@scarlywebs thank you for the nice review!
Feature request for Stop User Enumeration is noted for now. Looks like some overlap with the existing Obfuscate Author Slug module. If you can check and let me know what’s the difference, that’d be great.
In general I do plan to implement more security-related features in the future.
Hey @qriouslad thanks for the reply, I did notice a few features in the “Stop User Enumeration” they had options like:
- Blocks user enumeration requests by GET or POST
- Syslogs a block so Fail2Ban can be used to block an IP
- Optionally blocks REST API user requests for non-authorized users.
- Optionally removes author sitemap
- Optionally removes author from OEMBED
- Optionally removes numbers from comment authors
Not sure if your plugin has those same options already embedded in your plugin, but that’s what I noticed what they had.
One feature I like about yours that the other plugin doesn’t have is that you can obfuscate publicly exposed author page URLs that show the user slugs/usernames.
And FYI I am not an expert on this stuff, just trying to see what works best for me lol.