sandipganava

<p><strong>Ganava Location Access Control</strong> is a premium-grade, lightweight security tool designed to give you total control over who visits your WordPress site. Whether you need to block specific regions for compliance, redirect users to localized pages, or protect your store from high-risk countries, this plugin provides the tools you need with a modern, intuitive interface.</p>
<p>Built with performance in mind, it integrates natively with <strong>Cloudflare Geolocation</strong> headers for zero-latency detection, falling back to reliable GeoIP services when needed.</p>
<h3>Key Benefits</h3>
<ul>
<li><strong>Precision Targeting</strong>: Don’t just block countries; target specific regions or cities for granular control.</li>
<li><strong>Modern UI</strong>: Manage your rules using a fast, React-powered administration dashboard.</li>
<li><strong>SEO Friendly</strong>: Built-in bot detection ensures that search engines like Google and Bing can still crawl your site while malicious traffic is blocked.</li>
<li><strong>WooCommerce Ready</strong>: Restrict product availability based on the shopper’s location.</li>
</ul>
<h3>Features</h3>
<ul>
<li><strong>Rule Management</strong>: Create unlimited geo rules with priority ordering.</li>
<li><strong>Targeting Modes</strong>:
<ul>
<li>Target specific pages, posts, or categories.</li>
<li>Entire site protection (Global Blocking).</li>
<li>URL path matching with wildcard support.</li>
</ul>
</li>
<li><strong>Geographic Criteria</strong>: Block or allow based on Country, Region, or City.</li>
<li><strong>Connection Filtering</strong>: Detect and block VPN, Proxy, or Tor traffic (requires API key).</li>
<li><strong>Multiple Actions</strong>:
<ul>
<li><strong>Block</strong>: Show a 403 Access Denied status.</li>
<li><strong>Redirect</strong>: Send users to a custom URL (perfect for localized marketing).</li>
<li><strong>Custom Message</strong>: Show a beautiful HTML message or a dedicated WordPress page.</li>
</ul>
</li>
<li><strong>Audit Logging</strong>: Track every block event with detailed visitor data (IP, Country, Time).</li>
<li><strong>Developer Friendly</strong>: Hooks and filters to extend functionality.</li>
</ul>
<h3>External services</h3>
<p>This plugin utilizes external services to provide accurate geolocation data and threat detection capabilities (VPN/Proxy/Tor detection). These services are only queried when necessary (e.g. if the user’s IP address cannot be resolved locally or via Cloudflare headers).</p>
<ol>
<li>
<p><strong>ProxyCheck.io</strong></p>
<ul>
<li><strong>Purpose</strong>: Used for high-accuracy geolocation and detecting whether a visitor is using a VPN, Proxy, or Tor network.</li>
<li><strong>Data Sent</strong>: The visitor’s IP address is sent to ProxyCheck.io upon request processing.</li>
<li><strong>Links</strong>: <a href="https://proxycheck.io/terms/" rel="nofollow ugc">Terms of Service</a> | <a href="https://proxycheck.io/privacy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
</li>
<li>
<p><strong>ip-api.com</strong></p>
<ul>
<li><strong>Purpose</strong>: Used as a fallback service for basic geolocation (Country, Region, City) if ProxyCheck.io is unavailable or unconfigured.</li>
<li><strong>Data Sent</strong>: The visitor’s IP address is sent to ip-api.com.</li>
<li><strong>Links</strong>: <a href="https://ip-api.com/docs/legal" rel="nofollow ugc">Terms of Service</a> | <a href="https://ip-api.com/docs/legal" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
</li>
</ol>


Ganava Location Access Control

Control your site access globally with precision. Block or redirect visitors based on their country, region, or city using Cloudflare headers or high- …

hupe13

<p>There are many ways to block unwanted access to your website. This plugin checks which user agent is accessing your website. If it is outdated, unwanted, or suspicious, access is blocked.</p>
<p>Every time your web browser makes a request to a website, it sends a HTTP Header called the “User Agent”. The User Agent string contains information about your web browser name, operating system, device type and lots of other useful bits of information.</p>
<p>The plugin sends with an API the User Agent string of every browser that accesses your website for the first time to <a href="https://api.whatismybrowser.com/api/v2/user_agent_parse" rel="nofollow ugc">https://api.whatismybrowser.com/api/v2/user_agent_parse</a> to obtain following information about the User Agent:</p>
<ul>
<li>Software Name & Version</li>
<li>Operating System Name & Version</li>
</ul>
<p>With this information, the plugin attempts to detect old and bad browsers and denies them access to your website.</p>
<h4>HowTo</h4>
<ul>
<li>Go to <a href="https://developers.whatismybrowser.com/api/pricing/" rel="nofollow ugc">What is my browser?</a> and sign up to the WhatIsMyBrowser.com API for a Basic (free) Application Plan.</li>
<li>Take care about the <a href="https://developers.whatismybrowser.com/api/about/legal/" rel="nofollow ugc">WhatIsMyBrowser.com API Terms and Conditions</a>.</li>
<li>You have a limit of 5000 hits / month for Parsing User Agent. That’s why the plugin manages a database table.</li>
<li>The user agent string of every browser that accesses your website for the first time is sent to this service, and the information is stored this table.</li>
</ul>
<h4>Functions</h4>
<ul>
<li>The plugin checks whether the browser is up to date; it does not check whether the requested page or post actually exists.</li>
<li>Browsers are blocked if the browser and/or system are outdated:
<ul>
<li>Default: Chrome, Edge and Chrome based browsers < 139, Firefox browsers < 140, Safari < 18, Samsung Browser < 28, Internet Explorer, Netscape (!)</li>
<li>Old systems are all Windows versions prior to Windows 10, MacOS prior to Catalina and Android versions < 10 and Symbian.</li>
</ul>
</li>
<li>It will be blocked also if “Software” contains “unknown” or is empty.</li>
<li>You can also set up other browsers.</li>
<li>Sometimes there are false positive, for example, if the browser is from Mastodon. In this case, you can exclude it from the check.</li>
<li>The plugin checks whether the crawlers really originate from Google, Bing, Yandex, Apple, Mojeek, Baidu, Seznam and others.</li>
<li>The plugin blocks browsers like Chrome, Firefox and other without <a href="https://developer.mozilla.org/en-US/docs/Glossary/Fetch_metadata_request_header" rel="nofollow ugc">Sec-Fetch headers</a> (Sec-Fetch-Site, Sec-Fetch-Mode, Sec-Fetch-Dest) and incorrect <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Client_hints" rel="nofollow ugc">Client hints</a> (Sec-CH-UA, Sec-CH-UA-Platform).</li>
</ul>
<h4>About robots.txt</h4>
<ul>
<li>You can configure some rewrite rules to provide a robots.txt file that can allow or deny crawling for a browser. If crawling is denied, access to your website will be blocked for that browser.</li>
</ul>
<h4>Logging</h4>
<ul>
<li>The logging can be very detailed. Please check the logs and the WIMB table regularly.</li>
</ul>


Block old browser versions and suspicious browsers

With the help of WhatIsMyBrowser the plugin detects old and bad browsers and denies them access. A special robots.txt denies crawling by bad bots.

Ganava Location Access Control vs Block old browser versions and suspicious browsers