Changeset 3305391
- Timestamp:
- 06/03/2025 01:36:54 AM (10 months ago)
- File:
-
- 1 edited
-
secuplug/trunk/readme.txt (modified) (6 diffs)
Legend:
- Unmodified
- Added
- Removed
-
secuplug/trunk/readme.txt
r3023815 r3305391 3 3 Tags: firewall, security, anti-spam, ssl, login, xml-rpc 4 4 Requires at least: 4.9 5 Tested up to: 6. 4.26 Stable tag: 1.4. 05 Tested up to: 6.8.1 6 Stable tag: 1.4.1 7 7 License: GPLv3 or later 8 8 License URI: http://www.gnu.org/licenses/gpl-3.0.html … … 12 12 13 13 == Description == 14 SecureFusion acts as a robust shield against all known attack types, including login attempts and DDoS attacks via XML-RPC.15 It not only enhances security but also significantly improves your site's performance. 16 By preventing the collection of sensitive information from your site, it neutralizes many attack vectors.17 This is a flawlesssolution for ensuring user safety and maintaining the speed of your site.14 SecureFusion acts as a robust shield against many common attack types, including login attempts and DDoS attacks via XML-RPC. 15 It not only enhances security but also significantly improves your site's performance. 16 By helping to prevent unauthorized access and collection of sensitive information from your site, it neutralizes many attack vectors. 17 This is an effective solution for ensuring user safety and maintaining the speed of your site. 18 18 19 Features 19 Features: 20 20 21 21 = XMLRPC = 22 SecureFusion aids in managing your critical XML-RPC services, often a prime target for WordPress hack attempts and spam comments. 23 The plugin allows you to selectively disable specific XML-RPC services, defending your site from XML-RPC attacks like spam comments without entirely disabling all XML-RPC services. 22 SecureFusion aids in managing your critical XML-RPC services, often a prime target for WordPress hack attempts and spam comments. 23 The plugin allows you to selectively disable specific XML-RPC services, defending your site from XML-RPC attacks like spam comments without entirely disabling all XML-RPC services. 24 24 However, be aware that blocking all XML-RPC requests may impact the interaction of certain applications and services with WordPress. 25 25 26 26 * XML-RPC FULL PROTECTION (Disable all XML-RPC) 27 This feature blocks all remote requests, offering an effective countermeasure against various remote attacks.27 This feature blocks all incoming XML-RPC requests, offering an effective countermeasure against various remote attacks. 28 28 Remember, this might impact certain functionalities that rely on XML-RPC. 29 29 30 30 * XML-RPC LOGIN PROTECTION 31 This feature denies remote login requests , providing an extra line of defense against brute force login attempts.31 This feature denies remote login requests made via XML-RPC, providing an extra line of defense against brute force login attempts. 32 32 33 33 * XML-RPC PINGBACK PROTECTION … … 38 38 39 39 = SSL = 40 SecureFusion facilitates SSL integration into your site, provided you have an SSL certificate purchased from any SSL dealer or acquired through a free SSL service like Cloudflare. 41 The plugin forces the redirection of selected zone URLs on your site to HTTPS/SSL. 40 SecureFusion facilitates SSL integration into your site, provided you have an SSL certificate purchased from any SSL dealer or acquired through a free SSL service like Cloudflare. 41 The plugin forces the redirection of selected zone URLs on your site to HTTPS/SSL. 42 42 Note that SSL certificates must always be valid and correctly configured; otherwise, users may face issues accessing the site. 43 43 44 44 * Enable HTTPS / SSL 45 Automatically encrypts sensitive data via SSL.45 Enforces the use of HTTPS/SSL across your site, ensuring that data is encrypted during transmission. 46 46 47 47 * Force HTTPS Login … … 55 55 56 56 = Login = 57 57 58 * Login Attempt Limit 58 59 Set the maximum number of login attempts and the waiting time after reaching this limit to prevent brute force attacks on your login page. … … 61 62 SecureFusion allows you to modify default login errors, making it harder for potential attackers to gather information. 62 63 63 * Change Admin ID64 This feature lets you change your admin ID, making it more difficult to guess user credentials rather than providing protection from SQL vulnerabilities as such.64 * Change Admin Username 65 This feature lets you change your administrator's username (e.g., the default 'admin' username), making it more difficult to guess user credentials. This provides an obscurity layer rather than direct protection from SQL vulnerabilities. (Note: This changes the username, not the numerical User ID). 65 66 66 67 * New Custom Login URL 67 This feature lets you change your login page URL name. 68 Be aware that any changes to a URL, especially when using SSL/HTTPS, require the SSL certificate to be correctly configuredto avoid potential issues.68 This feature lets you change your login page URL name. 69 Be aware that if your site uses SSL/HTTPS, ensure your overall SSL configuration is correct and all resources load securely after any URL changes to avoid potential issues. 69 70 70 71 = Firewall = 72 71 73 * Filter Bad Requests 72 74 The plugin helps secure your site against various attacks such as XSS, CSRF, and Code Injections. 73 75 74 76 * Disable Rest API 75 SecureFusion safeguards sensitive information from potential attackers by hiding it.77 SecureFusion helps safeguard sensitive information by allowing you to disable REST API endpoints, which can prevent them from being used by attackers for information disclosure or exploitation. 76 78 However, keep in mind that disabling the REST API can restrict the functionality of your WordPress site since some plugins and themes depend on it. 77 79 78 For complete information, please visit our website [the SecureFusion website](https:// codeplus.dev/securefusion).80 For complete information, please visit our website [the SecureFusion website](https://fyndsoft.com/securefusion). 79 81 80 82 == Installation == … … 95 97 96 98 == Changelog == 99 = 1.4.1 = 100 * Tested on the latest WordPress version 101 97 102 = 1.4.0 = 98 103 * Added: Updates default settings on activate
Note: See TracChangeset
for help on using the changeset viewer.