Description
The `HaxorProof` plugin provides a comprehensive set of security features for WordPress. Below are the key functionalities it offers:
1. Human Verification:
– Adds a human verification overlay on the login page with a countdown timer and a checkbox to verify that the user is human.
2. Bot Blocking:
– Blocks known bots based on their user-agent strings and logs these attempts.
3. Non-Browser Blocking:
– Denies access to visitors not using a recognized web browser.
4. Geoblocking:
– Restricts access based on the user’s geographical location.
5. Rate Limiting:
– Limits the number of login attempts to prevent brute force attacks.
6. Secure File Uploads:
– Restricts allowed MIME types for file uploads to ensure security.
7. Admin Activity Logging:
– Logs activities of admin users for auditing purposes.
8. Secure Sessions:
– Starts secure sessions and periodically regenerates session IDs.
9. Hide WordPress Version:
– Removes the WordPress version number from the HTML source to obscure the version in use.
10. Auto Logout:
– Automatically logs out idle users after a specified period of inactivity.
11. User Enumeration Blocking:
– Blocks attempts to enumerate users via the URL.
12. No Hostname Redirect:
– Redirects users who access the site without a hostname to a specified URL.
13. Honeypot:
– Adds a hidden field to forms to trap and block bots.
14. Security Headers:
– Adds various HTTP security headers to enhance security.
15. Strong Passwords Enforcement:
– Enforces strong passwords by requiring at least 12 characters, including numbers, letters, and special characters.
16. Auto Updates:
– Enables automatic updates for WordPress core, plugins, and themes.
17. Hide Login Errors:
– Hides detailed login error messages to prevent information leakage.
18. Disable Feeds:
– Disables RSS and ATOM feeds.
Admin Settings Page
The plugin provides an admin settings page where you can enable or disable each feature and configure settings such as human verification countdown time and allowed MIME types for file uploads.
Enqueue Scripts and Styles
The plugin enqueues necessary scripts and styles for the human verification overlay and other frontend features.
Security Enhancements
The plugin integrates various security enhancements to protect the WordPress site from common attacks and vulnerabilities.
Logging and Monitoring
It includes logging mechanisms to keep track of bot attempts and admin activities, aiding in monitoring and identifying potential security threats.
Overall, `HaxorProof` is designed to significantly improve the security posture of a WordPress site by adding multiple layers of protection and security measures.
SellingIt.org – Copyright © 2024 – All rights reserved.
