Version Description
- Moved the rules which disable index views from the "basic firewall" rules to the "additional rules" section. This will prevent any site breakage for those who want to enable the basic firewall but do not have "AllowOverride" option enabled in their httpd.conf
Download this release
Release Info
Developer | mra13 |
Plugin | All In One WP Security & Firewall |
Version | 1.2 |
Comparing to | |
See all releases |
Code changes from version 1.1 to 1.2
- admin/wp-security-firewall-menu.php +39 -0
- classes/grade-system/wp-security-feature-item-manager.php +20 -1
- classes/wp-security-configure-settings.php +1 -0
- classes/wp-security-general-init-tasks.php +21 -0
- classes/wp-security-utility-htaccess.php +24 -16
- readme.txt +7 -3
- wp-security-core.php +4 -9
- wp-security.php +1 -1
admin/wp-security-firewall-menu.php
CHANGED
@@ -164,6 +164,15 @@ class AIOWPSecurity_Firewall_Menu extends AIOWPSecurity_Admin_Menu
|
|
164 |
}
|
165 |
|
166 |
//Save settings
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
167 |
if(isset($_POST['aiowps_disable_trace_and_track']))
|
168 |
{
|
169 |
$aio_wp_security->configs->set_value('aiowps_disable_trace_and_track','1');
|
@@ -232,6 +241,36 @@ class AIOWPSecurity_Firewall_Menu extends AIOWPSecurity_Admin_Menu
|
|
232 |
<form action="" method="POST">
|
233 |
<?php wp_nonce_field('aiowpsec-enable-additional-firewall-nonce'); ?>
|
234 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
235 |
<div class="postbox">
|
236 |
<h3><label for="title"><?php _e('Trace and Track', 'aiowpsecurity'); ?></label></h3>
|
237 |
<div class="inside">
|
164 |
}
|
165 |
|
166 |
//Save settings
|
167 |
+
if(isset($_POST['aiowps_disable_index_views']))
|
168 |
+
{
|
169 |
+
$aio_wp_security->configs->set_value('aiowps_disable_index_views','1');
|
170 |
+
}
|
171 |
+
else
|
172 |
+
{
|
173 |
+
$aio_wp_security->configs->set_value('aiowps_disable_index_views','');
|
174 |
+
}
|
175 |
+
|
176 |
if(isset($_POST['aiowps_disable_trace_and_track']))
|
177 |
{
|
178 |
$aio_wp_security->configs->set_value('aiowps_disable_trace_and_track','1');
|
241 |
<form action="" method="POST">
|
242 |
<?php wp_nonce_field('aiowpsec-enable-additional-firewall-nonce'); ?>
|
243 |
|
244 |
+
<div class="postbox">
|
245 |
+
<h3><label for="title"><?php _e('Listing of Directory Contents', 'aiowpsecurity'); ?></label></h3>
|
246 |
+
<div class="inside">
|
247 |
+
<?php
|
248 |
+
//Display security info badge
|
249 |
+
global $aiowps_feature_mgr;
|
250 |
+
$aiowps_feature_mgr->output_feature_details_badge("firewall-disable-index-views");
|
251 |
+
?>
|
252 |
+
<table class="form-table">
|
253 |
+
<tr valign="top">
|
254 |
+
<th scope="row"><?php _e('Disable Index Views', 'aiowpsecurity')?>:</th>
|
255 |
+
<td>
|
256 |
+
<input name="aiowps_disable_index_views" type="checkbox"<?php if($aio_wp_security->configs->get_value('aiowps_disable_index_views')=='1') echo ' checked="checked"'; ?> value="1"/>
|
257 |
+
<span class="description"><?php _e('Check this if you want to disable directory and file listing.', 'aiowpsecurity'); ?></span>
|
258 |
+
<span class="aiowps_more_info_anchor"><span class="aiowps_more_info_toggle_char">+</span><span class="aiowps_more_info_toggle_text"><?php _e('More Info', 'aiowpsecurity'); ?></span></span>
|
259 |
+
<div class="aiowps_more_info_body">
|
260 |
+
<p class="description">
|
261 |
+
<?php
|
262 |
+
_e('By default, an Apache server will allow the listing of the contents of a directory if it doesn\'t contain an index.php file.', 'aiowpsecurity');
|
263 |
+
echo '<br />';
|
264 |
+
_e('This feature will prevent the listing of contents for all directories.', 'aiowpsecurity');
|
265 |
+
echo '<br />';
|
266 |
+
_e('NOTE: In order for this feature to work "AllowOverride" must be enabled in your httpd.conf file. Ask your hosting provider to check this if you don\'t have access to httpd.conf', 'aiowpsecurity');
|
267 |
+
?>
|
268 |
+
</p>
|
269 |
+
</div>
|
270 |
+
</td>
|
271 |
+
</tr>
|
272 |
+
</table>
|
273 |
+
</div></div>
|
274 |
<div class="postbox">
|
275 |
<h3><label for="title"><?php _e('Trace and Track', 'aiowpsecurity'); ?></label></h3>
|
276 |
<div class="inside">
|
classes/grade-system/wp-security-feature-item-manager.php
CHANGED
@@ -58,7 +58,9 @@ class AIOWPSecurity_Feature_Item_Manager
|
|
58 |
//Firewall Menu Features
|
59 |
//Basic firewall
|
60 |
$this->feature_items[] = new AIOWPSecurity_Feature_Item("firewall-basic-rules", "Enable Basic Firewall", $this->feature_point_3, $this->sec_level_basic);
|
61 |
-
|
|
|
|
|
62 |
$this->feature_items[] = new AIOWPSecurity_Feature_Item("firewall-disable-trace-track", "Disable Trace and Track", $this->feature_point_2, $this->sec_level_advanced);
|
63 |
$this->feature_items[] = new AIOWPSecurity_Feature_Item("firewall-forbid-proxy-comments", "Forbid Proxy Comments", $this->feature_point_2, $this->sec_level_advanced);
|
64 |
$this->feature_items[] = new AIOWPSecurity_Feature_Item("firewall-deny-bad-queries", "Deny Bad Queries", $this->feature_point_3, $this->sec_level_advanced);
|
@@ -154,6 +156,10 @@ class AIOWPSecurity_Feature_Item_Manager
|
|
154 |
{
|
155 |
$this->check_enable_basic_firewall_feature($item);
|
156 |
}
|
|
|
|
|
|
|
|
|
157 |
if($item->feature_id == "firewall-disable-trace-track")
|
158 |
{
|
159 |
$this->check_disable_trace_track_firewall_feature($item);
|
@@ -355,6 +361,19 @@ class AIOWPSecurity_Feature_Item_Manager
|
|
355 |
$item->set_feature_status($this->feature_inactive);
|
356 |
}
|
357 |
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
358 |
function check_forbid_proxy_comments_firewall_feature($item)
|
359 |
{
|
360 |
global $aio_wp_security;
|
58 |
//Firewall Menu Features
|
59 |
//Basic firewall
|
60 |
$this->feature_items[] = new AIOWPSecurity_Feature_Item("firewall-basic-rules", "Enable Basic Firewall", $this->feature_point_3, $this->sec_level_basic);
|
61 |
+
|
62 |
+
//Additional and Advanced firewall
|
63 |
+
$this->feature_items[] = new AIOWPSecurity_Feature_Item("firewall-disable-index-views", "Disable Index Views", $this->feature_point_1, $this->sec_level_inter);
|
64 |
$this->feature_items[] = new AIOWPSecurity_Feature_Item("firewall-disable-trace-track", "Disable Trace and Track", $this->feature_point_2, $this->sec_level_advanced);
|
65 |
$this->feature_items[] = new AIOWPSecurity_Feature_Item("firewall-forbid-proxy-comments", "Forbid Proxy Comments", $this->feature_point_2, $this->sec_level_advanced);
|
66 |
$this->feature_items[] = new AIOWPSecurity_Feature_Item("firewall-deny-bad-queries", "Deny Bad Queries", $this->feature_point_3, $this->sec_level_advanced);
|
156 |
{
|
157 |
$this->check_enable_basic_firewall_feature($item);
|
158 |
}
|
159 |
+
if($item->feature_id == "firewall-disable-index-views")
|
160 |
+
{
|
161 |
+
$this->check_disable_index_views_firewall_feature($item);
|
162 |
+
}
|
163 |
if($item->feature_id == "firewall-disable-trace-track")
|
164 |
{
|
165 |
$this->check_disable_trace_track_firewall_feature($item);
|
361 |
$item->set_feature_status($this->feature_inactive);
|
362 |
}
|
363 |
}
|
364 |
+
|
365 |
+
function check_disable_index_views_firewall_feature($item)
|
366 |
+
{
|
367 |
+
global $aio_wp_security;
|
368 |
+
if ($aio_wp_security->configs->get_value('aiowps_disable_index_views') == '1') {
|
369 |
+
$item->set_feature_status($this->feature_active);
|
370 |
+
}
|
371 |
+
else
|
372 |
+
{
|
373 |
+
$item->set_feature_status($this->feature_inactive);
|
374 |
+
}
|
375 |
+
}
|
376 |
+
|
377 |
function check_forbid_proxy_comments_firewall_feature($item)
|
378 |
{
|
379 |
global $aio_wp_security;
|
classes/wp-security-configure-settings.php
CHANGED
@@ -42,6 +42,7 @@ class AIOWPSecurity_Configure_Settings
|
|
42 |
|
43 |
//Firewall features
|
44 |
$aio_wp_security->configs->set_value('aiowps_enable_basic_firewall','');//Checkbox
|
|
|
45 |
$aio_wp_security->configs->set_value('aiowps_disable_trace_and_track','');//Checkbox
|
46 |
$aio_wp_security->configs->set_value('aiowps_forbid_proxy_comments','');//Checkbox
|
47 |
$aio_wp_security->configs->set_value('aiowps_deny_bad_query_strings','');//Checkbox
|
42 |
|
43 |
//Firewall features
|
44 |
$aio_wp_security->configs->set_value('aiowps_enable_basic_firewall','');//Checkbox
|
45 |
+
$aio_wp_security->configs->set_value('aiowps_disable_index_views','');//Checkbox
|
46 |
$aio_wp_security->configs->set_value('aiowps_disable_trace_and_track','');//Checkbox
|
47 |
$aio_wp_security->configs->set_value('aiowps_forbid_proxy_comments','');//Checkbox
|
48 |
$aio_wp_security->configs->set_value('aiowps_deny_bad_query_strings','');//Checkbox
|
classes/wp-security-general-init-tasks.php
ADDED
@@ -0,0 +1,21 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1 |
+
<?php
|
2 |
+
|
3 |
+
class AIOWPSecurity_General_Init_Tasks
|
4 |
+
{
|
5 |
+
function __construct(){
|
6 |
+
global $aio_wp_security;
|
7 |
+
|
8 |
+
if($aio_wp_security->configs->get_value('aiowps_remove_wp_generator_meta_info') == '1'){
|
9 |
+
add_filter('the_generator', array(&$this,'remove_wp_generator_meta_info'));
|
10 |
+
}
|
11 |
+
|
12 |
+
//Add more tasks that need to be executed at init time
|
13 |
+
|
14 |
+
}
|
15 |
+
|
16 |
+
function remove_wp_generator_meta_info()
|
17 |
+
{
|
18 |
+
return '';
|
19 |
+
}
|
20 |
+
|
21 |
+
}
|
classes/wp-security-utility-htaccess.php
CHANGED
@@ -16,6 +16,9 @@ class AIOWPSecurity_Utility_Htaccess
|
|
16 |
public static $user_agent_blacklist_marker_start = '#AIOWPS_USER_AGENT_BLACKLIST_START';
|
17 |
public static $user_agent_blacklist_marker_end = '#AIOWPS_USER_AGENT_BLACKLIST_END';
|
18 |
|
|
|
|
|
|
|
19 |
public static $disable_trace_track_marker_start = '#AIOWPS_DISABLE_TRACE_TRACK_START';
|
20 |
public static $disable_trace_track_marker_end = '#AIOWPS_DISABLE_TRACE_TRACK_END';
|
21 |
|
@@ -189,6 +192,7 @@ class AIOWPSecurity_Utility_Htaccess
|
|
189 |
$rules = "";
|
190 |
$rules .= AIOWPSecurity_Utility_Htaccess::getrules_block_wp_file_access();
|
191 |
$rules .= AIOWPSecurity_Utility_Htaccess::getrules_basic_htaccess();
|
|
|
192 |
$rules .= AIOWPSecurity_Utility_Htaccess::getrules_blacklist();
|
193 |
$rules .= AIOWPSecurity_Utility_Htaccess::getrules_disable_trace_and_track();
|
194 |
$rules .= AIOWPSecurity_Utility_Htaccess::getrules_forbid_proxy_comment_posting();
|
@@ -216,8 +220,6 @@ class AIOWPSecurity_Utility_Htaccess
|
|
216 |
static function getrules_block_wp_file_access()
|
217 |
{
|
218 |
global $aio_wp_security;
|
219 |
-
@ini_set( 'auto_detect_line_endings', true );
|
220 |
-
|
221 |
$rules = '';
|
222 |
if($aio_wp_security->configs->get_value('aiowps_prevent_default_wp_file_access')=='1')
|
223 |
{
|
@@ -243,7 +245,6 @@ class AIOWPSecurity_Utility_Htaccess
|
|
243 |
static function getrules_blacklist()
|
244 |
{
|
245 |
global $aio_wp_security;
|
246 |
-
@ini_set( 'auto_detect_line_endings', true );
|
247 |
$aiowps_server = AIOWPSecurity_Utility_Htaccess::get_server_type();
|
248 |
$rules = '';
|
249 |
if($aio_wp_security->configs->get_value('aiowps_enable_blacklisting')=='1')
|
@@ -376,14 +377,11 @@ class AIOWPSecurity_Utility_Htaccess
|
|
376 |
static function getrules_basic_htaccess()
|
377 |
{
|
378 |
global $aio_wp_security;
|
379 |
-
@ini_set( 'auto_detect_line_endings', true );
|
380 |
|
381 |
$rules = '';
|
382 |
if($aio_wp_security->configs->get_value('aiowps_enable_basic_firewall')=='1')
|
383 |
{
|
384 |
$rules .= AIOWPSecurity_Utility_Htaccess::$basic_htaccess_rules_marker_start . PHP_EOL; //Add feature marker start
|
385 |
-
//limit indexing of directories
|
386 |
-
$rules .= 'Options All -Indexes' . PHP_EOL;
|
387 |
//protect the htaccess file - this is done by default with apache config file but we are including it here for good measure
|
388 |
$rules .= '<files .htaccess>' . PHP_EOL;
|
389 |
$rules .= 'order allow,deny' . PHP_EOL;
|
@@ -406,6 +404,26 @@ class AIOWPSecurity_Utility_Htaccess
|
|
406 |
}
|
407 |
return $rules;
|
408 |
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
409 |
|
410 |
/*
|
411 |
* This function will write rules to disable trace and track.
|
@@ -416,8 +434,6 @@ class AIOWPSecurity_Utility_Htaccess
|
|
416 |
static function getrules_disable_trace_and_track()
|
417 |
{
|
418 |
global $aio_wp_security;
|
419 |
-
@ini_set( 'auto_detect_line_endings', true );
|
420 |
-
|
421 |
$rules = '';
|
422 |
if($aio_wp_security->configs->get_value('aiowps_disable_trace_and_track')=='1')
|
423 |
{
|
@@ -440,8 +456,6 @@ class AIOWPSecurity_Utility_Htaccess
|
|
440 |
static function getrules_forbid_proxy_comment_posting()
|
441 |
{
|
442 |
global $aio_wp_security;
|
443 |
-
@ini_set( 'auto_detect_line_endings', true );
|
444 |
-
|
445 |
$rules = '';
|
446 |
if($aio_wp_security->configs->get_value('aiowps_forbid_proxy_comments')=='1')
|
447 |
{
|
@@ -466,8 +480,6 @@ class AIOWPSecurity_Utility_Htaccess
|
|
466 |
static function getrules_deny_bad_query_strings()
|
467 |
{
|
468 |
global $aio_wp_security;
|
469 |
-
@ini_set( 'auto_detect_line_endings', true );
|
470 |
-
|
471 |
$rules = '';
|
472 |
if($aio_wp_security->configs->get_value('aiowps_deny_bad_query_strings')=='1')
|
473 |
{
|
@@ -512,8 +524,6 @@ class AIOWPSecurity_Utility_Htaccess
|
|
512 |
static function getrules_advanced_character_string_filter()
|
513 |
{
|
514 |
global $aio_wp_security;
|
515 |
-
@ini_set( 'auto_detect_line_endings', true );
|
516 |
-
|
517 |
$rules = '';
|
518 |
if($aio_wp_security->configs->get_value('aiowps_advanced_char_string_filter')=='1')
|
519 |
{
|
@@ -601,8 +611,6 @@ class AIOWPSecurity_Utility_Htaccess
|
|
601 |
static function getrules_5g_blacklist()
|
602 |
{
|
603 |
global $aio_wp_security;
|
604 |
-
@ini_set( 'auto_detect_line_endings', true );
|
605 |
-
|
606 |
$rules = '';
|
607 |
if($aio_wp_security->configs->get_value('aiowps_enable_5g_firewall')=='1')
|
608 |
{
|
16 |
public static $user_agent_blacklist_marker_start = '#AIOWPS_USER_AGENT_BLACKLIST_START';
|
17 |
public static $user_agent_blacklist_marker_end = '#AIOWPS_USER_AGENT_BLACKLIST_END';
|
18 |
|
19 |
+
public static $disable_index_views_marker_start = '#AIOWPS_DISABLE_INDEX_VIEWS_START';
|
20 |
+
public static $disable_index_views_marker_end = '#AIOWPS_DISABLE_INDEX_VIEWS_END';
|
21 |
+
|
22 |
public static $disable_trace_track_marker_start = '#AIOWPS_DISABLE_TRACE_TRACK_START';
|
23 |
public static $disable_trace_track_marker_end = '#AIOWPS_DISABLE_TRACE_TRACK_END';
|
24 |
|
192 |
$rules = "";
|
193 |
$rules .= AIOWPSecurity_Utility_Htaccess::getrules_block_wp_file_access();
|
194 |
$rules .= AIOWPSecurity_Utility_Htaccess::getrules_basic_htaccess();
|
195 |
+
$rules .= AIOWPSecurity_Utility_Htaccess::getrules_disable_index_views();
|
196 |
$rules .= AIOWPSecurity_Utility_Htaccess::getrules_blacklist();
|
197 |
$rules .= AIOWPSecurity_Utility_Htaccess::getrules_disable_trace_and_track();
|
198 |
$rules .= AIOWPSecurity_Utility_Htaccess::getrules_forbid_proxy_comment_posting();
|
220 |
static function getrules_block_wp_file_access()
|
221 |
{
|
222 |
global $aio_wp_security;
|
|
|
|
|
223 |
$rules = '';
|
224 |
if($aio_wp_security->configs->get_value('aiowps_prevent_default_wp_file_access')=='1')
|
225 |
{
|
245 |
static function getrules_blacklist()
|
246 |
{
|
247 |
global $aio_wp_security;
|
|
|
248 |
$aiowps_server = AIOWPSecurity_Utility_Htaccess::get_server_type();
|
249 |
$rules = '';
|
250 |
if($aio_wp_security->configs->get_value('aiowps_enable_blacklisting')=='1')
|
377 |
static function getrules_basic_htaccess()
|
378 |
{
|
379 |
global $aio_wp_security;
|
|
|
380 |
|
381 |
$rules = '';
|
382 |
if($aio_wp_security->configs->get_value('aiowps_enable_basic_firewall')=='1')
|
383 |
{
|
384 |
$rules .= AIOWPSecurity_Utility_Htaccess::$basic_htaccess_rules_marker_start . PHP_EOL; //Add feature marker start
|
|
|
|
|
385 |
//protect the htaccess file - this is done by default with apache config file but we are including it here for good measure
|
386 |
$rules .= '<files .htaccess>' . PHP_EOL;
|
387 |
$rules .= 'order allow,deny' . PHP_EOL;
|
404 |
}
|
405 |
return $rules;
|
406 |
}
|
407 |
+
|
408 |
+
/*
|
409 |
+
* This function will disable directory listings for all directories, add this line to the
|
410 |
+
* site’s root .htaccess file.
|
411 |
+
* NOTE: AllowOverride must be enabled in the httpd.conf file for this to work!
|
412 |
+
*/
|
413 |
+
static function getrules_disable_index_views()
|
414 |
+
{
|
415 |
+
global $aio_wp_security;
|
416 |
+
$rules = '';
|
417 |
+
if($aio_wp_security->configs->get_value('aiowps_disable_index_views')=='1')
|
418 |
+
{
|
419 |
+
$rules .= AIOWPSecurity_Utility_Htaccess::$disable_index_views_marker_start . PHP_EOL; //Add feature marker start
|
420 |
+
$rules .= 'Options All -Indexes' . PHP_EOL;
|
421 |
+
$rules .= AIOWPSecurity_Utility_Htaccess::$disable_index_views_marker_end . PHP_EOL; //Add feature marker end
|
422 |
+
}
|
423 |
+
|
424 |
+
return $rules;
|
425 |
+
}
|
426 |
+
|
427 |
|
428 |
/*
|
429 |
* This function will write rules to disable trace and track.
|
434 |
static function getrules_disable_trace_and_track()
|
435 |
{
|
436 |
global $aio_wp_security;
|
|
|
|
|
437 |
$rules = '';
|
438 |
if($aio_wp_security->configs->get_value('aiowps_disable_trace_and_track')=='1')
|
439 |
{
|
456 |
static function getrules_forbid_proxy_comment_posting()
|
457 |
{
|
458 |
global $aio_wp_security;
|
|
|
|
|
459 |
$rules = '';
|
460 |
if($aio_wp_security->configs->get_value('aiowps_forbid_proxy_comments')=='1')
|
461 |
{
|
480 |
static function getrules_deny_bad_query_strings()
|
481 |
{
|
482 |
global $aio_wp_security;
|
|
|
|
|
483 |
$rules = '';
|
484 |
if($aio_wp_security->configs->get_value('aiowps_deny_bad_query_strings')=='1')
|
485 |
{
|
524 |
static function getrules_advanced_character_string_filter()
|
525 |
{
|
526 |
global $aio_wp_security;
|
|
|
|
|
527 |
$rules = '';
|
528 |
if($aio_wp_security->configs->get_value('aiowps_advanced_char_string_filter')=='1')
|
529 |
{
|
611 |
static function getrules_5g_blacklist()
|
612 |
{
|
613 |
global $aio_wp_security;
|
|
|
|
|
614 |
$rules = '';
|
615 |
if($aio_wp_security->configs->get_value('aiowps_enable_5g_firewall')=='1')
|
616 |
{
|
readme.txt
CHANGED
@@ -4,7 +4,7 @@ Donate link: http://www.tipsandtricks-hq.com
|
|
4 |
Tags: security, secure, Anti Virus, antivirus, virus, firewall, login, lockdown, htaccess, hacking, ban hacker, malware, vulnerability, protect, phishing, database, backup, plugin, sql injection
|
5 |
Requires at least: 3.5
|
6 |
Tested up to: 3.6
|
7 |
-
Stable tag: 1.
|
8 |
License: GPLv3
|
9 |
|
10 |
A comprehensive, user-friendly, all in one WordPress security and firewall plugin for your site.
|
@@ -18,7 +18,7 @@ The All In One WordPress Security plugin will take your website security to a wh
|
|
18 |
|
19 |
This plugin is designed and written by experts and is easy to use and understand.
|
20 |
|
21 |
-
It
|
22 |
|
23 |
http://www.youtube.com/watch?v=CJvCTlVtazA
|
24 |
|
@@ -69,7 +69,8 @@ via email whenever somebody gets locked out due to too many login attempts.
|
|
69 |
This plugin allows you to easily add a lot of firewall protection to your site via htaccess file. An htaccess file is processed by your web server before any other code on your site.
|
70 |
So these firewall rules will stop malicious script(s) before it gets a chance to reach the WordPress code on your site.
|
71 |
|
72 |
-
*
|
|
|
73 |
* Enable the famous "5G Blacklist" Firewall rules courtesy of [Perishable Press](http://perishablepress.com/)
|
74 |
* Forbid proxy comment posting
|
75 |
* Disable trace and track
|
@@ -116,6 +117,9 @@ None
|
|
116 |
None
|
117 |
|
118 |
== Changelog ==
|
|
|
|
|
|
|
119 |
|
120 |
= 1.1 =
|
121 |
- Added the following new feature:
|
4 |
Tags: security, secure, Anti Virus, antivirus, virus, firewall, login, lockdown, htaccess, hacking, ban hacker, malware, vulnerability, protect, phishing, database, backup, plugin, sql injection
|
5 |
Requires at least: 3.5
|
6 |
Tested up to: 3.6
|
7 |
+
Stable tag: 1.2
|
8 |
License: GPLv3
|
9 |
|
10 |
A comprehensive, user-friendly, all in one WordPress security and firewall plugin for your site.
|
18 |
|
19 |
This plugin is designed and written by experts and is easy to use and understand.
|
20 |
|
21 |
+
It reduces security risk by checking for vulnerabilities, and by implementing and enforcing the latest recommended WordPress security practices and techniques.
|
22 |
|
23 |
http://www.youtube.com/watch?v=CJvCTlVtazA
|
24 |
|
69 |
This plugin allows you to easily add a lot of firewall protection to your site via htaccess file. An htaccess file is processed by your web server before any other code on your site.
|
70 |
So these firewall rules will stop malicious script(s) before it gets a chance to reach the WordPress code on your site.
|
71 |
|
72 |
+
* Access control facility
|
73 |
+
* Instantly activate a selection of firewall settings ranging from basic, intermediate and advanced
|
74 |
* Enable the famous "5G Blacklist" Firewall rules courtesy of [Perishable Press](http://perishablepress.com/)
|
75 |
* Forbid proxy comment posting
|
76 |
* Disable trace and track
|
117 |
None
|
118 |
|
119 |
== Changelog ==
|
120 |
+
= 1.2 =
|
121 |
+
- Moved the rules which disable index views from the "basic firewall" rules to the "additional rules" section. This will prevent any site breakage for
|
122 |
+
those who want to enable the basic firewall but do not have "AllowOverride" option enabled in their httpd.conf
|
123 |
|
124 |
= 1.1 =
|
125 |
- Added the following new feature:
|
wp-security-core.php
CHANGED
@@ -3,7 +3,7 @@
|
|
3 |
if (!class_exists('AIO_WP_Security')){
|
4 |
|
5 |
class AIO_WP_Security{
|
6 |
-
var $version = '1.
|
7 |
var $db_version = '1.2';
|
8 |
var $plugin_url;
|
9 |
var $plugin_path;
|
@@ -79,6 +79,7 @@ class AIO_WP_Security{
|
|
79 |
include_once('classes/wp-security-utility-htaccess.php');
|
80 |
include_once('classes/wp-security-utility-ip-address.php');
|
81 |
include_once('classes/wp-security-utility-file.php');
|
|
|
82 |
|
83 |
include_once('classes/wp-security-user-login.php');
|
84 |
include_once('classes/wp-security-backup.php');
|
@@ -146,7 +147,7 @@ class AIO_WP_Security{
|
|
146 |
//Set up localisation
|
147 |
load_plugin_textdomain('aiowpsecurity', false, AIO_WP_SECURITY_PATH . "/languages" );
|
148 |
|
149 |
-
//
|
150 |
$this->user_login_obj = new AIOWPSecurity_User_Login();//Do the user login operation tasks
|
151 |
$this->backup_obj = new AIOWPSecurity_Backup();//Object to handle backup tasks
|
152 |
$this->cron_handler = new AIOWPSecurity_Cronjob_Handler();
|
@@ -155,8 +156,7 @@ class AIO_WP_Security{
|
|
155 |
|
156 |
add_action('wp_login', array('AIOWPSecurity_User_Login', 'wp_login_action_handler'), 10, 2);
|
157 |
do_action('aiowps_force_logout_check');
|
158 |
-
|
159 |
-
|
160 |
}
|
161 |
|
162 |
function aiowps_header_content()
|
@@ -164,11 +164,6 @@ class AIO_WP_Security{
|
|
164 |
//NOP
|
165 |
}
|
166 |
|
167 |
-
function do_additional_init_tasks()
|
168 |
-
{
|
169 |
-
//NOP
|
170 |
-
}
|
171 |
-
|
172 |
function do_additional_plugins_loaded_tasks()
|
173 |
{
|
174 |
if(isset($_GET['aiowpsec_do_log_out']))
|
3 |
if (!class_exists('AIO_WP_Security')){
|
4 |
|
5 |
class AIO_WP_Security{
|
6 |
+
var $version = '1.2';
|
7 |
var $db_version = '1.2';
|
8 |
var $plugin_url;
|
9 |
var $plugin_path;
|
79 |
include_once('classes/wp-security-utility-htaccess.php');
|
80 |
include_once('classes/wp-security-utility-ip-address.php');
|
81 |
include_once('classes/wp-security-utility-file.php');
|
82 |
+
include_once('classes/wp-security-general-init-tasks.php');
|
83 |
|
84 |
include_once('classes/wp-security-user-login.php');
|
85 |
include_once('classes/wp-security-backup.php');
|
147 |
//Set up localisation
|
148 |
load_plugin_textdomain('aiowpsecurity', false, AIO_WP_SECURITY_PATH . "/languages" );
|
149 |
|
150 |
+
//Actions, filters, shortcodes goes here
|
151 |
$this->user_login_obj = new AIOWPSecurity_User_Login();//Do the user login operation tasks
|
152 |
$this->backup_obj = new AIOWPSecurity_Backup();//Object to handle backup tasks
|
153 |
$this->cron_handler = new AIOWPSecurity_Cronjob_Handler();
|
156 |
|
157 |
add_action('wp_login', array('AIOWPSecurity_User_Login', 'wp_login_action_handler'), 10, 2);
|
158 |
do_action('aiowps_force_logout_check');
|
159 |
+
new AIOWPSecurity_General_Init_Tasks();
|
|
|
160 |
}
|
161 |
|
162 |
function aiowps_header_content()
|
164 |
//NOP
|
165 |
}
|
166 |
|
|
|
|
|
|
|
|
|
|
|
167 |
function do_additional_plugins_loaded_tasks()
|
168 |
{
|
169 |
if(isset($_GET['aiowpsec_do_log_out']))
|
wp-security.php
CHANGED
@@ -1,7 +1,7 @@
|
|
1 |
<?php
|
2 |
/*
|
3 |
Plugin Name: All In One WP Security
|
4 |
-
Version: v1.
|
5 |
Plugin URI: http://www.tipsandtricks-hq.com/
|
6 |
Author: Tips and Tricks HQ, Peter, Ruhul Amin
|
7 |
Author URI: http://www.tipsandtricks-hq.com/
|
1 |
<?php
|
2 |
/*
|
3 |
Plugin Name: All In One WP Security
|
4 |
+
Version: v1.2
|
5 |
Plugin URI: http://www.tipsandtricks-hq.com/
|
6 |
Author: Tips and Tricks HQ, Peter, Ruhul Amin
|
7 |
Author URI: http://www.tipsandtricks-hq.com/
|