[NSFW] Usernames no more case sensitive?

  • Resolved wiewiorka030

    (@wiewiorka030)


    5 years, 10 months ago

    With the last update to v8.6.7. I was locked out by Cerber.
    I use an admin username with digits, specials, lower and upper case letters.
    From time to time some tricky guys sniff out the username and and try to access the site, using the same string but the letters all just lower case. Therefore, I keep this string with all lower case in the Forbidden Username Table in Cerber.

    Version 8.6.7. seem no more to distinguish upper and lower case within the log-in process. My try to log in was logged as “attempt with forbidden username”. Only as I deleted the string from the Forbidden Username Table, everything worked.

    Is this change a bug or a feature?
    Case sensitivity should be respected!

Viewing 1 replies (of 1 total)
  • Plugin Author gioni

    (@gioni)

    5 years, 10 months ago

    Hi! This change should have been done even earlier since WordPress processes usernames in a case-insensitive manner. The change was announced in the release note as well as in the changelog: https://wpcerber.com/wp-cerber-security-8-6-7/

    It’s a waste of time changing the username all the time. Trust and rely on WP Cerber’s security algorithms instead.

Viewing 1 replies (of 1 total)

The topic ‘[NSFW] Usernames no more case sensitive?’ is closed to new replies.