How it works...
We started the recipe by configuring the settings for the plugin. We set login attempts to 3 and lockout time to 60 minutes. Then, we specified an email to notify us when someone is locked out. Also, we used the settings to whitelist some IPs so that site owners and moderators don't get locked out from the site.
Once the user enters an incorrect password in the backend login, the plugin checks the user IP and username to see whether they are whitelisted. If whitelisted, only the default errors will be displayed and the user will be allowed to try the login as many times as they want.
However, if the username or password is not whitelisted, you will get an error saying "x attempts remaining". Since we set the attempts to
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access