Title: Gatorio
Author: sichtelement
Published: <strong>10.4.2026</strong>
Last modified: 14.6.2026

---

Hae lisäosia

![](https://ps.w.org/gatorio/assets/banner-772x250.png?rev=3503310)

![](https://ps.w.org/gatorio/assets/icon-256x256.png?rev=3503310)

# Gatorio

 [sichtelement](https://profiles.wordpress.org/sichtelement/)

[Lataa](https://downloads.wordpress.org/plugin/gatorio.1.2.1.zip)

 * [Tiedot](https://fi.wordpress.org/plugins/gatorio/#description)
 * [Arvostelut](https://fi.wordpress.org/plugins/gatorio/#reviews)
 *  [Asennus](https://fi.wordpress.org/plugins/gatorio/#installation)
 * [Kehitys](https://fi.wordpress.org/plugins/gatorio/#developers)

 [Tuki](https://wordpress.org/support/plugin/gatorio/)

## Kuvaus

Gatorio is a minimal WordPress security plugin that protects login endpoints against
brute-force attacks.

The plugin follows a strict privacy-first and KISS (keep it simple) philosophy.

No dashboards.
 No tracking. No unnecessary complexity.

Just effective login protection.

Unlike many plugins, Gatorio blocks login attempts before authentication begins.

This prevents bypasses caused by plugins that override the default WordPress login
flow.

### Features

 * Brute-force protection
 * Login attempt limiter
 * Temporary lockout
 * Pre-authentication request blocking (init hook)
 * Works with WordPress, WooCommerce and custom login forms
 * Login delay (bot mitigation)
 * Generic login errors (no information leakage)
 * XML-RPC protection
 * Username enumeration protection (REST API)
 * IP hashing (privacy-friendly, no raw IP storage)

## Asennus

 1. Upload the plugin folder to `/wp-content/plugins/`
 2. Activate the plugin
 3. Protection starts automatically

## UKK

### Does the plugin store IP addresses?

No. Gatorio hashes IP addresses using SHA-256 and does not store raw IPs.

### Does it require configuration?

No. The plugin works automatically without setup.

### Does it work with WooCommerce or custom login forms?

Yes. Gatorio blocks login attempts at request level, independent of the authentication
system.

### Does it slow down the login?

A minimal delay is applied to slow down automated attacks.

Source code: https://codeberg.org/Sichtelement/gatorio

## Arvostelut

There are no reviews for this plugin.

## Avustajat & Kehittäjät

“Gatorio” perustuu avoimeen lähdekoodiin. Seuraavat henkilöt ovat osallistuneet 
tämän lisäosan kehittämiseen.

Avustajat

 *   [ sichtelement ](https://profiles.wordpress.org/sichtelement/)

[Käännä “Gatorio” omalle kielellesi.](https://translate.wordpress.org/projects/wp-plugins/gatorio)

### Oletko kiinnostunut kehitystyöstä?

[Browse the code](https://plugins.trac.wordpress.org/browser/gatorio/), check out
the [SVN repository](https://plugins.svn.wordpress.org/gatorio/), or subscribe to
the [development log](https://plugins.trac.wordpress.org/log/gatorio/) by [RSS](https://plugins.trac.wordpress.org/log/gatorio/?limit=100&mode=stop_on_copy&format=rss).

## Muutosloki

#### 1.2.1

 * Improved XML-RPC protection with hard 403 response handling
 * Removed unused legacy XML-RPC fallback code
 * Improved lockout response handling consistency
 * Minor code cleanup and internal hardening

#### 1.2

 * Added universal pre-authentication request blocking
 * Improved compatibility with WordPress, WooCommerce and custom login forms
 * Fixed brute-force bypass caused by plugin-based authentication flows
 * Added request-level login interception before authentication begins
 * Added complete XML-RPC protection with hard 403 response blocking
 * Removed remaining XML-RPC method exposure
 * Improved login flow reliability across different authentication systems
 * Added translators comments for localization placeholders
 * Fixed WordPress Plugin Check compatibility warnings
 * Improved internal security and code consistency
 * Tested with WordPress 7.0

#### 1.1

 * Added translators comment for localized strings with placeholders
 * Fixed WordPress Plugin Check error (MissingTranslatorsComment)
 * Added proper handling for nonce verification warnings (via phpcs ignore)
 * Improved compatibility with WordPress and external login flows
 * Minor security and code consistency improvements

#### 1.0.6

 * Added pre-authentication request blocking via init hook
 * Implemented universal login detection (WordPress, WooCommerce, custom forms)
 * Fixed brute-force bypass caused by plugin-based authentication overrides
 * Improved reliability across different login systems

#### 1.0.5

 * Added session-level lockout fallback via init
 * Improved compatibility with external authentication flows

#### 1.0.4

 * Adjusted authenticate hook priority

#### 1.0.3

 * Lockout stability improvements

#### 1.0.0

 * Initial public release

## Metatiedot

 *  Version **1.2.1**
 *  Last updated **2 viikkoa sitten**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **7.0**
 *  PHP version ** 8.0 or higher **
 *  Language
 * [English (US)](https://wordpress.org/plugins/gatorio/)
 * Tags
 * [Brute Force](https://fi.wordpress.org/plugins/tags/brute-force/)[login](https://fi.wordpress.org/plugins/tags/login/)
   [login protection](https://fi.wordpress.org/plugins/tags/login-protection/)[security](https://fi.wordpress.org/plugins/tags/security/)
 *  [Edistynyt näkymä](https://fi.wordpress.org/plugins/gatorio/advanced/)

## Arvosanat

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/gatorio/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/gatorio/reviews/)

## Avustajat

 *   [ sichtelement ](https://profiles.wordpress.org/sichtelement/)

## Tuki

Onko sinulla jotain sanottavaa? Tarvitsetko apua?

 [Tukifoorumi](https://wordpress.org/support/plugin/gatorio/)