golden hour

/var/www/html/wp-content/plugins/s2member/src/includes/classes

File/Folder	Size	Actions
access-cap-times.inc.php	8.41 KB
admin-css-js-in.inc.php	4.13 KB
admin-css-js.inc.php	1.44 KB
admin-lockouts.inc.php	5.62 KB
admin-notices.inc.php	6.8 KB
auto-eots.inc.php	17 KB
aweber-e.inc.php	6.53 KB
aweber.inc.php	11.61 KB
brute-force.inc.php	4.48 KB
cache.inc.php	5.92 KB
catgs-sp.inc.php	4.79 KB
catgs.inc.php	4.7 KB
check-activation.inc.php	1.64 KB
constants.inc.php	98.52 KB
cron-jobs-in.inc.php	2.42 KB
cron-jobs.inc.php	1.62 KB
css-js-in.inc.php	12.51 KB
css-js-themes.inc.php	5.37 KB
css-js.inc.php	1.34 KB
custom-reg-fields-4bp.inc.php	16.49 KB
custom-reg-fields.inc.php	50.1 KB
database.inc.php	1.45 KB
email-configs.inc.php	30.53 KB
files-in.inc.php	120.95 KB
files.inc.php	21.25 KB
getresponse.inc.php	9.57 KB
installation.inc.php	15.52 KB
ip-restrictions.inc.php	17.31 KB
labels.inc.php	2.75 KB
list-server-base.inc.php	3.34 KB
list-servers.inc.php	15.25 KB
login-checks.inc.php	8.45 KB
login-customizations.inc.php	12.21 KB
login-redirects-r.inc.php	3.61 KB
login-redirects.inc.php	11.88 KB
mailchimp-o.inc.php	8.58 KB
mailchimp.inc.php	8.87 KB
menu-pages-rs.inc.php	4.33 KB
menu-pages-tb.inc.php	3.08 KB
menu-pages.inc.php	49.83 KB
meta-box-saves.inc.php	7.68 KB
meta-box-security.inc.php	9.77 KB
meta-boxes.inc.php	2.02 KB
mo-page-in.inc.php	7.02 KB
mo-page.inc.php	3.07 KB
no-cache.inc.php	7.92 KB
op-notices.inc.php	6.68 KB
option-forces.inc.php	12.13 KB
pages-sp.inc.php	8.06 KB
pages.inc.php	8.28 KB
paypal-notify-in-billing-agreement-signup.inc.php	3.5 KB
paypal-notify-in-cart.inc.php	3.33 KB
paypal-notify-in-express-checkout.inc.php	3.46 KB
paypal-notify-in-rec-profile-creation-w-level.inc.php	4.45 KB
paypal-notify-in-send-money.inc.php	3.29 KB
paypal-notify-in-sp-refund-reversal.inc.php	11.63 KB
paypal-notify-in-subscr-modify-w-level.inc.php	39.13 KB
paypal-notify-in-subscr-or-rp-cancellation-w-level.inc.php	14.11 KB
paypal-notify-in-subscr-or-rp-eots-w-level.inc.php	35.54 KB
paypal-notify-in-subscr-or-rp-payment-failed-w-level.inc.php	4.68 KB
paypal-notify-in-subscr-or-rp-payment-w-level.inc.php	17.01 KB
paypal-notify-in-subscr-or-wa-w-level.inc.php	92.91 KB
paypal-notify-in-virtual-terminal.inc.php	3.35 KB
paypal-notify-in-wa-ccaps-wo-level.inc.php	39.76 KB
paypal-notify-in-web-accept-sp.inc.php	29.75 KB
paypal-notify-in.inc.php	11.87 KB
paypal-notify.inc.php	1.06 KB
paypal-return-in-no-tx-data.inc.php	4.29 KB
paypal-return-in-proxy-ty-email.inc.php	3.83 KB
paypal-return-in-proxy-x-preview.inc.php	3.74 KB
paypal-return-in-subscr-modify-w-level.inc.php	17.68 KB
paypal-return-in-subscr-or-wa-w-level.inc.php	31.17 KB
paypal-return-in-wa-ccaps-wo-level.inc.php	15.08 KB
paypal-return-in-web-accept-sp.inc.php	9.7 KB
paypal-return-in.inc.php	12.95 KB
paypal-return.inc.php	1.08 KB
paypal-utilities.inc.php	36.08 KB
posts-sp.inc.php	10.55 KB
posts.inc.php	10.96 KB
profile-in.inc.php	16.13 KB
profile-mods-4bp-in.inc.php	6.46 KB
profile-mods-4bp.inc.php	1.23 KB
profile-mods-in.inc.php	8.98 KB
profile-mods.inc.php	1.1 KB
profile.inc.php	1.11 KB
ptags-sp.inc.php	5.43 KB
ptags.inc.php	4.6 KB
querys.inc.php	25.39 KB
readmes.inc.php	12.88 KB
register-access.inc.php	6.13 KB
register-in.inc.php	5.45 KB
register.inc.php	1.13 KB
registration-times.inc.php	4.52 KB
registrations.inc.php	73.15 KB
return-templates.inc.php	5.84 KB
roles-caps.inc.php	7.09 KB
ruris-sp.inc.php	3.66 KB
ruris.inc.php	6.16 KB
s-badge-status-in.inc.php	4.29 KB
s-badge-status.inc.php	1.2 KB
sc-eots-in.inc.php	6.9 KB
sc-eots.inc.php	1.31 KB
sc-files-in.inc.php	32.68 KB
sc-files.inc.php	1.99 KB
sc-gets-in.inc.php	4.5 KB
sc-gets.inc.php	1.3 KB
sc-if-conds-in.inc.php	14.27 KB
sc-if-conds.inc.php	1.79 KB
sc-keys-in.inc.php	2.17 KB
sc-keys.inc.php	1.3 KB
sc-paypal-button-e.inc.php	6.07 KB
sc-paypal-button-in.inc.php	30.05 KB
sc-paypal-button.inc.php	1.41 KB
sc-profile-in.inc.php	16.89 KB
sc-profile.inc.php	1.38 KB
sc-s-badge-in.inc.php	1.89 KB
sc-s-badge.inc.php	1.42 KB
security.inc.php	2.57 KB
sp-access.inc.php	9.59 KB
ssl-in.inc.php	9.5 KB
ssl.inc.php	2.32 KB
systematics-sp.inc.php	7.11 KB
systematics.inc.php	6.62 KB
tracking-codes.inc.php	10.09 KB
tracking-cookies-in.inc.php	3.12 KB
tracking-cookies.inc.php	1.44 KB
translations.inc.php	10.14 KB
user-access.inc.php	7.46 KB
user-deletions.inc.php	12.08 KB
user-new-in.inc.php	22 KB
user-new.inc.php	1.63 KB
user-notes.inc.php	3.3 KB
user-securities.inc.php	9.74 KB
users-list-in.inc.php	46.89 KB
users-list.inc.php	14.21 KB
utilities.inc.php	7.92 KB
utils-arrays.inc.php	7.03 KB
utils-captchas.inc.php	6.48 KB
utils-conds.inc.php	8.8 KB
utils-css.inc.php	2.86 KB
utils-cur.inc.php	3.57 KB
utils-defuse.inc.php	4.91 KB
utils-dirs.inc.php	8.79 KB
utils-encryption.inc.php	10.4 KB
utils-forms.inc.php	3.13 KB
utils-gets.inc.php	20.74 KB
utils-html.inc.php	3.04 KB
utils-ip.inc.php	3.89 KB
utils-logs.inc.php	16.73 KB
utils-s2o.inc.php	7.2 KB
utils-strings.inc.php	25.93 KB
utils-time.inc.php	18.89 KB
utils-urls.inc.php	18.63 KB
utils-users.inc.php	37.63 KB
wp-footer.inc.php	1.45 KB

Edit: brute-force.inc.php

<?php
// @codingStandardsIgnoreFile
/**
 * s2Member's Brute Force protection routines.
 *
 * Copyright: © 2009-2011
 * {@link http://websharks-inc.com/ WebSharks, Inc.}
 * (coded in the USA)
 *
 * Released under the terms of the GNU General Public License.
 * You should have received a copy of the GNU General Public License,
 * along with this software. In the main directory, see: /licensing/
 * If not, see: {@link http://www.gnu.org/licenses/}.
 *
 * @package s2Member\Brute_Force
 * @since 3.5
 */
if(!defined('WPINC')) // MUST have WordPress.
	exit('Do not access this file directly.');

if(!class_exists('c_ws_plugin__s2member_brute_force'))
{
	/**
	 * s2Member's Brute Force protection routines.
	 *
	 * @package s2Member\Brute_Force
	 * @since 3.5
	 */
	class c_ws_plugin__s2member_brute_force
	{
		/**
		 * Tracks failed login attempts.
		 *
		 * Prevents an attacker from guessing Usernames/Passwords.
		 * Allows only 5 failed login attempts every 30 minutes.
		 *
		 * @package s2Member\Brute_Force
		 * @since 3.5
		 *
		 * @attaches-to ``add_action('wp_login_failed');``
		 *
		 * @param string $username Expects the $username to be passed in through the Hook.
		 */
		public static function track_failed_logins($username = '')
		{
			foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v;
			do_action('ws_plugin__s2member_before_track_failed_logins', get_defined_vars());
			unset($__refs, $__v);

if(($max = $GLOBALS['WS_PLUGIN__']['s2member']['o']['max_failed_login_attempts']))
			{
				$exp_secs = strtotime('+'.apply_filters('ws_plugin__s2member_track_failed_logins__exp_time', '30 minutes', get_defined_vars())) - time();
				// If you add Filters to this value, you should use a string that is compatible with PHP's strtotime() function.

$ip = c_ws_plugin__s2member_utils_ip::current(); // Default value.
				if(!empty($GLOBALS['s2member_pro_remote_op_auth_check_user_ip'])
				   && c_ws_plugin__s2member_utils_conds::pro_is_installed()
				   && c_ws_plugin__s2member_pro_remote_ops::is_remote_op('auth_check_user')
				) $ip = $GLOBALS['s2member_pro_remote_op_auth_check_user_ip'];

$transient = 's2m_ipr_'.md5('s2member_transient_failed_login_attempts_'.$ip);
				set_transient($transient, (int)get_transient($transient) + 1, $exp_secs);
			}
			do_action('ws_plugin__s2member_after_track_failed_logins', get_defined_vars());
		}

/**
		 * Stops anyone attempting a Brute Force attack.
		 *
		 * Prevents an attacker from guessing Usernames/Passwords.
		 * Allows only 5 failed login attempts every 30 minutes.
		 *
		 * @package s2Member\Brute_Force
		 * @since 3.5
		 *
		 * @attaches-to ``add_filter('authenticate');``
		 *
		 * @param WP_User $user Expects a WP_User object, or possibly a null value.
		 *   This parameter value is simply passed through this routine.
		 *
		 * @return WP_User|null Either null, the ``$user`` obj, or a `WP_Error` obj.
		 */
		public static function stop_brute_force_logins($user = NULL)
		{
			foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v;
			do_action('ws_plugin__s2member_before_stop_brute_force_logins', get_defined_vars());
			unset($__refs, $__v);

if(($max = $GLOBALS['WS_PLUGIN__']['s2member']['o']['max_failed_login_attempts']))
			{
				$ip = c_ws_plugin__s2member_utils_ip::current(); // Default value.
				if(!empty($GLOBALS['s2member_pro_remote_op_auth_check_user_ip'])
				   && c_ws_plugin__s2member_utils_conds::pro_is_installed()
				   && c_ws_plugin__s2member_pro_remote_ops::is_remote_op('auth_check_user')
				) $ip = $GLOBALS['s2member_pro_remote_op_auth_check_user_ip'];

if((int)get_transient('s2m_ipr_'.md5('s2member_transient_failed_login_attempts_'.$ip)) > $max)
				{
					$exp_secs = strtotime('+'.apply_filters('ws_plugin__s2member_track_failed_logins__exp_time', '30 minutes', get_defined_vars())) - time();
					// If you add Filters to this value, you should use a string that is compatible with PHP's strtotime() function.

$about  = c_ws_plugin__s2member_utils_time::approx_time_difference(time(), time() + $exp_secs);
					$errors = new WP_Error('incorrect_password', sprintf(_x('Max failed logins. Please wait %s and try again.', 's2member-front', 's2member'), $about));

foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v;
					do_action('ws_plugin__s2member_during_stop_brute_force_logins', get_defined_vars());
					unset($__refs, $__v);
				}
			}
			return apply_filters('ws_plugin__s2member_stop_brute_force_logins', !empty($errors) ? $errors : $user, get_defined_vars());
		}
	}
}