Hello, I was tasked with building a mobile app that is a companion for my client’s WordPress site.
Naturally, I make quite a few API calls from this app to the WP site, for user stuff mostly. The authorization on those calls, is my personal WP account for this site.
The issue is that now we are in Production, Wordfence blocks my account from sending anymore calls or me logging in at all… due to Brute Force Protection rules. How do I prevent myself from being blocked? We need the app to not be prevented from sending the API calls….
I dont have access to Wordfence so I need to find out what we can do going forward or what to tell the site owner to change/allow. Any advice?
[ad_2]
Should be simple , whitelist you IP in Wordfence. If your app does not have a fixed IP use a simple http proxy and make the IP fixed.
Tell this IP to client and have him whitelist it.