Plans for Http_Analyzer

[szepeviktor]

• [ ] How to restrict AJAX content type?
• [ ] Block CDN attacks by what method?
• [ ] order of headers to identify attackers
• [ ] check POST: no more, no less variables a:5:{s:11:"redirect_to";s:28:"http://domain.com/wp-admin/";s:10:"testcookie"; s:1:"1";s:3:"log";s:5:"admin";s:3:"pwd";s:6:"123456";s:9:"wp-submit";s:6:"Log In";}
• [ ] wp-login POST: login, postpass, resetpass, lostpassword, register
• [ ] wp-login GET: logout, rp, lostpassword
• [ ] non-login wp-login POST-s: comment, trackback, pingback, XML-RPC, WP-API, plugin POST-s