[Defender Pro] Defender pro and get params

Hello!
How to set up allowed get params.
Now, when adding any get parameter to the page, we encounter pages with the text “Sorry, you are not allowed to access this page”.
Sample: http://artfields.ln12.tempurl.info/art-gallery/?author=author
I am sure this is done by the plugin Defender Pro.

  • Adam
    • Support Gorilla

    Hi Andrey

    I hope you’re well today!

    It’s not about URL parameters (“query vars”:wink: but specific to “enumerating users”. The “?author” query var could be targeted by bots just blindly testing various names to discover whether such tested users exist on the site.

    This why Defender has a security tweak built-in for it. If you need this kind of author URLs to be available you can disable it. To do so, please go to the

    “Defender -> Security Tweaks -> Resolved”

    page, click on “Prevent user enumeration” option to expand it and there’ll be an option to disable this tweak.

    Disabling it will make these URLs available again.

    Best regards,
    Adam