Title: No User Enumeration
Author: Carlos
Published: <strong>4. apríla 2016</strong>
Last modified: 23. októbra 2019

---

Vyhľadať plugin

Tento plugin **nebol testovaný s najnovšími 3 hlavnými vydaniami WordPress**. Už
nemusí byť udržiavaný alebo podporovaný a môže mať problémy s kompatibilitou pri
použití s novšími verziami WordPress.

![](https://s.w.org/plugins/geopattern-icon/no-user-enumeration.svg)

# No User Enumeration

 Od [Carlos](https://profiles.wordpress.org/carlost800/)

[Stiahnuť](https://downloads.wordpress.org/plugin/no-user-enumeration.1.3.2.zip)

 * [Podrobnosti](https://sk.wordpress.org/plugins/no-user-enumeration/#description)
 * [Recenzie](https://sk.wordpress.org/plugins/no-user-enumeration/#reviews)
 *  [Inštalácia](https://sk.wordpress.org/plugins/no-user-enumeration/#installation)
 * [Vývoj](https://sk.wordpress.org/plugins/no-user-enumeration/#developers)

 [Podpora](https://wordpress.org/support/plugin/no-user-enumeration/)

## Popis

In many WordPress installations is possible enumerate usernames through the author
archives, using urls like this:

http://wpsite/?author=1

http://wpsite/?author=1/

http://wpsite/?bypass=1&author%00=1

http://wpsite/?author%00=%001

http://wpsite/?%61uthor=1

And recently wordpress since 4.7 comes with a rest api integrated that allow list
users:

curl -s http://wpsite/wp-json/wp/v2/users/
 curl -s http://wpsite/?rest_route=/wp/
v2/users curl http://wpsite/?_method=GET -d rest_route=/wp/v2/users

Know the username of a administrator is the half battle, now an attacker only need
guest the password.
 This plugin stop it.

Also, is possible get usernames from the post entries.
 This plugin, hide the name
of the author in a post entry if he is not using a nickname. Also, hide the url 
page link of an administrator author.

The main goal is hide the administrators usernames.
 Obviously, is better not choose„
admin“ as the username because is easiliy guessable.

## Inštalácia

 1. Upload `no-user-enumeration` to the `/wp-content/plugins/` directory
 2. Aktivujte modul cez položku „Moduly“ v menu vo WordPress

## Časté otázky

.

## Recenzie

Pre tento plugin nie sú žiadne recenzie.

## Prispievatelia a vývojári

“No User Enumeration” je softvér s otvoreným zdrojovým kódom. Do tohto pluginu prispeli
nasledujúci ľudia.

Prispievatelia

 *   [ Carlos ](https://profiles.wordpress.org/carlost800/)

[Preložiť „No User Enumeration“ do vašho jazyka.](https://translate.wordpress.org/projects/wp-plugins/no-user-enumeration)

### Máte záujem o vývoj?

[ Prehľadávajte zdrojový kód](https://plugins.trac.wordpress.org/browser/no-user-enumeration/),
preskúmajte [SVN repozitár](https://plugins.svn.wordpress.org/no-user-enumeration/),
alebo sa prihláste na odber [vývojárskeho logu](https://plugins.trac.wordpress.org/log/no-user-enumeration/)
cez [RSS](https://plugins.trac.wordpress.org/log/no-user-enumeration/?limit=100&mode=stop_on_copy&format=rss).

## Zoznam zmien

#### 1.3.2

 * Using WP_DEBUG not emit undefined index notice.

#### 1.3.1

 * Minor changes.

#### 1.3

 * Fix bypass protection using this: curl http://wpsite/?_method=GET -d rest_route
   =/wp/v2/users

#### 1.2

 * Disallow list users using the rest api.
 * Compatibility with plugin WP All Import.

#### 1.1

 * Hide admin usernames in post replies. Improved security.

#### 1.0

 * First version.

## Meta

 *  Verzia **1.3.2**
 *  Posledná aktualizácia **Pred 7 rokov**
 *  Aktívne inštalácie **100+**
 *  Verzia WordPress ** 2.9 alebo novšia **
 *  Testované do verzie **5.2.24**
 *  Jazyk
 * [English (US)](https://wordpress.org/plugins/no-user-enumeration/)
 * Značky
 * [security](https://sk.wordpress.org/plugins/tags/security/)[user enumeration](https://sk.wordpress.org/plugins/tags/user-enumeration/)
   [wpscan](https://sk.wordpress.org/plugins/tags/wpscan/)
 *  [Rozšírené zobrazenie](https://sk.wordpress.org/plugins/no-user-enumeration/advanced/)

## Hodnotenia

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/no-user-enumeration/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/no-user-enumeration/reviews/)

## Prispievatelia

 *   [ Carlos ](https://profiles.wordpress.org/carlost800/)

## Podpora

Máte čo povedať? Potrebujete pomoc?

 [Zobraziť fórum podpory](https://wordpress.org/support/plugin/no-user-enumeration/)

## Podporiť

Chceli by ste podporiť pokrok tohto pluginu?

 [ Prispieť na plugin ](https://sk.wordpress.org/plugins/no-user-enumeration/?output_format=md#)