Passe al contignût
  • A proposit di Wordpress
    • A proposit di Wordpress
    • WordPress.org
    • Documentazion
    • Support
    • Feedback
  • Jentre
  • Registriti
WordPress.org
WordPress.org

Friulian

  • Temas
  • Plugin
  • News
  • About
  • Contat
  • Get WordPress
Get WordPress

Plugins

  • My Favorites
  • Beta Testing
  • Developers
Download

WordPress Security – Firewall, Malware Scanner, Secure Login and Backup

By miniorange
  • Details
  • Reviews
  • Installation
  • Support
  • Development

Description

Features

  • Complete Web Security ’suite to protect wordpress from any attacks
  • Web Application Firewall (WAF) : WordPress Firewall to protect your site
  • OWASP TOP 10 Protection
  • Login Protection : Spam and Login Protection
  • Malware scanner: Detects any virus, malware and trojan
  • Backup: Taking Encrypted Backup with local storage and cloud storage
  • Two Factor Authentication : 2FA and MFA
  • Limit Login Attempts to stop password guessing
  • Realtime Global IP Blocing
  • Limit Rate of Request : Protecting resources from any security hole exploit
  • Crawler Detection and blocking
  • Blocking IP and Attacks
  • Country Blocking and Browser Blocking
  • Brute Force Attacks prevention to stop password hack
  • Captcha for Bot Detection
  • Google Recaptcha
  • Login Form Protection
  • Registration Form Protection
  • Integration with different plugin – Woo commerce, buddypress, ultimate member and others
  • Reporting
  • Audit Log

Web Application Firewall

  • WordPress firewall is built specifically for WordPress and blocks malicious traffic on your WordPress Site.
  • Block Attacks and prevent access
  • SQL injection Protection (SQL)
  • Cross-site Scripting(XSS) Attacks
  • Remote-File Inclusion(RFI)
  • Local File Inclusion(LFI)
  • Secure Rate Limiting – It controls the amount of incoming requests from a specific IP to a service(Website).
  • Realtime Global IP Blocking – It protects from malicious IPs and lets the genuine traffic on your WordPress.
  • Realtime Rules and Signatures update – Constant update of signatures based on threats.
  • Blocking IP – Block any IP you want just with one click.

Login Proctection and Spam Protection

  • Brute Force Login / Attacks Protection – We keep track of user’s login attempts and we send alerts to administr’ators for unu’sual activities if someone exceeds allowed failed login attempts.
  • Protects from brute force attacks and password guessing on the login page.
  • Limit Login Attempts – Automated attacks on the login page to guess your password can be a risk for users’ accounts. You can just limit the login attempts and the rate of requests on the website.
  • Login Security – Limit Login Attempts and track user login attempts
  • Password protection – Enforce Strong Password – Check Password strength for all users
  • Common Password protection – Detect if users use common leaked passwords
  • User Registration Security – Disallow Disposable / Fake email addresses
  • Google reCAPTCHA protection for login, registration.
  • Spam Protection and Comment Spam Protection

Registration Security

  • Captcha on registration form
  • Advanced User Verification – OTP Verification plugin verifies Email Address/Mobile Number of users by sending verification code(OTP) during registration. It removes the possibility of a user registering with fake Email Address/Mobile Number.
  • Protection for WordPress files – We provide you option to prevent access to user from browsing directory content and editing files from WP Dashboard (Themes and plugins).
  • Block Fake Users – We help you to detect ’suspicious email addresses instantly. Most of the users use disposable, fake or temporary email addresses for registering on online websites. We help you stop accepting registrations from those emails.

Malware Scanner

  • The scanner will scan all the files including WordPress core, plugins and theme files to know if any of them have malware and malicious URLs.
  • Malware Scanner  – The scanner will scan all the files including WordPress core, plugins and theme files to know if any of them have malware and malicious URLs.
  • Malware Detection Signatures – With Real-time signature updates, it checks for the latest threats and notifies you of any is’sues found.
  • Version Compare – Keep a watch continuously in the background and scan any new file or change in files.

Backup

  • Secure Backups – The files are password protected so that only person authorized can check the backup.
  • Schedule Backups – Support both manual backup and automated (scheduled) backups. Backups Files and Database on separate schedule.
  • Encrypted Database backup and File Backup – Backup your WordPress database files easily with a single click. You can either download your backup or can save it on your server.
  • Cloud Backups – Store it in cloud storage or remote locations like Google Drive, Amazon S3, DropBox and others.
  • One-Click Restore – File restoring made easy with just One-Click Restore.

Two Factor Authentication

  • Simplified & easy to user interface.
  • Two Factor Authentication (2FA) forever FREE!
  • Variety of Authentication Methods: Any App ’supporting TOTP algorithm like Google, Authy, LastPass Authentic’ator and Security Questions(KBA)
  • Remember Device – Trust Devices by dynamically analyzing user requests and apply business security policies to application access which minimizes the risks of unauthorized access.

Blocking

  • IP Blocking – Manual and automatic blocking of IP address ( Blacklisting and whitelisting included ).
  • Country Blocking – If you have a website which gets inundated with SPAM or hacking attempts from visitors or bots originating from certain countries we can help you blocking those attempts. You can block the request coming from countries like Russia, Brazil, China and others.

Live traffic Monitoring and Reporting

  • Traffic Monitoring – Keep Real-time watch on traffic and get details on every request. Also you get the option for filtering reports with various criterias like username, IP address, date. Also you can export reports in csv and pdf.
  • IP Lookup: Check the location of the IP and get details related to the IP. With the IP Lookup feature you can know details about the request with Country, State and City of the IP and take action if needed.
  • Security Log – Logs Blocked IPs, Spammers, Bots, HTTP 404,403 and 400 logging

Advanced Features :-

  • Advanced Blocking – Block users based on: IP range, Country, Browser / User Agent, Referer and HostName(DNS)
  • Htaccess Website Security Protection- Secure your website from unintended user with htaccess website security protection which blocks user request on server(apache) level.
  • IP Lookup ( WHOIS ) – With IP Lookup you can trace IP address of an ’suspicious users, you can get an idea what part of the country or world they are accessing your website from.
  • Comment SPAM Filter and Site SPAM Check – We check if your website is generating SPAM to protect your website getting blocked by search engines. Also we help you to filter comments for malware and phishing urls.
  • SPAM Protection and google reCAPTCHA for comments – Google reCAPTCHA protects your website from spam and abuse. reCAPTCHA uses an advanced risk analysis engine and adaptive CAPTCHAs to keep automated software from engaging in abusive activities on your site.
  • Notification to admin and end users – Send Email Alerts for IP blocking and unu’sual activities with user account
  • DOS (Denial of service) attacks protection – Protect your resources from DOS attacks by slowing down attackers by delaying response and increasing delay in each of his requests and eventually blocking them entirely.
  • Notifications – Get email alerts for unu’sual activities with you user accounts. We also ’support customized email templates which you can use for branding.

VERIFY EMAIL

miniOrange email verification tool actually connects to the mail server of user registering and checks whether the mailbox exists or not. This decreases bounce rate from your email address and saves your email address getting blacklisted.

SOCIAL LOGIN INTEGRATION

Social Login allows your visitors to choose from their favourite social login apps to login, comment, share and optionally auto-register with your website or blog. One-click login to your website using social login applications like Google, Twitter, Facebook, Vkontakte, LinkedIn, Instagram, Amazon, Salesforce, Windows Live. Easy integration with your website with options to add Social login on login page, registration page and comments section.

How is miniOrange Different?

miniOrange has various types of deployments that gives the customer a safe and protective choice. miniOrange offers plugin, Cloud and On-premise server module. The plugin will block all incoming requests on the network where the website is hosted. You can block the request before reaching the server with the network solutions. Adding to this miniOrange also provides Login Protection and 2FA built specifically for CMS ’such as WordPress, Drupal, and others. And keeping backups are essential so that you can fall back in case of any loss or modification of data intentionally or unintentionally. miniOrange provides encrypted backups for file and database with one-click recovery.

=miniOrange provides three levels of solutions to which owners can decide which solution would be the best for them=

  • WordPress-Level Web Application Firewall
  • Server Level On-premise WAF
  • Server Level Cloud-based WAF

Do you want ’support?

Please email us at info@xecurify.com or Contact us

Screenshots

  • Security Dashboard
  • Firewall Dashboard
  • Firewall Settings
  • Login Security and Spam Security
  • Malware Scanner
  • Backup

Installation

From your WordPress dashboard

  1. Visit Plugins > Add New
  2. Search for Brute Force Login Security, Spam Protection & Limit Login Attempts. Find and install the plugin.
  3. Activate the plugin from your Plugins page

From WordPress.org

  1. Download Brute Force Login Security, Spam Protection & Limit Login Attempts plugin.
  2. Unzip and upload the wp-security-pro directory to your /wp-content/plugins/ directory.
  3. Activate plugin from your wordpress dashboard.

Once Activated

  1. Go to Settings-> WP Security PRO, and follow the instructions.
  2. Click on Save

Reviews

premium plugin

jkjkjk Fevrâr 18, 2021
most of the plugins features are premium only... it's okay to do that but let the users know before they install your plugin! uninstalled right away.

Excelent!

nicoquindt Novembar 20, 2020
The plugin and the support!!

Quick help to solve a big problem.

hermitcrabb Zenâr 8, 2019
This plug-in saved my blog from a week-long brute force attack. The help team was quick in helping me get it installed, helped solve a couple of problems, and got me up and running. Installing this clearly secured my website. Thanks.

OMG! serious security is’sue required immediate action!

Paweł Novembar 15, 2018
I'm sorry. I shouldn't write this as Review. I found some serious issue. I moved the main text to the support page here.

Simple Effective Security Plugin

wellesleyps Otubar 3, 2018
This is a simple plugin that lets us see the IP address of users logging in. It has helped prevent block brute force attacks, and slow DOS attacks, also adds a Google reCaptcha to our login screen. Support is helpful and responsive. We also use the "Active Directory Integration for Cloud" by the same author and the two plugins work well together.

Superb security plugin !

Mabula Haverkamp Jugn 26, 2017
Hi all, This security plugin combined with the Two Factor authentication plugin of Mini Orange is simply great and works perfectly. I needed a customized security solution for my business website: https://www.astropixelprocessor.com Besides the TFA solution, I now use a customized version of this Brute Force Login Security, Spam protection & Limit Login Attempts plugin by Mini Orange. The quality and speed of service was all I could ever wish for. Highly recommended. I am very grateful to MiniOrange. My launch of business has been very succefull without any problems thanks to MiniOrange! Kind regards, Mabula Haverkamp
Read all 14 reviews

Contributors & Developers

“WordPress Security – Firewall, Malware Scanner, Secure Login and Backup” is open source software. The following people have contributed to this plugin.

Contributors
  • miniOrange
  • miniorange

Translate “WordPress Security – Firewall, Malware Scanner, Secure Login and Backup” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

4.1.1

  • Compatibility testing for wordpress 5.9 and improvement in feedback form.

4.1.0

  • Compatibility testing for wordpress 5.5 and improvement in feedback form.

4.0.9

  • Malware related changes and is’sue fix.

4.0.8

  • Firewall and malware related is’sue fix.

4.0.7

  • Malware scanner reload fix and Firewall plus security css is’sue fixes.

4.0.6

  • Google Recaptcha validation Is’sues fix.

4.0.5

  • WordPress Security Readme Is’sues

4.0.4

  • Security infromation Update

4.0.3

  • Web Application Firewall: New Features Information Update.

Meta

  • Version: 4.1.1
  • Last updated: 12 oris ago
  • Active installations: 1numar_formât_miârs_sep000+
  • WordPress Version: 2.0.2 or higher
  • Tested up to: 6.0
  • PHP Version: 5.3 or higher
  • Language:
    English (US)
  • Tags:
    backupfirewallloginmalware scannersecurity
  • Advanced View

Ratings

See all
  • 5 stars 9
  • 4 stars 0
  • 3 stars 0
  • 2 stars 0
  • 1 star 3
Log in to submit a review.

Contributors

  • miniOrange
  • miniorange

Support

Issues resolved in last two months:

0 out of 1

View support forum

Donate

Would you like to support the advancement of this plugin?

Donate to this plugin

  • About
  • News
  • Hosting
  • Donate
  • Support
  • Developers
  • Get Involved
  • Learn
  • Showcase
  • Plugins
  • Themes
  • Patterns
  • WordCamp
  • WordPress.TV
  • BuddyPress
  • bbPress
  • WordPress.com
  • Matt
  • Privacy
  • Public Code
WordPress.org
WordPress.org

Friulian

  • Visit our Facebook page
  • Visit our Twitter account
Il codiç al é puisie.