___FMT___;
get_current_screen()->add_help_tab([
'id' => 'users',
'title' => $this->__['users'],
'content' => sprintf(
$fmt,
$this->__['user-enumeration'],
__('Automated brute-force attacks ("bots") typically start by getting a list of valid usernames ("user enumeration").', 'wp-fail2ban'),
__('Blocking user enumeration can force attackers to guess usernames, making these attacks much less likely to succeed.', 'wp-fail2ban'),
__('N.B. Some Themes "leak" usernames (for example, via Author profile pages); see Block username logins for an alternative.', 'wp-fail2ban'),
$this->see_also(['WP_FAIL2BAN_BLOCK_USER_ENUMERATION']),
$this->__['blacklist'],
__('Automated brute-force attacks ("bots") will often use well-known usernames, e.g. admin.', 'wp-fail2ban'),
__('Blacklisted usernames are blocked early in the login process, reducing server load.', 'wp-fail2ban'),
$this->see_also(['WP_FAIL2BAN_BLOCKED_USERS']),
$this->__['username-login'],
__('It is sometimes not possible to block user enumeration (for example, if your theme provides Author profiles). An alternative is to require users to login with their email address.', 'wp-fail2ban'),
__('N.B. This also applies to Blacklisted Usernames; you must list email addresses, not usernames.', 'wp-fail2ban'),
$this->see_also(['WP_FAIL2BAN_BLOCK_USERNAME_LOGIN'])
)
]);
parent::current_screen();
}
/**
* {@inheritDoc}
*
* @since 4.0.0
*/
public function section()
{
echo '';
}
/**
* User Enumeration
*
* @since 4.0.0
*/
public function userEnumeration()
{
$this->checkbox('WP_FAIL2BAN_BLOCK_USER_ENUMERATION');
}
/**
* Blocked usernames
*
* @since 4.0.0
*/
public function users()
{
if (defined('WP_FAIL2BAN_BLOCKED_USERS')) {
if (is_array(WP_FAIL2BAN_BLOCKED_USERS)) {
$value = join(', ', WP_FAIL2BAN_BLOCKED_USERS);
} else {
$value = WP_FAIL2BAN_BLOCKED_USERS;
}
} else {
$value = '';
}
printf(
'',
esc_attr($value)
);
}
/**
* Block username logins
*
* @since 4.3.0
*/
public function usernames()
{
$this->checkbox('WP_FAIL2BAN_BLOCK_USERNAME_LOGIN');
}
}