UPDATE: This is no longer necessary as WordPress will now return a not found to the query below.

Author Lockdown

With a proliferation of automated bots crawling the web, many with less than good intentions, you may want to block enumeration of your author permalink(s). To demonstrate the problem, run the following query, substituting your domain name:
//yourdomainname.com/?author=1

you can increment the number until your author permalink is displayed. Here’s a sample screen shot to demonstrate:

author6

which results in this:

author6r640

and as you can see, the authors username is displayed in the resulting url.

To prevent this, we can implement the following code in our .htaccess file:

# WP AUTHOR ENUMERATION BOT PROBE PROTECTION
# Redirects to author=999999 that does not actually exist
# which results in a standard 404 error. To the hacker bot
# it appears that this author does not exist without giving
# any clues that the author does actually exist.

RewriteCond %{QUERY_STRING} ^author=([0-9]){1,}$ [NC]
RewriteRule ^(.*)$ $1?author=999999 [L]

Now when the same query is run, the result will be
a 404 not found.

While this is better, author links will still expose the 
author's username as seen in the following screenshot:


With the mouse cursor hovering over the link “View all posts by Author Demo”, the author username is visible in the lower left hand corner. To fix this we install the plugin – Display Name Author Permalink. After installing and activating, the author’s username is replaced with their Display name as seen below:

authordisplayname640

Bad bots are often in search of two things – a username and a password. They need both to attempt to access your site. By implementing the above, we’re making them work harder to get the first.

WordPress Tip of the Day - Author Lockdown

Excellence is at the heart of what we do, 
it is what drives us and
sets us apart.

 

We strive to always get better, be better and
do better every day.

 

Excellent communication sets expectations and
delivers peace of mind.

We don't just hear, we listen and
we deliver.

 

As our client, you have our pursuit of excellence guarantee.

----------------

"Excellence is never an accident. It is always the result of high intention, sincere effort, and intelligent execution; it represents the wise choice of many alternatives - choice, not chance, determines your destiny." ~Aristotle

----------------

You have Successfully Subscribed!

Excellence is at the heart of what we do, 
it is what drives us and
sets us apart.

 

We strive to always get better, be better and
do better every day.

 

Excellent communication sets expectations and
delivers peace of mind.

We don't just hear, we listen and
we deliver.

 

As our client, you have our pursuit of excellence guarantee.

----------------

"Excellence is never an accident. It is always the result of high intention, sincere effort, and intelligent execution; it represents the wise choice of many alternatives - choice, not chance, determines your destiny." ~Aristotle

----------------

You have Successfully Subscribed!