Brute Force Protection - Joomla! Plugin - Logo

JOOMLA 5.x JOOMLA 4.x JOOMLA 3.x FREE PRO

Name: Brute Force Protection - Version: 3.0.0-FREE / 3.1.1.0-PRO / 4.2.0.0-PRO / 5.1.0.0-PRO - Type: System Plugin - License: GPLv3
Description: Stops brute-force attacks and optimises your site performance by limiting the number of login attempts

Overview of all downloads of the extension: BFP - Brute Force Protection Downloads

Brute Force Protection stops brute force login attempts in Joomla!

Shield your site from unauthorized access attempts with the security plugin Brute Force Protection to prevent brute-force login strategies. This plugin operates by adding an extra layer of protection to the backend login form, kicking in after a specified number of failed login attempts.

Upon reaching this limit, a user is required to successfully solve a simple arithmetic task - a captcha - to proceed, regardless of whether the entered credentials are correct. If further failed attempts are made post-captcha, the plugin completely blocks access to the backend from the offending IP address for a predetermined grace period. This access lock can also be applied to the front end of your site for comprehensive security.

Blocked IP addresses are stored securely in a protected lock folder as compact files. Once the grace period for a specific IP address has lapsed, its corresponding file is automatically purged from the lock folder. This automated process ensures your system remains efficient and uncluttered.

Using this plugin, you fortify your site's defence against unauthorized entry, providing a safe and secure environment for your legitimate users.

Installation

Install the extension in the backend under Extensions. Set the desired settings in Extensions -> Plugins -> System - Brute Force Protection - BFP.

Changelog

+ = Added - ! = Removed - ^ = Changed - # = Fixed

Latest release

Version 5.1.0.0-PRO - 2024-05-10

  • + Subscriber Interface: The plugin has been rewritten to utilise the subscriber interface, enhancing its integration and performance capabilities.
  • + Improved Pro Security Token validation check. The Pro package contains a token file with an individual security token linked to the user account that is checked against the validation server for authenticity. If the file is missing or the token is invalid, you cannot edit the settings and use the extension. The Pro Security Token field has been extended to handle incorrect tokens and blocked accounts. If you encounter an error message related to the token, download the Pro version with your Pro subscription from the linked download page and install it again!
  • Attention: The Pro extension will not work correctly if the token file or custom field is missing or modified. Never edit or remove the files to ensure correct functionality.

Download

Overview of all downloads of the extension: BFP - Brute Force Protection Downloads