HTTP/1.1 403 Forbidden header on a failed login
Send an "HTTP/1.1 403 Forbidden" header on a failed login instead of the default "HTTP/1.1 200 OK"
5(2 reviews)
·200 active installs·Updated 10 years agoAs of April 2026, HTTP/1.1 403 Forbidden header on a failed login is a WordPress spam plugin with 200 active installations and a 5/5 rating from 2 reviews. It has been downloaded 2.1K+ times in total. Requires WordPress 4.0.0+ and PHP false+. Available on WordPress.org since 2016. Last updated 10 years ago — may have compatibility concerns. Top alternative: Akismet Anti-spam: Spam Protection.
5/52 reviews
200active installs
2.1K+total downloads
10 yearssince 2016
Overview
Send an “HTTP/1.1 403 Forbidden” header on a failed login instead of “HTTP/1.1 200 OK”, which is the WordPress default header on failed login. This is a tremendously simple plugin that does only that and absolutely nothing else.
The purpose of this plugin is to provide a way to allow external tools like fail2ban to get a message of a failed login e.g. to prevent a brute-force attack on a firewall level.
For the public domain.
Uses PHP5.3 anonymous functions and will not work on earlier versions of PHP
Ratings & Reviews
52 reviews
5 ★
2
4 ★
0
3 ★
0
2 ★
0
1 ★
0
Compatibility
| WordPress | 4.0.0+ requiredTested up to 4.4.34 |
| PHP | false+ required |
Top Alternatives to HTTP/1.1 403 Forbidden header on a…
Frequently Asked Questions
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.