Det här tillägget har inte testats med någon av de 3 senaste huvudversionerna av WordPress. Det kanske inte längre underhålls och kan ha kompatibilitetsproblem när det används tillsammans med nyare versioner av WordPress.

Skytells Guard – All-In-One Security Pack

Beskrivning

A COMPREHENSIVE, EASY TO USE, STABLE AND WELL SUPPORTED WORDPRESS SECURITY PLUGIN

WordPress itself is a very secure platform. However, it helps to add some extra security and firewall to your site by using a security plugin that enforces a lot of good security practices.

The Skytells Guard plugin will take your website security to a whole new level.

This plugin is designed and written by experts and is easy to use and understand.

It reduces security risk by checking for vulnerabilities, and by implementing and enforcing the latest recommended WordPress security practices and techniques.

Skytells Guard also uses an unprecedented security points grading system to measure how well you are protecting your site based on the security features you have activated.

Our security and firewall rules are categorized into ”basic”, ”intermediate” and ”advanced”. This way you can apply the firewall rules progressively without breaking your site’s functionality.

The Skytells Guard plugin doesn’t slow down your site.

Below is a list of the security and firewall features offered in this plugin:

Face ID – Facial Recognition

  • The Ultimate Protection for your website, Your Face is your Secured Password.
  • Ability to Login with Skytells Enhanced AI FaceID with High-Level of Encryption
  • Face ID Adds Extra Layer of Protection, So Your Face is your 2nd Factor Authentication
  • Ability to Configure FaceID for each Account.

User Accounts Security

  • Detect if there is a user account which has the default ”admin” username and easily change the username to a value of your choice.
  • The plugin will also detect if you have any WordPress user accounts which have identical login and display names. Having account’s where display name is identical to login name is bad security practice because
    you are making it 50% easier for hackers because they already know the login name.
  • Password strength tool to allow you to create very strong passwords.
  • Stop user enumeration. So users/bots cannot discover user info via author permalink.

User Login Security

  • Protect against ”Brute Force Login Attack” with the Login Lockdown feature. Users with a certain IP address or range will be locked out of the system for a predetermined amount of time based on the configuration settings and you can also choose to be notified
    via email whenever somebody gets locked out due to too many login attempts.

  • As the administrator you can view a list of all locked out users which are displayed in an easily readable and navigable table which also allows you to unlock individual or bulk IP addresses at the click of a button.

  • Force logout of all users after a configurable time period
  • Monitor/View failed login attempts which show the user’s IP address, User ID/Username and Date/Time of the failed login attempt

  • Monitor/View the account activity of all user accounts on your system by keeping track of the username, IP address, login date/time, and logout date/time.

  • Ability to automatically lockout IP address ranges which attempt to login with an invalid username.
  • Ability to see a list of all the users who are currently logged into your site.
  • Allows you to specify one or more IP addresses in a special whitelist. The whitelisted IP addresses will have access to your WP login page.
  • Add captcha to WordPress Login form.
  • Add captcha to the forgot password form of your WP Login system.

User Registration Security

  • Enable manual approval of WordPress user accounts. If your site allows people to create their own accounts via the WordPress registration form, then you can minimize SPAM or bogus registrations by manually approving each registration.
  • Ability to add captcha to the WordPress’s user registration page to protect you from spam user registration.
  • Ability to add Honeypot to the WordPress’s user registration form to reduce registration attempts by robots.

Database Security

  • Easily set the default WP prefix to a value of your choice with the click of a button.
  • Schedule automatic backups and email notifications or make an instant DB backup whenever you want with one click.

File System Security

  • Identify files or folders which have permission settings which are not secure and set the permissions to the recommend secure values with click of a button.
  • Protect your PHP code by disabling file editing from the WordPress administration area.
  • Easily view and monitor all host system logs from a single menu page and stay informed of any issues or problems occurring on your server so you can address them quickly.
  • Prevent people from accessing the readme.html, license.txt and wp-config-sample.php files of your WordPress site.

htaccess and wp-config.php File Backup and Restore

  • Easily backup your original .htaccess and wp-config.php files in case you will need to use them to restore broken functionality.
  • Modify the contents of the currently active .htaccess or wp-config.php files from the admin dashboard with only a few clicks

Blacklist Functionality

  • Ban users by specifying IP addresses or use a wild card to specify IP ranges.
  • Ban users by specifying user agents.
  • Modify the URLs of wp-admin and other login pages

Firewall Functionality

This plugin allows you to easily add a lot of firewall protection to your site via htaccess file. An htaccess file is processed by your web server before any other code on your site.
So these firewall rules will stop malicious script(s) before it gets a chance to reach the WordPress code on your site.

  • Prevents SQL Injection & DDoS Attacks
  • Block & Unblock an IP automatically or manually
  • Access control facility.
  • Instantly activate a selection of firewall settings ranging from basic, intermediate and advanced.
  • Enable the famous ”5G Blacklist” Firewall rules courtesy of Perishable Press
  • Forbid proxy comment posting.
  • Block access to debug log file.
  • Disable trace and track.
  • Deny bad or malicious query strings.
  • Protect against Cross Site Scripting (XSS) by activating the comprehensive advanced character string filter.
    or malicious bots who do not have a special cookie in their browser. You (the site admin) will know how to set this special cookie and be able to log into your site.
  • WordPress PingBack Vulnerability Protection feature. This firewall feature allows the user to prohibit access to the xmlrpc.php file in order to protect against certain vulnerabilities in the pingback functionality. This is also helpful to block bots from constantly accessing the xmlrpc.php file and wasting your server resource.
  • Ability to block fake Googlebots from crawling your site.
  • Ability to prevent image hotlinking. Use this to prevent others from hotlinking your images.
  • Ability to log all 404 events on your site. You can also choose to automatically block IP addresses that are hitting too many 404s.
  • Ability to add custom rules to block access to various resources of your site.
  • Ability to Sync Rules with CloudFlare
  • Ability to Learn & Protect your WordPress Automatically by Skytells’s Enhanced AI

Brute force login attack prevention

  • Instantly block Brute Force Login Attacks via our special Cookie-Based Brute Force Login Prevention feature. This firewall functionality will block all login attempts from people and bots.
  • Ability to add a simple math captcha to the WordPress login form to fight against brute force login attacks.
  • Ability to hide admin login page. Rename your WordPress login page URL so that bots and hackers cannot access your real WordPress login URL. This feature allows you to change the default login page (wp-login.php) to something you configure.
  • Ability to use Login Honeypot which will helps reduce brute force login attempts by robots.

CloudFlare Integration

  • You can Integrate your CloudFlare Accounts with Skytells Guard
  • Ability to Sync Firewall Rules with CloudFlare
  • Ability to Sync Brute-Force Protection Rules with CloudFlare
  • Ability to Ban & Unban IP(s) directly from Skytells Guard
  • Ability to Sync & Analyze your WordPress’s Security Rules.
  • Ability to Inform CloudFlare to Block IP(s) Automatically when Skytells Guard detects an Attack!

WhoIs Lookup

  • Perform a WhoIs lookup of a suspicious host or IP address and get full details.

Security Scanner

  • The file change detection scanner can alert you if any files have changed in your WordPress system. You can then investigate and see if that was a legitimate change or some bad code was injected.
  • Database scanner feature can be used to scan your database tables. It will look for any common suspicious-looking strings, javascript and html code in some of the WordPress core tables.

Comment SPAM Security

  • Monitor the most active IP addresses which persistently produce the most SPAM comments and instantly block them with the click of a button.
  • Prevent comments from being submitted if it doesn’t originate from your domain (this should reduce some SPAM bot comment posting on your site).
  • Add a captcha to your wordpress comment form to add security against comment spam.
  • Automatically and permanently block IP addresses which have exceeded a certain number of comments labeled as SPAM.

Front-end Text Copy Protection

  • Ability to disable the right click, text selection and copy option for your front-end.

Regular updates and additions of new security features

  • WordPress Security is something that evolves over time. We will be updating the Skytells Guard plugin with new security features (and fixes if required) on a regular basis so you can rest assured that your site will be on the cutting edge of security protection techniques.

Works with Most Popular WordPress Plugins

  • It should work smoothly with most popular WordPress plugins.

Anti-Spam

  • Google reCAPTCHA v2 on Login Pages

Additional Features

  • Ability to remove the WordPress Generator Meta information from the HTML source of your site.
  • Ability to remove the WordPress Version information from the JS and CSS file includes of your site.
  • Ability to prevent people from accessing the readme.html, license.txt and wp-config-sample.php files
  • Ability to temporarily lock down the front end of your site from general visitors while you do various backend tasks (investigate security attacks, perform site upgrades, do maintenance work etc.)
  • Ability to export/import the security settings.
  • Prevent other sites from displaying your content via a frame or iframe.
  • CloudFlare Integration
  • More..

Plugin Support

  • If you have a question or problem with the Skytells Guard plugin, post it on the support forum and we will help you.
  • Or E-Mail us at support@skytells.org

Developers

  • If you are a developer and you need some extra hooks or filters for this plugin then let us know.
  • Skytells – https://www.skytells.org/

Translations

  • Skytells Guard plugin can be translated to any language.

Currently available translations:

  • English

Usage

Go to the settings menu after you activate the plugin and follow the instructions.

Requirements

  • PHP Version 5.5 to 7.2
  • openssl
  • Zip PHP Extension
  • FaceID Feature Requires SSL Certificate

Skärmdumpar

  • Dashboard UI - Simple & Easy to understand
  • Dashboard Widgets - Powerful Ajax Widgets to control the common tasks
  • Reports & Charts - Here you can see whats going on
  • Reports & Charts - Widgets
  • Smart Notifications
  • Skytells Guard Global- Here you can control everything, Every single module has it own settings page, and you can enable it or disable it from here.
  • Skytells Guard Settings - Other
  • The Firewall Module’s Settings
  • Other Settings for Firewall
  • Brute Force Protection Module
  • Face ID - The AI-Powered Facial Recognition for your WordPress
  • Skytells AV - Scanner
  • Skytells AV - History
  • Skytells AV - Scheduler
  • Skytells AV - Scan Details
  • Skytells AV - Automatic Fixer
  • Skytells MetaInfo Protection - Here you can remove WordPress version from tags
  • Exploits Detector - Here Skytells will analyze the plugins, Themes and WordPress core and fix exploits automatically.
  • Security Analysis - Analyzes your WP Security
  • Google reCAPTCHA v2 module
  • IP Blocking - As Easy as Powerful
  • IP Lookup - Get full information about the IP and locate it on map.
  • View an Attack details detected by the Firewall
  • View a recored login activity for an admin or user
  • FaceID Option on Profiles

Installation

To begin making your WordPress site more secure:

  1. Upload the ’skytells-guard.zip’ file from the Plugins->Add New page in the WordPress administration panel.
  2. Activate the plugin through the ’Plugins’ menu in WordPress
  3. Go to Settings menu under ‘Skytells Guard’ and start activating the security features of the plugin.

Vanliga frågor

Check the following page for F.A.Q:
Knowledge Base

Installation Instructions

To begin making your WordPress site more secure:

  1. Upload the ’skytells-guard.zip’ file from the Plugins->Add New page in the WordPress administration panel.
  2. Activate the plugin through the ’Plugins’ menu in WordPress
  3. Go to Settings menu under ‘Skytells Guard’ and start activating the security features of the plugin.
What is FaceID ?

FaceID is a powerful AI-Powered Facial Recognition Engine provided by Skytells, Inc. before Apple, This allows you to login with your face.

Will this plugin slow-down my website?

Not at all!

Can I exclude a script/css file?

Yes! You can exclude any script/css files by providing the file names in comma separated format.

Will this plugin cause any problem with WordPress update process?

Not at all! It will cause no problem with WordPress update process.

FAQs are not enough?

Check the following page for F.A.Q:
Knowledge Base

Recensioner

Läs 1 betyg

Bidragsgivare och utvecklare

”Skytells Guard – All-In-One Security Pack” är programvara med öppen källkod. Följande personer har bidragit till detta tillägg.

Ändringslogg

1.4.3

  • X-Pingback Attacks Protection Added
  • Security Fixes

1.4.2

  • Site Maintenance Control Added
  • Automatic Core Updater Added
  • Automatic Plugins Updater Added
  • Automatic Themes Updater Added
  • Firewall Rules Updated
  • FaceID Improvements
  • Core Fixes

1.4.1

  • New Security Options for FaceID Added
  • RSS Feed Security Layer Added
  • JSON-API v2 Security Layers Added
  • Performance Optimization
  • CloudBased AI Improvements
  • FaceID Improvements
  • Core Fixes

1.4.0

  • Advanced Security Rules Added
  • FaceID Rules Syncing Added
  • Brute Force Protection Improvements
  • Firewall Improvements
  • Anti-Bots Monitor Added
  • User Interface Improvements
  • Performance Optimization
  • Core fixes

1.3.3

  • Security Fixes
  • Core Updates
  • FaceID Updates

1.3.2

  • AI-Powered FaceID Added
  • Skytells AI Integration Added
  • Auto Remove Insecure WordPress Dummy Files Added
  • Security Score Widget Added
  • IP Blocking Extended to Support the whole Website
  • New Firewall Rules Added
  • Ability to Verify Logins with your Face
  • Ability to set up FaceID with more than one account
  • Notifications Optimized
  • JS & CSS Optimization
  • HTML E-Mail Notifications Fixed
  • Core Updates And Fixes

1.3.1

  • HTML Support of Notifications E-Mails
  • Widgets UI Fixes
  • Firewall Rules Fixes

1.3.0

  • Brand-new Firewall Features & Options Added
  • Brand-new Settings UI Added
  • Brand-new Reports & Charts Added
  • CloudFlare Integration Added
  • Smart IP Lookup Added
  • More E-Mail Notifications Added
  • Security News Widget Added
  • Content Protection Added
  • SweetAlerts Added
  • SweetModals Added
  • Ability to Sync Firewall Rules with CloudFlare
  • Ability to Sync Security Rules with Skytells’s Enhanced AI
  • Big UI Improvements
  • More DDoS Protection Rules Added
  • Firewall is now in sync with CloudFlare’s AI
  • IP Blocking is now in Sync with CloudFlare
  • Environmental Info Widget Added
  • Performance Optimization
  • jQuery Exception fixed
  • Oxygen UI Engine fixes
  • JS & CSS Optimization
  • Core fixes
  • Security Fixes

1.2.2

  • Brand-New Firewall Features Added
  • Activity Monitor Added
  • Quick Notifications Added
  • URLs Protection Added
  • Force SSL Option Added
  • UI Improvements
  • DDoS Protection Improvements
  • Firewall Improvements
  • Core fixes

1.2.1

  • Brand New Layout
  • Firewall Geographic Report Added
  • Firewall High Risk Countries Added
  • E-Mail Notifications Added
  • More Options Added
  • Core fixes
  • Performance fixes

1.2.0

  • Google reCAPTCHA v2 Added
  • Smart Notifications Added
  • Core fixes
  • Performance fixes.

1.1

  • Performance Fixes.
  • Assets Images Added.

1.0

  • The First release of Skytells Guard