Unique IP Restrictions – notification on secu

Hello,

I was wondering whether s2Member can notify the site’s administrator in case of multiple logins sharing username/password coming from different IPs over a specific period of time (i.e. 24 hours). I am familiar with the Unique IP Access Restrictions functionality offered by s2M, however I thought that it would be beneficial for me as admin to recieve a notifiation when a breach happens, which also identifies the problematic user. Is this possible?

Also, where are you supposed to set the default period filter ws_plugin__s2member_ip_restrictions__concurrency_time_per_ip (default 30 days), and what is the convention for setting it (i.e. days, hours etc)?

Thanks for your help,

Moty

Hi Moty,

I was wondering whether s2Member can notify the site’s administrator in case of multiple logins sharing username/password coming from different IPs over a specific period of time (i.e. 24 hours). I am familiar with the Unique IP Access Restrictions functionality offered by s2M, however I thought that it would be beneficial for me as admin to recieve a notifiation when a breach happens, which also identifies the problematic user. Is this possible?

This is not a feature that’s support natively by s2Member, but if you know a bit of code you could set this up either by using the action hook ws_plugin__s2member_before_ip_restrictions_ok, or overwriting the /includes/classes/ip-restrictions.inc.php file by creating a Must-Use Plugin with an edited version of the file. You can create a Must-Use file by putting a .php file into your /wp-content/mu-plugins/ directory on your server (create it if you don’t have it already).

Also, where are you supposed to set the default period filter ws_plugin__s2member_ip_restrictions__concurrency_time_per_ip (default 30 days), and what is the convention for setting it (i.e. days, hours etc)?

You should be able to set this within your WordPress Dashboard under Dashboard -› s2Member® -› Restriction Options -› Unique IP Access Restrictions, or if you’d like to do it through PHP you can use anything that is compatible with PHP’s strtotime() function.