Mod. BFP. Disabling BFP by constant

Author: AntonV1211

inc/spbc-auth.php

@@ -132,7 +132,13 @@ function spbc_authenticate($user, $username)
     global $spbc;
 
     if ( is_wp_error($user) ) {
-        spbc_authenticate__check_brute_force();
+        /**
+         * @todo Migrate BFP disable from constant to settings option
+         * @psalm-suppress RedundantCondition
+         */
+        if (!SPBC_BFP_DISABLE) {
+            spbc_authenticate__check_brute_force();
+        }
 
         $spbc->login_error = true;
 

security-malware-firewall.php

@@ -98,6 +98,14 @@
 // Auth params
 define('SPBC_2FA_KEY_TTL', 600);      // 2fa key lifetime in seconds
 
+/**
+ * @todo Migrate BFP disable from constant to settings option
+ * Set SPBC_BFP_DISABLE to true to disable Brute Force Protection module
+ */
+if (!defined('SPBC_BFP_DISABLE')) {
+    define('SPBC_BFP_DISABLE', false);
+}
+
 // DataBase params
 global $wpdb;