youtag

<p>IP Vault lets you protect your WordPress backend – and any other part of your website – from non verified users.</p>
<p>IP Vault Firewall also preserves your server ressources and bandwidth by blocking hacking attempts before they reach your site.</p>
<h3>How does it work ?</h3>
<p>Requests to protected files and folders are redirected to the <em>Authentication Page</em>. IP Vault unlocks user’s IP addresses using a key<br />
that is emailed for authentication. Once users verify their account, they can access all restricted areas. Users are automatically verified on registration.</p>
<h3>What is protected ?</h3>
<p>Out-of-the box, IP Vault restricts access to <code>.php</code> and <code>.phtml</code> files, as well as <code>wp-admin</code> folder, which are frequently exploited by bad bots and hackers.<br />
You can choose which part of your site to protect. Need to make the whole website private ? No problem, just restrict access to <code>/</code>.</p>
<h3>The story behind this plugin</h3>
<p>In the past 20 years, I have been monitoring a few dozen client sites to prevent malicious access. I have also helped a great number of people to clean their website from malware.<br />
I noticed that even marginal WordPress sites or non-wordpress PHP based sites are constantly exposed to hacking attempts.</p>
<p>Almost all exploits I have seen work by either calling a vulnerable PHP script already on the server, by adding such a script or by injecting their own code into an existing script.</p>
<p>I have tried and tested quite a few security plugins. They can be quite complex to set up and to maintain. Some security plugins try to block access to vulnerable files by comparing requests to a blacklist.<br />
These tend to become quite large and need frequent updates to be efficient. Others use geo-blocking services to block requests from certain countries. However in my experience, hacking attempts can come from just about any location.</p>
<p>I thought there must be a better way using whitelists for verified users instead. And that’s how the idea for IP Vault was born.</p>
<h3>To Dos</h3>
<ul>
<li>add option to get auth code by SMS (requires users to register phone number)</li>
</ul>
<h3>I love this plugin. How can I contribute ?</h3>
<ul>
<li><a href="https://wordpress.org/support/plugin/ip-vault-wp-firewall/reviews/#new-post" rel="ugc">Rate plugin</a> and leave feedback on WordPress.org</li>
<li>Help resolve questions in support forums</li>
<li>Help with translations</li>
<li><a href="https://www.paypal.com/donate/?hosted_button_id=Y7VNAG4WC8YMC" rel="nofollow ugc">Donate</a></li>
</ul>
<h3>Disclaimer</h3>
<p>This plugin uses the following <strong>3rd Party services</strong> :</p>
<ul>
<li>
<p><a href="https://ip-api.com" rel="nofollow ugc">ip-api.com</a> – used to offer insights into IP addresses, namely country and city information. <a href="https://ip-api.com/docs/legal" rel="nofollow ugc">Terms and Policies</a></p>
</li>
<li>
<p><a href="https://www.ipify.org" rel="nofollow ugc">ipify.org</a> – used to map IPv6 addresses to IPv4. <a href="https://geo.ipify.org/terms-of-service" rel="nofollow ugc">Terms and Policies</a></p>
</li>
</ul>


Two-factor authentication (formerly IP Vault)

Protect your website against Brute Force Attacks and other malicious requests that have potential to jeopardise the website’s safety or hijacking your …

Lukas Juhas

Benchmark Studios

<p><strong>General Info & Features:</strong></p>
<ul>
<li>WooCommerce versions support – 2.2.0 and later</li>
<li>WordPress version support – 3.5 and later</li>
<li>Products under locked category are excluded from the main shop loop</li>
<li>Passwords are fully encrypted and saved as a cookie</li>
<li>Password cookie lasts for 30 minutes by default</li>
<li>Ability to customise password template by copying it in to woocommerce theme folder</li>
<li>No Ads</li>
<li>No Paid Upgrades</li>
<li>Regular updates and maintenance</li>
</ul>
<p>Having trouble? Please read FAQ first, if you need any assistance, contact us.</p>
<blockquote>
<p><strong>Development on GitHub</strong><br />
  The development of WooCommerce Category Locker <a href="https://github.com/benchmarkstudios/wc-category-locker" rel="nofollow ugc">takes place on GitHub</a>. Bugs and pull requests are welcomed there.</p>
</blockquote>
<h4>Hooks</h4>
<p>List of available actions and filters:</p>
<h4>Actions</h4>
<ul>
<li><strong>wcl_before_passform</strong> – runs before Password Form</li>
<li><strong>wcl_after_passform</strong> – runs after Password Form</li>
</ul>
<h4>Filters</h4>
<ul>
<li><strong>wcl_passform_classes</strong> – Password <code><form></code> classes</li>
<li><strong>wcl_passform_submit_label</strong> – Password form submit button label</li>
<li><strong>wcl_passform_submit_classes</strong> – Password form submit button classes</li>
<li><strong>wcl_passform_input_classes</strong> – Password form input classes</li>
<li><strong>wcl_passform_input_placeholder</strong> – Password form input placeholder</li>
<li><strong>wcl_passform_description</strong> – Password form description shown above input and submit button</li>
<li><strong>wcl_password_form</strong> – Entire form markup</li>
<li><strong>wcl_password_expires</strong> – Password expiry when entered (default 30min)</li>
</ul>


WooCommerce Category Locker

Adds ability to password lock each category the same way as Wordpress gives you ability to lock each post.

Two-factor authentication (formerly IP Vault) vs WooCommerce Category Locker