Version Description
- Remove the password policy explanation link added in 0.26.0.
Download this release
Release Info
Developer | convissor |
Plugin | Login Security Solution |
Version | 0.27.0 |
Comparing to | |
See all releases |
Code changes from version 0.26.0 to 0.27.0
- login-security-solution.php +1 -2
- readme.txt +26 -28
login-security-solution.php
CHANGED
@@ -6,7 +6,7 @@
|
|
6 |
* Description: Requires very strong passwords, repels brute force login attacks, prevents login information disclosures, expires idle sessions, notifies admins of attacks and breaches, permits administrators to disable logins for maintenance or emergency reasons and reset all passwords.
|
7 |
*
|
8 |
* Plugin URI: http://wordpress.org/extend/plugins/login-security-solution/
|
9 |
-
* Version: 0.
|
10 |
* Author: Daniel Convissor
|
11 |
* Author URI: http://www.analysisandsolutions.com/
|
12 |
* License: GPLv2
|
@@ -642,7 +642,6 @@ class login_security_solution {
|
|
642 |
if ($original == $policy) {
|
643 |
$this->load_plugin_textdomain();
|
644 |
$translated = $this->hsc_utf8(sprintf(__("The password should either be: A) at least %d characters long and contain upper and lower case letters (except languages that only have one case) plus numbers and punctuation, or B) at least %d characters long. The password can not contain words related to you or this website.", self::ID), $this->options['pw_length'], $this->options['pw_complexity_exemption_length']));
|
645 |
-
$translated .= sprintf(' <a href="http://wordpress.org/extend/plugins/login-security-solution/other_notes/">%s</a>', $this->hsc_utf8(__("(Why is this necessary?)")));
|
646 |
}
|
647 |
|
648 |
return $translated;
|
6 |
* Description: Requires very strong passwords, repels brute force login attacks, prevents login information disclosures, expires idle sessions, notifies admins of attacks and breaches, permits administrators to disable logins for maintenance or emergency reasons and reset all passwords.
|
7 |
*
|
8 |
* Plugin URI: http://wordpress.org/extend/plugins/login-security-solution/
|
9 |
+
* Version: 0.27.0
|
10 |
* Author: Daniel Convissor
|
11 |
* Author URI: http://www.analysisandsolutions.com/
|
12 |
* License: GPLv2
|
642 |
if ($original == $policy) {
|
643 |
$this->load_plugin_textdomain();
|
644 |
$translated = $this->hsc_utf8(sprintf(__("The password should either be: A) at least %d characters long and contain upper and lower case letters (except languages that only have one case) plus numbers and punctuation, or B) at least %d characters long. The password can not contain words related to you or this website.", self::ID), $this->options['pw_length'], $this->options['pw_complexity_exemption_length']));
|
|
|
645 |
}
|
646 |
|
647 |
return $translated;
|
readme.txt
CHANGED
@@ -4,7 +4,7 @@ Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=danie
|
|
4 |
Tags: login, password, passwords, strength, strong, strong passwords, password strength, idle, timeout, maintenance, security, attack, hack, lock, lockdown, ban, brute force, brute, force, authentication, auth, cookie, users
|
5 |
Requires at least: 3.3
|
6 |
Tested up to: 3.4.1
|
7 |
-
Stable tag: 0.
|
8 |
|
9 |
Security against brute force attacks by tracking IP, name, password; requiring very strong passwords. Idle timeout. Maintenance mode lockdown.
|
10 |
|
@@ -111,6 +111,28 @@ conflicts during program execution. Please read the FAQ!
|
|
111 |
* Français, français (French, France) (fr_FR) by [mermouy](http://wordpress.org/support/profile/mermouy)
|
112 |
|
113 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
114 |
= Securing Your WordPress Site is Important =
|
115 |
|
116 |
You're probably thinking "There's nothing valuable on my website. No one
|
@@ -322,6 +344,9 @@ implementation, use the script I made for generating all of the .mo files:
|
|
322 |
|
323 |
== Changelog ==
|
324 |
|
|
|
|
|
|
|
325 |
= 0.26.0 =
|
326 |
* Put a link in the password policy to an explanation of why it's necessary.
|
327 |
|
@@ -500,33 +525,6 @@ problems under PHP 5.4.
|
|
500 |
|
501 |
== Other Notes ==
|
502 |
|
503 |
-
= Why Strong, Unique Passwords Are Important =
|
504 |
-
|
505 |
-
Yeah, creating, storing/remembering, and using a __different__, __strong__
|
506 |
-
password for each site you use is a hassle. _But it is absolutely
|
507 |
-
necessary._
|
508 |
-
|
509 |
-
Password lists get stolen on a regular basis from big name sites (like
|
510 |
-
Linkedin for example!). Criminals then have unlimited time to decode the
|
511 |
-
passwords. In general, 50% of those passwords are so weak they get figured
|
512 |
-
out in a matter of seconds. Plus there are computers on the Internet
|
513 |
-
dedicated to pounding the sites with login attempts, hoping to get lucky.
|
514 |
-
|
515 |
-
Many people use the same password for multiple sites. Once an attacker
|
516 |
-
figures out your password on one site, they'll try it on your accounts at
|
517 |
-
other sites. It gets ugly very fast.
|
518 |
-
|
519 |
-
But don't despair! There are good, free tools that make doing the right
|
520 |
-
thing a piece of cake. For example:
|
521 |
-
* [KeePassX](http://www.keepassx.org/)
|
522 |
-
* [KeePass](http://keepass.info/)
|
523 |
-
* [1Password](https://agilebits.com/onepassword)
|
524 |
-
|
525 |
-
And if you're wondering, "Who cares about this rinky-dink website?",
|
526 |
-
please read the "Securing Your WordPress Site is Important" section
|
527 |
-
at the bottom of [this plugin's description
|
528 |
-
page](http://wordpress.org/extend/plugins/login-security-solution/).
|
529 |
-
|
530 |
= Inspiration and References =
|
531 |
|
532 |
* Password Research
|
4 |
Tags: login, password, passwords, strength, strong, strong passwords, password strength, idle, timeout, maintenance, security, attack, hack, lock, lockdown, ban, brute force, brute, force, authentication, auth, cookie, users
|
5 |
Requires at least: 3.3
|
6 |
Tested up to: 3.4.1
|
7 |
+
Stable tag: 0.27.0
|
8 |
|
9 |
Security against brute force attacks by tracking IP, name, password; requiring very strong passwords. Idle timeout. Maintenance mode lockdown.
|
10 |
|
111 |
* Français, français (French, France) (fr_FR) by [mermouy](http://wordpress.org/support/profile/mermouy)
|
112 |
|
113 |
|
114 |
+
= Why Strong, Unique Passwords Are Important =
|
115 |
+
|
116 |
+
Yeah, creating, storing/remembering, and using a __different__, __strong__
|
117 |
+
password for each site you use is a hassle. _But it is absolutely
|
118 |
+
necessary._
|
119 |
+
|
120 |
+
Password lists get stolen on a regular basis from big name sites (like
|
121 |
+
Linkedin for example!). Criminals then have unlimited time to decode the
|
122 |
+
passwords. In general, 50% of those passwords are so weak they get figured
|
123 |
+
out in a matter of seconds. Plus there are computers on the Internet
|
124 |
+
dedicated to pounding the sites with login attempts, hoping to get lucky.
|
125 |
+
|
126 |
+
Many people use the same password for multiple sites. Once an attacker
|
127 |
+
figures out your password on one site, they'll try it on your accounts at
|
128 |
+
other sites. It gets ugly very fast.
|
129 |
+
|
130 |
+
But don't despair! There are good, free tools that make doing the right
|
131 |
+
thing a piece of cake. For example: [KeePassX](http://www.keepassx.org/),
|
132 |
+
[KeePass](http://keepass.info/),
|
133 |
+
or [1Password](https://agilebits.com/onepassword)
|
134 |
+
|
135 |
+
|
136 |
= Securing Your WordPress Site is Important =
|
137 |
|
138 |
You're probably thinking "There's nothing valuable on my website. No one
|
344 |
|
345 |
== Changelog ==
|
346 |
|
347 |
+
= 0.27.0 =
|
348 |
+
* Remove the password policy explanation link added in 0.26.0.
|
349 |
+
|
350 |
= 0.26.0 =
|
351 |
* Put a link in the password policy to an explanation of why it's necessary.
|
352 |
|
525 |
|
526 |
== Other Notes ==
|
527 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
528 |
= Inspiration and References =
|
529 |
|
530 |
* Password Research
|