Version Description
- Removed the stats that were collected to that we could understand the issues that users were having with the plugin.
Download this release
Release Info
Developer | sean212 |
Plugin | Lockdown WP Admin |
Version | 1.7 |
Comparing to | |
See all releases |
Code changes from version 1.6 to 1.7
- lockdown-wp-admin.php +3 -65
- readme.txt +7 -4
lockdown-wp-admin.php
CHANGED
@@ -3,7 +3,7 @@
|
|
3 |
Plugin Name: Lockdown WordPress Admin
|
4 |
Plugin URI: http://talkingwithsean.com/2011/01/lockdown-wp-admin/
|
5 |
Description: Securing the WordPress Administration interface.
|
6 |
-
Version: 1.
|
7 |
Author: Sean Fisher
|
8 |
Author URI: http://talkingwithsean.com/
|
9 |
License: GPL v3
|
@@ -16,7 +16,7 @@ define('LD_FILE_NAME', __FILE__ );
|
|
16 |
* This is the plugin that will add security to our site
|
17 |
*
|
18 |
* @author Sean Fisher <sean@talkingwithsean.com>
|
19 |
-
* @version 1.
|
20 |
* @license GPL v3
|
21 |
**/
|
22 |
class WP_LockAuth {
|
@@ -27,7 +27,7 @@ class WP_LockAuth {
|
|
27 |
* @param string
|
28 |
* @access private
|
29 |
**/
|
30 |
-
private $ld_admin_version = '1.
|
31 |
|
32 |
/**
|
33 |
* The HTTP Auth name for the protected area
|
@@ -501,11 +501,6 @@ class WP_LockAuth {
|
|
501 |
// Update the options
|
502 |
$this->update_options();
|
503 |
|
504 |
-
// The stats
|
505 |
-
$check_stats_sent = get_transient('ld_send_stats');
|
506 |
-
if ( !$check_stats_sent )
|
507 |
-
$this->send_stats();
|
508 |
-
|
509 |
// The UI
|
510 |
require_once( dirname( __FILE__ ) . '/admin.php' );
|
511 |
}
|
@@ -600,63 +595,6 @@ class WP_LockAuth {
|
|
600 |
{
|
601 |
return str_replace('wp-login.php', $this->login_base, $str);
|
602 |
}
|
603 |
-
|
604 |
-
/**
|
605 |
-
* Send stats
|
606 |
-
*
|
607 |
-
* Send anyomous stats to help out the development of the plugin.
|
608 |
-
* This should be pretty temporary.
|
609 |
-
* @access private
|
610 |
-
**/
|
611 |
-
public function send_stats()
|
612 |
-
{
|
613 |
-
global $wp_version;
|
614 |
-
|
615 |
-
$to_post = array(
|
616 |
-
'ld_admin_version' => $this->ld_admin_version,
|
617 |
-
'server' => $_SERVER['HTTP_HOST'],
|
618 |
-
'request_url' => $_SERVER['REQUEST_URI'],
|
619 |
-
'wordpress_version' => $wp_version,
|
620 |
-
'url' => get_bloginfo( 'url' ),
|
621 |
-
// I reconsidered this..
|
622 |
-
// 'admin_email' => get_bloginfo('admin_email'),
|
623 |
-
'charset' => get_bloginfo('charset'),
|
624 |
-
'login_base' => $this->login_base,
|
625 |
-
'ld_http_auth' => get_option('ld_http_auth'),
|
626 |
-
'ld_hide_wp_admin' => get_option('ld_hide_wp_admin'),
|
627 |
-
'permalink_structure' => get_option('permalink_structure'),
|
628 |
-
'server_software' => $_SERVER['SERVER_SOFTWARE'],
|
629 |
-
'query_string' => $_SERVER['QUERY_STRING'],
|
630 |
-
'wp_version' => $wp_version,
|
631 |
-
);
|
632 |
-
|
633 |
-
if ( function_exists('got_mod_rewrite '))
|
634 |
-
$to_post['got_mod_rewrite '] = got_mod_rewrite();
|
635 |
-
|
636 |
-
$options = array(
|
637 |
-
'timeout' => ( ( defined('DOING_CRON') && DOING_CRON ) ? 30 : 3),
|
638 |
-
'body' => array( 'data' => serialize( $to_post ) ),
|
639 |
-
'user-agent' => 'WordPress/' . $wp_version . '; ' . get_bloginfo( 'url' )
|
640 |
-
);
|
641 |
-
|
642 |
-
$raw_response = wp_remote_post('http://labs.talkingwithsean.com/lockdown-api/main/send/', $options);
|
643 |
-
|
644 |
-
// Set that we sent it
|
645 |
-
set_transient('ld_send_stats', 'true', 604800);
|
646 |
-
|
647 |
-
// What'd they respond?
|
648 |
-
if ( is_wp_error( $raw_response ) )
|
649 |
-
return FALSE;
|
650 |
-
|
651 |
-
if ( 200 != $raw_response['response']['code'] )
|
652 |
-
return FALSE;
|
653 |
-
|
654 |
-
$response = json_decode( unserialize( $raw_response['body'] ) );
|
655 |
-
|
656 |
-
if ( !is_array( $response ) )
|
657 |
-
return FALSE;
|
658 |
-
|
659 |
-
}
|
660 |
}
|
661 |
|
662 |
/**
|
3 |
Plugin Name: Lockdown WordPress Admin
|
4 |
Plugin URI: http://talkingwithsean.com/2011/01/lockdown-wp-admin/
|
5 |
Description: Securing the WordPress Administration interface.
|
6 |
+
Version: 1.7
|
7 |
Author: Sean Fisher
|
8 |
Author URI: http://talkingwithsean.com/
|
9 |
License: GPL v3
|
16 |
* This is the plugin that will add security to our site
|
17 |
*
|
18 |
* @author Sean Fisher <sean@talkingwithsean.com>
|
19 |
+
* @version 1.7
|
20 |
* @license GPL v3
|
21 |
**/
|
22 |
class WP_LockAuth {
|
27 |
* @param string
|
28 |
* @access private
|
29 |
**/
|
30 |
+
private $ld_admin_version = '1.7';
|
31 |
|
32 |
/**
|
33 |
* The HTTP Auth name for the protected area
|
501 |
// Update the options
|
502 |
$this->update_options();
|
503 |
|
|
|
|
|
|
|
|
|
|
|
504 |
// The UI
|
505 |
require_once( dirname( __FILE__ ) . '/admin.php' );
|
506 |
}
|
595 |
{
|
596 |
return str_replace('wp-login.php', $this->login_base, $str);
|
597 |
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
598 |
}
|
599 |
|
600 |
/**
|
readme.txt
CHANGED
@@ -5,7 +5,7 @@ Link: http://talkingwithsean.com/2011/01/lockdown-wp-admin/
|
|
5 |
Tags: security, wp-admin, login, hide login, rename login, http auth, 404, lockdown, talkingwithsean, secure
|
6 |
Requires at least: 3.0
|
7 |
Tested up to: 3.2
|
8 |
-
Stable tag: 1.
|
9 |
|
10 |
This plugin will lockdown WP Admin. It can hide wp-admin and wp-login as well as add HTTP auth to the login system. It can change the login URL.
|
11 |
|
@@ -25,7 +25,7 @@ If you enable HTTP authencation, it will add HTTP auth to the PHP files in /wp-a
|
|
25 |
3. Navigate to the "Lockdown WP" menu
|
26 |
|
27 |
== Frequently Asked Questions ==
|
28 |
-
How can we add files to the whitelist to hide from the public eye? We want to have AJAX and use a custom file, but we can't because it hides it from the public.
|
29 |
|
30 |
You can add a file using the 'no_check_files' filter. Use this:
|
31 |
<?php
|
@@ -40,7 +40,7 @@ You can add a file using the 'no_check_files' filter. Use this:
|
|
40 |
|
41 |
Simple.
|
42 |
|
43 |
-
How can I get back in if the plugin locked me out?
|
44 |
|
45 |
You can create a .txt file named 'disable_auth.txt' in your wp-content/plugins/lockdown-wp-admin/ folder (The file location would be /wp-content/plugins/lockdown-wp-admin/disable_auth.txt). We don't care about the content but that will disable the HTTP Auth and whatever was locking you out of your site.
|
46 |
|
@@ -72,4 +72,7 @@ You can create a .txt file named 'disable_auth.txt' in your wp-content/plugins/l
|
|
72 |
* Added `admin-ajax.php` to the files that we permit to be access in wp-admin.
|
73 |
|
74 |
= 1.6 =
|
75 |
-
* Added way to get back into WP-ADMIN if locked out (See the FAQ)
|
|
|
|
|
|
5 |
Tags: security, wp-admin, login, hide login, rename login, http auth, 404, lockdown, talkingwithsean, secure
|
6 |
Requires at least: 3.0
|
7 |
Tested up to: 3.2
|
8 |
+
Stable tag: 1.7
|
9 |
|
10 |
This plugin will lockdown WP Admin. It can hide wp-admin and wp-login as well as add HTTP auth to the login system. It can change the login URL.
|
11 |
|
25 |
3. Navigate to the "Lockdown WP" menu
|
26 |
|
27 |
== Frequently Asked Questions ==
|
28 |
+
= How can we add files to the whitelist to hide from the public eye? We want to have AJAX and use a custom file, but we can't because it hides it from the public. =
|
29 |
|
30 |
You can add a file using the 'no_check_files' filter. Use this:
|
31 |
<?php
|
40 |
|
41 |
Simple.
|
42 |
|
43 |
+
= How can I get back in if the plugin locked me out? =
|
44 |
|
45 |
You can create a .txt file named 'disable_auth.txt' in your wp-content/plugins/lockdown-wp-admin/ folder (The file location would be /wp-content/plugins/lockdown-wp-admin/disable_auth.txt). We don't care about the content but that will disable the HTTP Auth and whatever was locking you out of your site.
|
46 |
|
72 |
* Added `admin-ajax.php` to the files that we permit to be access in wp-admin.
|
73 |
|
74 |
= 1.6 =
|
75 |
+
* Added way to get back into WP-ADMIN if locked out (See the FAQ)
|
76 |
+
|
77 |
+
= 1.7 =
|
78 |
+
* Removed the stats that were collected to that we could understand the issues that users were having with the plugin.
|