login
Send an "HTTP/1.1 403 Forbidden" header on a failed login instead of the default "HTTP/1.1 200 OK"
The facts
- Rating
- 5★ from 2
- Active installs
- 200+
- Price
- Free
- Last updated
- 23 Mar 2016
- Added
- Mar 2016
- Requires WP
- 4.0.0
- Tested up to
- WP 4.4.34
- Downloads
- 2,600
Our analysis
AI-assistedThe HTTP/1.1 403 Forbidden header on a failed login plugin changes the default response header for failed login attempts in WordPress from 'HTTP/1.1 200 OK' to 'HTTP/1.1 403 Forbidden'. This allows external tools, such as fail2ban, to detect failed logins and take action, which can help prevent brute-force attacks at the firewall level.
This plugin is straightforward and does not offer additional features. It is suitable for users who want to enhance their site's security by providing clearer feedback on failed login attempts.
Best for: This plugin is suited for WordPress site administrators looking to improve login security.
What it does well
- ✓Sends a 403 Forbidden header on failed logins
- ✓Helps external tools detect failed login attempts
- ✓Simple and focused functionality
Where it falls short
- •Limited to changing the response header only
- •Requires PHP 5.3 or later to function
- •No additional features or settings
Verdict
This plugin offers a simple solution for enhancing login security by changing response headers. However, its limited functionality may not meet the needs of all users.
From the developer
atmosphear's own description of HTTP/1.1 403 Forbidden header on a failed login, lightly tidied.
Send an “HTTP/1.1 403 Forbidden” header on a failed login instead of “HTTP/1.1 200 OK”, which is the WordPress default header on failed login. This is a tremendously simple plugin that does only that and absolutely nothing else.
The purpose of this plugin is to provide a way to allow external tools like fail2ban to get a message of a failed login e.g. to prevent a brute-force attack on a firewall level.
For the public domain.
Uses PHP5.3 anonymous functions and will not work on earlier versions of PHP