Title: Disable User Enumeration Author: incredibledeveloperr Published: 2020 年 12 月 16 日 Last modified: 2020 年 12 月 16 日 --- 搜索插件 ![](https://ps.w.org/disabling-user-enumeration/assets/banner-772x250.png?rev=2440405) **该插件尚未通过WordPress的最新3个主要版本进行测试**。 当与较新版本的WordPress一起 使用时，可能不再受到维护或支持，并且可能会存在兼容性问题。 ![](https://ps.w.org/disabling-user-enumeration/assets/icon-128x128.png?rev=2440405) # Disable User Enumeration 作者：[incredibledeveloperr](https://profiles.wordpress.org/incredibledeveloperr/) [下载](https://downloads.wordpress.org/plugin/disabling-user-enumeration.zip) * [详情](https://cn.wordpress.org/plugins/disabling-user-enumeration/#description) * [评价](https://cn.wordpress.org/plugins/disabling-user-enumeration/#reviews) * [安装](https://cn.wordpress.org/plugins/disabling-user-enumeration/#installation) * [开发进展](https://cn.wordpress.org/plugins/disabling-user-enumeration/#developers) [支持](https://wordpress.org/support/plugin/disabling-user-enumeration/) ## 描述 User enumeration can be use for brute-force techniques to either guess or confirm valid users in a system. User enumeration is often a web application vulnerability, though it can also be found in any system that requires user authentication. An enumeration attack allows a hacker to check whether a name exists in the database. For example, to set up a brute-force attack, rather than searching through login and password pairs, all they need is a matching password for a verified user name, saving time and effort. The phrase “username harvesting” refers to a vulnerability that when exploited allows people or programs interacting with an application to determine what a valid username is vs an invalid username. **You can check your site have user enumeration by simply type https://selectedfirms. co/wp-json/wp/v2/users that’s it. ** Features: 1. We only disable for non logged in users. 2. You can deactivate with single click. No extra configuration required. 3. Something else about the plugin ## 屏幕截图 [⌊Activate plugin.⌉⌊Activate plugin.⌉[ Activate plugin. [⌊Restriction applied on username.⌉⌊Restriction applied on username.⌉[ Restriction applied on username. ## 安装 Either using the dashboard ‘Add Plugin’ feature to find, install and activate the plugin 1. Download and the plugin from the download link 2. Upload the entire plugin directory to your website’s /wp-contents/plugins/ using a file manager or FTP 3. Activate the plugin through the Plugins menu ## 常见问题 ### How to check plugin works? You just need to run in browser to verify /wp-json/wp/v2/users. ### I have active plugin, why its still display user data in response. Just double check to make sure, you are not logged in. This plugin won’t do anything for logged in users, it only works when you are logged out. ### What about settings? There are no settings required. We are focus on only user enumerations. Only activation is enough. ### Is it change anything in database? Plugin is work standalone. Its not required any database operations. ## 评价 此插件暂无评价。 ## 贡献者及开发者 「Disable User Enumeration」是开源软件。 以下人员对此插件做出了贡献。 贡献者 * [ incredibledeveloperr ](https://profiles.wordpress.org/incredibledeveloperr/) [帮助将「Disable User Enumeration」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/disabling-user-enumeration) ### 对开发感兴趣吗? 您可以[浏览代码](https://plugins.trac.wordpress.org/browser/disabling-user-enumeration/)， 查看[SVN仓库](https://plugins.svn.wordpress.org/disabling-user-enumeration/)，或 通过[RSS](https://plugins.trac.wordpress.org/log/disabling-user-enumeration/?limit=100&mode=stop_on_copy&format=rss) 订阅[开发日志](https://plugins.trac.wordpress.org/log/disabling-user-enumeration/)。 ## 更新日志 #### 0.1 * Initial release. ## 额外信息 * 版本 **1.0.0** * 最后更新：**5 年前** * 活跃安装数量 **30+** * WordPress 版本 ** 4.7 或更高版本 ** * 已测试的最高版本为 **5.5.18** * PHP 版本 ** 7.2 或更高版本 ** * 语言 * [English (US)](https://wordpress.org/plugins/disabling-user-enumeration/) * 标签 * [user enumeration](https://cn.wordpress.org/plugins/tags/user-enumeration/) * [高级视图](https://cn.wordpress.org/plugins/disabling-user-enumeration/advanced/) ## 评级 尚未提交反馈。 [Your review](https://wordpress.org/support/plugin/disabling-user-enumeration/reviews/#new-post) [查看全部评论](https://wordpress.org/support/plugin/disabling-user-enumeration/reviews/) ## 贡献者 * [ incredibledeveloperr ](https://profiles.wordpress.org/incredibledeveloperr/) ## 支持 有话要说吗？是否需要帮助？ [查看支持论坛](https://wordpress.org/support/plugin/disabling-user-enumeration/)