Name: Brute Force Protection (BFP)
Version: 5.2.0.0-PRO (Joomla! 5) / 4.2.1.0-PRO (Joomla! 4) / 3.1.1.0-PRO (Joomla! 3)
Type: System Plugin
License: GPLv3
Description: Stops brute-force attacks and optimises your site performance by limiting the number of login attempts.
Download: BFP - Brute Force Protection Downloads
Brute Force Protection stops brute force login attempts in Joomla!
Shield your site from unauthorized access attempts with the security plugin Brute Force Protection to prevent brute-force login strategies. This plugin operates by adding an extra layer of protection to the backend login form, kicking in after a specified number of failed login attempts.
Upon reaching this limit, a user is required to successfully solve a simple arithmetic task - a captcha - to proceed, regardless of whether the entered credentials are correct. If further failed attempts are made post-captcha, the plugin completely blocks access to the backend from the offending IP address for a predetermined grace period. This access lock can also be applied to the front end of your site for comprehensive security.
Blocked IP addresses are stored securely in a protected lock folder as compact files. Once the grace period for a specific IP address has lapsed, its corresponding file is automatically purged from the lock folder. This automated process ensures your system remains efficient and uncluttered.
Using this plugin, you fortify your site's defence against unauthorized entry, providing a safe and secure environment for your legitimate users.
Installation
Install the extension on the backend as usual. Set the desired settings in Extensions -> Plugins -> System - Brute Force Protection - BFP.
Changelog
Latest release
Version 5.2.0.0-PRO - 2025-01-06
- + Increased technical requirements for Joomla! 5: Increasing Technical Requirements 2025 - Core & PHP for Joomla! Pro Extensions
- + Optimising code to meet new requirements can enhance its quality, performance, and security.
Version 5.2.0.0-PRO - 2025-01-06
- + Increased technical requirements for Joomla! 5: Increasing Technical Requirements 2025 - Core & PHP for Joomla! Pro Extensions
- + Optimising code to meet new requirements can enhance its quality, performance, and security.
Version 5.1.0.0-PRO - 2024-05-08
- + Subscriber Interface: The plugin has been rewritten to utilise the subscriber interface, enhancing its integration and performance capabilities.
- + Improved Pro Security Token validation check. The Pro package contains a token file with an individual security token linked to the user account that is checked against the validation server for authenticity. If the file is missing or the token is invalid, you cannot edit the settings and use the extension. The Pro Security Token field has been extended to handle incorrect tokens and blocked accounts. If you encounter an error message related to the token, download the Pro version with your Pro subscription from the linked download page and install it again!
- Attention: The Pro extension will not work correctly if the token file or custom field is missing or modified. Never edit or remove the files to ensure correct functionality.
Version 5.0.0.0-PRO - 2023-11-17
- + First Pro release for Joomla! 5.x based on BFP Pro version 4.2.0.0-PRO
- + The plugin "Behaviour - Backward Compatibility" is not required. The extension only uses supported classes in Joomla! 5.
Version 4.2.1.0-PRO - 2024-07-30
- Increased technical requirements for Joomla! 4: Increasing Technical Requirements 2024 - Core & PHP for Joomla! 4 Pro Extensions.
- ^ Updated the installation script to enable the uninstall process in higher core versions.
Version 4.2.0.0-PRO - 2023-10-11
- + Improved Installation Script: Updated the installation script to check for the highest compatible version of Joomla automatically! This feature aims to prevent issues that may arise from using incompatible core versions, thereby ensuring a smoother installation process.
Version 4.1.0.0-PRO - 2023-02-25
- Increased technical requirements for Joomla! 4: Increasing Technical Requirements - Core & PHP for Joomla! 4 Pro Extensions.
- + Code optimisations.
Version 4.0.2.0-PRO - 2022-09-11
- + Added Pro Security Token validation check. The Pro package contains a token file with an individual security token linked to the user account and checked against the validation server for authenticity.
- ^ Multiple internal code optimisations.
Version 4.0.1.2-PRO - 2022-07-21
- # Fixed custom field integration. Thanks to Michael K. for reporting it!
Version 4.0.1.1-PRO - 2022-06-17
- ^ Updated custom field to bypass description bug in Joomla! 4.1.3.
- ^ Code optimisations
Version 4.0.1.0-PRO - 2021-11-11
- + Added the built-in Download Key Manager support to enter your Pro Update ID without installing the update helper plugin.
Important: Please copy your personal Pro Update ID using the second copy button in the Pro ID Manager and enter the key in System - Update - Update Sites - Select the entry of the Pro extension and enter the ID into the Download Key field. - ^ Code optimisations
Version 4.0.0.0-PRO - 2021-08-26
- + First Pro release for Joomla! 4.x based on BFP Pro version 3.1.1.0-PRO
- ^ Updated captcha field output for the new backend template Atum
Version 3.1.1.0-PRO - 2021-06-12
- ^ Maintenance release
- ^ Changed the version number specification. The first number stands for the supported major Joomla! version. The following three numbers follow the Semantic Versioning Specification (SemVer), as it used to be previously.
- ^ Updated custom field
- ^ Code optimisations
Version 3.0.0-FREE - 2021-03-29
- + First release for Joomla! 3.x based on 3.1.0-PRO
Version 3.1.0-PRO - 2021-01-18
- + Block frontend access - Block the frontend access if the IP address is on the lock list.
Version 3.0.0-PRO - 2020-06-23
- + First release of the Pro extension
Download
Overview of all downloads of the extension: BFP - Brute Force Protection Downloads