Title: Disable User Enumeration
Author: incredibledeveloperr
Published: <strong>2020 年 12 月 16 日</strong>
Last modified: 2020 年 12 月 16 日

---

搜尋外掛

![](https://ps.w.org/disabling-user-enumeration/assets/banner-772x250.png?rev=2440405)

這個外掛**並未在最新的 3 個 WordPress 主要版本上進行測試**。開發者可能不再對這個
外掛進行維護或提供技術支援，並可能會與更新版本的 WordPress 產生使用上的相容性問題。

![](https://ps.w.org/disabling-user-enumeration/assets/icon-128x128.png?rev=2440405)

# Disable User Enumeration

 由 [incredibledeveloperr](https://profiles.wordpress.org/incredibledeveloperr/)
開發

[下載](https://downloads.wordpress.org/plugin/disabling-user-enumeration.zip)

 * [詳細資料](https://tw.wordpress.org/plugins/disabling-user-enumeration/#description)
 * [使用者評論](https://tw.wordpress.org/plugins/disabling-user-enumeration/#reviews)
 *  [安裝方式](https://tw.wordpress.org/plugins/disabling-user-enumeration/#installation)
 * [開發資訊](https://tw.wordpress.org/plugins/disabling-user-enumeration/#developers)

 [技術支援](https://wordpress.org/support/plugin/disabling-user-enumeration/)

## 外掛說明

User enumeration can be use for brute-force techniques to either guess or confirm
valid users in a system. User enumeration is often a web application vulnerability,
though it can also be found in any system that requires user authentication.

An enumeration attack allows a hacker to check whether a name exists in the database.
For example, to set up a brute-force attack, rather than searching through login
and password pairs, all they need is a matching password for a verified user name,
saving time and effort.

The phrase “username harvesting” refers to a vulnerability that when exploited allows
people or programs interacting with an application to determine what a valid username
is vs an invalid username.

**You can check your site have user enumeration by simply type https://selectedfirms.
co/wp-json/wp/v2/users that’s it. **

Features:

 1. We only disable for non logged in users.
 2. You can deactivate with single click. No extra configuration required.
 3. Something else about the plugin

## 螢幕擷圖

[⌊Activate plugin.⌉⌊Activate plugin.⌉[

Activate plugin.

[⌊Restriction applied on username.⌉⌊Restriction applied on username.⌉[

Restriction applied on username.

## 安裝方式

Either using the dashboard ‘Add Plugin’ feature to find, install and activate the
plugin

 1. Download and the plugin from the download link
 2. Upload the entire plugin directory to your website’s /wp-contents/plugins/ using
    a file manager or FTP
 3. Activate the plugin through the Plugins menu

## 常見問題集

### How to check plugin works?

You just need to run in browser to verify <youdomin.com>/wp-json/wp/v2/users.

### I have active plugin, why its still display user data in response.

Just double check to make sure, you are not logged in. This plugin won’t do anything
for logged in users, it only works when you are logged out.

### What about settings?

There are no settings required. We are focus on only user enumerations. Only activation
is enough.

### Is it change anything in database?

Plugin is work standalone. Its not required any database operations.

## 使用者評論

這個外掛目前沒有任何使用者評論。

## 參與者及開發者

以下人員參與了開源軟體〈Disable User Enumeration〉的開發相關工作。

參與者

 *   [ incredibledeveloperr ](https://profiles.wordpress.org/incredibledeveloperr/)

[將〈Disable User Enumeration〉外掛本地化為台灣繁體中文版](https://translate.wordpress.org/projects/wp-plugins/disabling-user-enumeration)

### 對開發相關資訊感興趣？

任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/disabling-user-enumeration/)、
查看 [SVN 存放庫](https://plugins.svn.wordpress.org/disabling-user-enumeration/)，
或透過 [RSS](https://plugins.trac.wordpress.org/log/disabling-user-enumeration/?limit=100&mode=stop_on_copy&format=rss)
訂閱[開發記錄](https://plugins.trac.wordpress.org/log/disabling-user-enumeration/)。

## 變更記錄

#### 0.1

 * Initial release.

## 中繼資料

 *  版本 **1.0.0**
 *  最後更新 **6 年前**
 *  啟用安裝數 **30+**
 *  WordPress 版本需求 ** 4.7 或更新版本 **
 *  已測試相容的 WordPress 版本 **5.5.22**
 *  PHP 版本需求 ** 7.2 或更新版本 **
 *  語言
 * [English (US)](https://wordpress.org/plugins/disabling-user-enumeration/)
 * 標籤:
 * [user enumeration](https://tw.wordpress.org/plugins/tags/user-enumeration/)
 *  [進階檢視](https://tw.wordpress.org/plugins/disabling-user-enumeration/advanced/)

## 評分

這個項目尚無任何評論記錄。

[撰寫評分](https://wordpress.org/support/plugin/disabling-user-enumeration/reviews/#new-post)

[查看全部使用者評論](https://wordpress.org/support/plugin/disabling-user-enumeration/reviews/)

## 參與者

 *   [ incredibledeveloperr ](https://profiles.wordpress.org/incredibledeveloperr/)

## 技術支援

使用者可在技術支援論壇提出意見反應或使用問題。

 [檢視技術支援論壇](https://wordpress.org/support/plugin/disabling-user-enumeration/)