Security on Webuzo Log In to Increase

Security on Webuzo Log In to Increase (9 Replies, Read 9573 times)

peopleinside	April 14, 2016, 8:17 am
Group: Member Post Group: Super Member Posts: 1394 Status: Open source, web and security passionate	Hi, today I was testing Wordfence plug in on my Wordpress. In particular BAN IP function. I have found maybe a BUG on that plug in but also issue with Webuzo. IF I BAN manually an ip in Wordfence plug in and I have performance setup active in Wordfence ... the banned IP will not see the Wordfence ban page but are redirected I don't know where in the VPS. The issue with Webuzo is, in my case for two website ... the banned IP is redirected to the Webuzo Default Page who give information to the BAD user about my admin panel (Webuzo) on my server so Hacker can now know I AM using Webuzo and Can see where the log in page is as is showed into the Webuzo default page. If that Hacker made a robott guess username and password how Webuzo can defend from it? I cannot BAN an IP only in the admin side BUT I have to ban in all server and website I cannot ban with a custom message who says to the user to contact support for example I cannot have two step verification I AM not informed by email if some one have access to Webuzo Admin area. So I think you should improve security.Also if some one try to access by guessing password are banned temporarly from Webuzo access area or can continue to guess password? ----------------------- PeopleInside Web, security, open source passionate.
IP: --

Users viewing this topic
	1 guests, 0 users.