maheshsharmads

<p><strong>Dotsquares Custom Login URL & Security Suite</strong> helps secure your WordPress site by allowing you to change the default login URL and apply additional security layers — all from one beautifully designed dashboard.</p>
<h4>🔑 Login Security</h4>
<ul>
<li>Custom login slug — redirect wp-login.php to your own secret URL</li>
<li>Optionally hide wp-login.php (returns 404 for guests)</li>
<li>Optionally block wp-admin for non-logged-in users</li>
<li>Brute force protection with configurable lockout thresholds</li>
<li>Login honeypot trap (hidden field that catches bots)</li>
<li>Two-Factor Authentication (TOTP — works with Google Authenticator, Authy, etc.)</li>
<li>Weak username detection (blocks “admin”, “root”, “test”, etc.)</li>
<li>Force logout after inactivity (configurable timeout)</li>
<li>Manual approval for new user registrations</li>
<li>Prevent display name from matching username</li>
</ul>
<h4>🛡️ Firewall</h4>
<ul>
<li>Disable XML-RPC (common attack vector)</li>
<li>Block bad bots and fake user agents (40+ known bots)</li>
<li>Block POST requests with empty User-Agent headers</li>
<li>Rate limiting per IP address</li>
<li>IP blacklist and whitelist (supports CIDR ranges)</li>
<li>Geo-blocking by country code</li>
<li>Restrict REST API for non-logged-in users</li>
<li>Prevent user enumeration via ?author= scans</li>
</ul>
<h4>🔍 Malware & File Scanner</h4>
<ul>
<li>Deep scan of WordPress core, plugins, themes and uploads</li>
<li>40+ malware signature patterns (PHP shells, backdoors, crypto miners, pharma hacks, SEO spam injections)</li>
<li>Detects known web shells by filename (c99, r57, WSO, b374k, adminer, etc.)</li>
<li>WordPress core file integrity check (compares against official api.wordpress.org checksums)</li>
<li>Detects PHP files hidden inside the uploads folder</li>
<li>Suspicious code pattern detection (eval, exec, base64_decode combos, etc.)</li>
<li>File change detection using MD5 hash baseline</li>
<li>File permission scanner (755/644 standards)</li>
<li>.htaccess security rules generator</li>
</ul>
<h4>👥 User & Session Management</h4>
<ul>
<li>View and kill active user sessions</li>
<li>Session tracking with IP and user-agent logging</li>
<li>Manual user approval workflow</li>
</ul>
<h4>📊 Monitoring & Logs</h4>
<ul>
<li>Security event log (login, logout, failed attempts, plugin/theme changes)</li>
<li>IP blocking log with unblock controls</li>
<li>Real-time security score (A–F grade with per-check breakdown)</li>
</ul>
<h4>⚙️ Other Features</h4>
<ul>
<li>Maintenance mode with custom message</li>
<li>Database backup download</li>
<li>Email alerts for security events</li>
<li>Beautiful admin dashboard with quick-toggle switches</li>
</ul>
<h3>Important</h3>
<p>Hardening actions such as <strong>DB prefix change</strong> and <strong>wp-content rename</strong> are advanced operations.<br />
Always run these features on a <strong>staging environment</strong> and ensure you have a <strong>full backup</strong> before applying them on production.</p>


Dotsquares Custom Login URL & Security Suite

Change your WordPress login URL, design the login page, and enhance your site's security with built-in protection tools.

RSJoomla!

<p>The RSFirewall! WordPress plugin is the optimal solution for securing your website, helping you stay one step ahead of malicious users that wish to harm your website. The plugin is backed by a team of professionals with a long history in website security that are up to date with the latest known vulnerabilities and security updates.</p>
<p>RSFIREWALL FREE VERSION FEATURES:</p>
<ul>
<li>Free WordPress Firewall for your website</li>
<li>Active protections against local file and remote file inclusion attacks</li>
<li>SQL injection protections</li>
<li>ReCAPTCHA for registration, login and commenting forms</li>
<li>Filter uploaded files for possible malware and improper extensions</li>
<li>Active monitoring WordPress core files integrity</li>
<li>Active monitoring for your own files</li>
<li>XML-RPC blocking</li>
<li>REST API blocking with proper exceptions that you can define</li>
<li>Protect the wp-admin/ slug with an extra password</li>
<li>Change the wp-admin/ slug into a custom one</li>
<li>Disallow direct access to PHP files in (wp-content, wp-content/uploads, wp-includes) with proper exceptions that you can define</li>
<li>Receive email notifications on detected threats</li>
<li>Automatically block repeated offenders IP addresses</li>
<li>Perform a System check (WordPress and server configuration checks)</li>
<li>Disable the creation of new Administrator accounts</li>
</ul>
<p>RSFIREWALL PAID VERSION FEATURES:</p>
<ul>
<li>Two Factor Authentication</li>
<li>Country blocking</li>
<li>Convert email addresses to images</li>
<li>Protect forms from abusive IPs</li>
<li>File integrity check</li>
<li>Convert email addresses from plain text to images</li>
<li>More control over the system check</li>
<li>Whitelist blocked PHP files</li>
<li>Protect admin users from changes</li>
</ul>
<h3>3rd Party services</h3>
<p>RSFirewall! will compare the MD5 hash of files with the original ones from the WordPress installation package. If differences are found (ie files have been modified) RSFirewall! upon request can download the original files from the GitHub synchronised repository of WordPress:</p>
<p><a href="https://github.com/WordPress/WordPress/" rel="nofollow ugc">https://github.com/WordPress/WordPress/</a></p>
<p>All connections are made with <a href="https://codex.wordpress.org/Function_Reference/wp_remote_get" rel="nofollow ugc">wp_remote_get</a> and the following information will be sent along with the request:<br />
– WordPress version<br />
– WordPress user agent along with your WordPress website address<br />
– Your server’s IP address</p>


RSFirewall!

I'm the author of plugins and themes on envato for more than 10 years. experienced many malicious code incidents. i went looking for plugins to prevent and minimize the infection of malware, i was thinking to write security plugins but i found rsfirewall. It's so great, it completely meets our requirements. This is a plugin that deserves 100 stars.

This is the best security plugin.

Based on the success of the most popular firewall for Joomla!, RSFirewall! is now available to protect your WordPress website as well.

Dotsquares Custom Login URL & Security Suite vs RSFirewall!