maheshsharmads

<p><strong>Dotsquares Custom Login URL & Security Suite</strong> helps secure your WordPress site by allowing you to change the default login URL and apply additional security layers — all from one beautifully designed dashboard.</p>
<h4>🔑 Login Security</h4>
<ul>
<li>Custom login slug — redirect wp-login.php to your own secret URL</li>
<li>Optionally hide wp-login.php (returns 404 for guests)</li>
<li>Optionally block wp-admin for non-logged-in users</li>
<li>Brute force protection with configurable lockout thresholds</li>
<li>Login honeypot trap (hidden field that catches bots)</li>
<li>Two-Factor Authentication (TOTP — works with Google Authenticator, Authy, etc.)</li>
<li>Weak username detection (blocks “admin”, “root”, “test”, etc.)</li>
<li>Force logout after inactivity (configurable timeout)</li>
<li>Manual approval for new user registrations</li>
<li>Prevent display name from matching username</li>
</ul>
<h4>🛡️ Firewall</h4>
<ul>
<li>Disable XML-RPC (common attack vector)</li>
<li>Block bad bots and fake user agents (40+ known bots)</li>
<li>Block POST requests with empty User-Agent headers</li>
<li>Rate limiting per IP address</li>
<li>IP blacklist and whitelist (supports CIDR ranges)</li>
<li>Geo-blocking by country code</li>
<li>Restrict REST API for non-logged-in users</li>
<li>Prevent user enumeration via ?author= scans</li>
</ul>
<h4>🔍 Malware & File Scanner</h4>
<ul>
<li>Deep scan of WordPress core, plugins, themes and uploads</li>
<li>40+ malware signature patterns (PHP shells, backdoors, crypto miners, pharma hacks, SEO spam injections)</li>
<li>Detects known web shells by filename (c99, r57, WSO, b374k, adminer, etc.)</li>
<li>WordPress core file integrity check (compares against official api.wordpress.org checksums)</li>
<li>Detects PHP files hidden inside the uploads folder</li>
<li>Suspicious code pattern detection (eval, exec, base64_decode combos, etc.)</li>
<li>File change detection using MD5 hash baseline</li>
<li>File permission scanner (755/644 standards)</li>
<li>.htaccess security rules generator</li>
</ul>
<h4>👥 User & Session Management</h4>
<ul>
<li>View and kill active user sessions</li>
<li>Session tracking with IP and user-agent logging</li>
<li>Manual user approval workflow</li>
</ul>
<h4>📊 Monitoring & Logs</h4>
<ul>
<li>Security event log (login, logout, failed attempts, plugin/theme changes)</li>
<li>IP blocking log with unblock controls</li>
<li>Real-time security score (A–F grade with per-check breakdown)</li>
</ul>
<h4>⚙️ Other Features</h4>
<ul>
<li>Maintenance mode with custom message</li>
<li>Database backup download</li>
<li>Email alerts for security events</li>
<li>Beautiful admin dashboard with quick-toggle switches</li>
</ul>
<h3>Important</h3>
<p>Hardening actions such as <strong>DB prefix change</strong> and <strong>wp-content rename</strong> are advanced operations.<br />
Always run these features on a <strong>staging environment</strong> and ensure you have a <strong>full backup</strong> before applying them on production.</p>


Dotsquares Custom Login URL & Security Suite

Change your WordPress login URL, design the login page, and enhance your site's security with built-in protection tools.

Marcello Ruoppolo

<p>Every day, thousands of WordPress sites are hacked. Most security plugins offer protection, but they come with a massive cost: they slow down your server with bloated features and complex settings.</p>
<p><strong>Protector is different.</strong> It is a lightweight, AI-ready security layer that turns your WordPress site into a digital fortress without compromising speed. Whether you are trying to recover a hacked site or proactively defend your business, Protector delivers enterprise-grade security that anyone can configure.</p>
<p>With our new <strong>1-Click Security Overview Dashboard</strong>, you can activate all recommended protections and block 98% of automated attacks in under 8 seconds.</p>
<p>📖 <strong><a href="https://kloxstudios.com/documentation/protector/" rel="nofollow ugc">Read the Official Documentation here</a></strong></p>
<h3>🦠 Malware Threat Scanner & Auto-Repair</h3>
<p>Don’t just find malware; destroy it. Our deep, recursive local scanner verifies your WordPress integrity without crashing your server:<br />
* <strong>Core Integrity Verification:</strong> Cross-references all Core files against the official WordPress.org checksums.<br />
* <strong>Advanced Pattern Detection:</strong> Detects suspicious code patterns (like <code>eval</code>, <code>base64_decode</code>, <code>shell_exec</code>) hidden in your files.<br />
* <strong>1-Click Auto-Repair:</strong> Found a modified core file? Click “Repair” and Protector will automatically fetch a clean, original version directly from the official WP SVN and overwrite the infected file.</p>
<h3>🛡️ Login Fortress (Brute-Force Protection)</h3>
<p>Hackers relentlessly target the <code>wp-login.php</code> page. We make it disappear.<br />
* <strong>Secret Login URL:</strong> Hide <code>wp-login.php</code> completely. Any unauthorized attempt will be instantly redirected to a custom URL of your choice.<br />
* <strong>Smart Honeypots:</strong> Inject invisible fields into your login and comment forms to trap and block spam/brute-force bots automatically.<br />
* <strong>Block Username Scanning:</strong> Prevent attackers from discovering your admin usernames via <code>?author=1</code> enumeration.</p>
<h3>🔒 1-Click Site Hardening</h3>
<p>Lock down common vulnerabilities instantly:<br />
* <strong>Security Headers:</strong> Protect against XSS, Clickjacking, and MIME-Sniffing attacks with a single toggle.<br />
* <strong>XML-RPC Control:</strong> Disable XML-RPC completely to eliminate one of the biggest brute-force attack vectors on WordPress.<br />
* <strong>Version Obfuscation:</strong> Hide your WordPress version from the source code so hackers can’t target known exploits.<br />
* <strong>Restrict REST API:</strong> Block public access to endpoints that expose sensitive user data.</p>
<h3>📊 Live Attack Log</h3>
<p>Peace of mind you can actually see. Monitor every blocked attack, triggered honeypot, and deleted malware in real-time straight from your dashboard.</p>
<h3>🚀 Upgrade to KloxStudios Pro</h3>
<p>Need absolute maximum power? Protector integrates seamlessly with the KloxStudios Cloud AI. Pro users unlock Cloud AI Malware Verification for 3rd-party plugins/themes, Automatic IP Lockouts, Instant Admin Login Alerts (Email & Webhook), and 2FA.</p>


Protector – Malware Removal, Firewall & Core Repair

Protect your WordPress. The ultimate lightweight security suite. Block brute-force attacks, auto-repair infected core files, hide your login URL, set  …

Dotsquares Custom Login URL & Security Suite vs Protector – Malware Removal, Firewall & Core Repair