shawfactor

Asitha

<p>This plugin send the proper headers for full ssl security. For more information on what this is and why it is important visit: http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security</p>
<p>The options are preset to enable browsers to preload the HSTS directive but can be overwritten by filters which are clearly documented in the code.</p>
<p><strong>Did you find this plugin helpful? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/lh-hsts" rel="ugc">writing a review</a>.</strong></p>
<h3>To update the max-age settings, add the following code to your functions.php</h3>
<pre><code>add_filter('lh_hsts_max_age', 'modify_ls_hsts_max_age_func');

function modify_ls_hsts_max_age_func( $max_age ){
    return false;
}
    `

<h3>To update the subdomain settings, add the following code to your functions.php</h3>

</code></pre>
<p>add_filter(‘lh_hsts_subdomain’, ‘modify_ls_hsts_subdomain_func’);</p>
<p>function modify_ls_hsts_subdomain_func( $subdomain ){<br />
    return false;<br />
}<br />
    `</p>
<h3>To update the preload setting, add the following code to your functions.php</h3>
<pre><code>add_filter('lh_hsts_preload', 'modify_ls_hsts_preload_func');

function modify_ls_hsts_preload_func( $preload ){
    return false;
}
    `

<h3>To update the redirect setting, add the following code to your functions.php</h3>

</code></pre>
<p>add_filter(‘lh_hsts_redirect’, ‘modify_ls_hsts_redirect_func’);</p>
<p>function modify_ls_hsts_redirect_func( $redirect ){<br />
    return false;<br />
}<br />
    `</p>


LH HSTS

Using with WordPress 4.9.4 and can verify the correct header is being set. Thanks!

Works Splendidly

Not only does this not work - YOU CANNOT DISABLE OR REMOVE HSTS after this plugin!

I can't access my website anymore, because this 'author' made it impossible to remove or disable hsts - I disabled and removed the plugin, cleared cache, rebooted the server - HSTS is still on!!!!!!

completely broken

HSTS is HTTP Strict Transport Security, a means to enforce using SSL even if the user accesses the site through HTTP and not HTTPS.

Ebrahim Shafiei (EbraSha)

<p>Abdal Security Headers is a powerful WordPress plugin that enhances your website’s security through HTTP security headers. It provides an easy-to-use interface for managing security policies and protecting against common web vulnerabilities.</p>
<p><strong>Key Features:</strong></p>
<ul>
<li>Modern UI with iOS-style switches</li>
<li>Real-time CSP Header Preview</li>
<li>Automatic security header configuration</li>
<li>Protection against XSS attacks</li>
<li>Prevention of clickjacking attempts</li>
<li>MIME-type sniffing protection</li>
<li>Strict HTTPS enforcement</li>
<li>Full RTL support</li>
<li>Mobile-responsive interface</li>
</ul>
<p><strong>Security Headers Managed:</strong></p>
<ul>
<li>X-Frame-Options</li>
<li>X-XSS-Protection</li>
<li>X-Content-Type-Options</li>
<li>Strict-Transport-Security (HSTS)</li>
<li>Content-Security-Policy (CSP)</li>
<li>Referrer-Policy</li>
<li>Feature-Policy</li>
<li>Access-Control-Allow-Origin</li>
</ul>
<h3>Languages</h3>
<p>This plugin is available in the following languages:<br />
– English (en_US)<br />
– Persian (fa_IR)</p>
<h3>License</h3>
<p>This plugin is released under the <strong>GPLv2 or later</strong> License.<br />
License details: <a href="http://www.gnu.org/licenses/gpl-2.0.html" rel="nofollow ugc">http://www.gnu.org/licenses/gpl-2.0.html</a></p>


Abdal Security Headers

Enhance WordPress security with essential HTTP security headers, protecting against XSS, clickjacking, and other common web vulnerabilities.

LH HSTS vs Abdal Security Headers