lunexiait

Lunexia .htaccess Shield is a comprehensive security plugin that helps harden your website by automatically applying proven .htaccess security rules. The latest release includes a modern WordPress 7.0-ready admin interface, a polished dashboard, and premium workflow improvements for Firewall and Malware Scan access.
Key Features:
<ul>
<li>Redesigned Security Dashboard: Four separate protection score widgets for rule coverage, module coverage, malware scanning, and threat monitoring.</li>
<li>Premium Admin Tabs: Firewall and Malware Scan tabs now display premium badges like Advanced Settings.</li>
<li>Plugin Layout Centering: Admin screens are centered at 80% width for a clean, modern WordPress 7.0 experience.</li>
<li>Enterprise Protection Status Cards: View active/inactive protection modules such as bot protection, rate limiting, live traffic monitoring, and quarantine system status.</li>
<li>Security Statistics Panel: Track successful logins, failed logins, blocked IPs, pending approvals, and firewall protection status in one place.</li>
<li>Security Intelligence Dashboard: View malware detections, blocked attacks, IP reputation, and threat intelligence in a single admin experience.</li>
<li>One-Click Security Rules: Enable or disable security rules with a simple toggle interface.</li>
<li>Security Score: Visual protection score meter for instant status awareness.</li>
<li>Automatic .htaccess Management: Safely apply rules without manual editing.</li>
<li>Backup & Restore: Create backups before changes and restore if needed.</li>
<li>Admin Approval Workflow: Require admin approval for new Administrator/Editor accounts before login.</li>
<li>OTP Login Protection: Add one-time password verification for selected user roles.</li>
<li>Backend Access Protection: Restrict access to <code>wp-admin</code> and <code>wp-login.php</code> for blocked IPs.</li>
<li>Feature Preview: Preview recommended premium hardening features before enabling them.</li>
<li>System Status: Monitor your server’s security readiness.</li>
<li>Malware Scanner and Quarantine Manager: Premium scanner with quarantine controls, findings refresh, and scan actions.</li>
<li>WordPress 7.0 Compatible: Designed to look great in the new Modern admin theme.</li>
</ul>
Security Rules Included:
<ul>
<li>Disable directory browsing</li>
<li>Protect wp-config.php and .htaccess files</li>
<li>Block access to sensitive files</li>
<li>Disable XML-RPC for improved security</li>
<li>Prevent PHP execution in uploads folder</li>
<li>Malicious query string protection</li>
<li>Security headers (XSS, CSRF, HSTS, etc.)</li>
</ul>
Safe & Reliable: 
* Uses core functions for .htaccess manipulation 
* Creates automatic backups before changes 
* Checks file permissions before applying rules 
* Non-destructive – rules are wrapped in markers for easy removal
<h3>External Services</h3>
This plugin connects to external services as follows:
Google Sheets API Service 
This plugin uses the Google Sheets API (via Google Apps Script) to validate license keys when users activate a license. This is an optional feature and is only used when a user voluntarily attempts to activate a license key.
<ul>
<li>Purpose: Validates license key authenticity and domain binding</li>
<li>When it’s used: Only when users click “Activate License” in the plugin settings</li>
<li>What data is sent: License key and website domain name</li>
<li>Service provider: Google (Google Sheets / Google Apps Script)</li>
<li>Terms of Service: https://policies.google.com/terms</li>
<li>Privacy Policy: https://policies.google.com/privacy</li>
<li>Data retention: License validation data is stored only on the user’s Google Sheet, which they control</li>
</ul>
<h3>Support</h3>
For support, please visit the plugin forum or check the documentation.
<h3>License</h3>
This plugin is licensed under the GPLv2 or later.
<h3>Credits</h3>
Developed with security best practices in mind.

Lunexia .htaccess Shield

Professional website security hardening with IP blocking system by automatically applying common .htaccess security rules safely.

Ben Treder

Secure Login Shield helps you lock down your WordPress login page. 
By default, WordPress exposes <code>/wp-login.php</code> and <code>/wp-admin/</code>. Bots hammer these URLs every day.
This plugin gives you a private login slug (e.g. <code>/dragon-lair</code>) and hides the default login endpoint:
<ul>
<li>Defaults to <code>/wp-login.php</code> until you change it.</li>
<li>Once changed, only your custom slug works.</li>
<li>Direct access to <code>/wp-login.php</code> shows a 404 Not Found (stealth mode).</li>
<li>Logged-out visitors hitting <code>/wp-admin/</code> are redirected to the homepage.</li>
<li>Deactivate the plugin → everything reverts to normal.</li>
</ul>
Made with ❤️ by <a href="https://BenTreder.com" rel="nofollow ugc">Ben Treder</a>
<h3>Features</h3>
<ul>
<li>Private login slug (e.g. <code>/dragon-lair</code>, <code>/control-center</code>, <code>/secret-gate</code>)</li>
<li>Stealth 404 protection: Bots hitting <code>/wp-login.php</code> see “Not Found”</li>
<li>Homepage redirect: <code>/wp-admin/</code> (logged out) → homepage</li>
<li>Easy settings page under Settings → Secure Login Shield</li>
<li>Safe activation/deactivation: no core hacks, auto-reverts when disabled</li>
</ul>
<h3>Contribute & Support</h3>
<ul>
<li>Website: <a href="https://BenTreder.com" rel="nofollow ugc">BenTreder.com</a> </li>
<li>Author: <a href="https://profiles.wordpress.org/bentreder/" rel="nofollow ugc">Ben Treder</a> </li>
<li>Issues & Feature Requests: Please open a ticket on <a href="https://BenTreder.com" rel="nofollow ugc">BenTreder.com</a> </li>
<li>Like this plugin? ⭐ Leave a review and help spread the word! </li>
<li>☕ Support development: <a href="https://www.buymeacoffee.com/bentreder" rel="nofollow ugc">Buy Me a Coffee</a></li>
</ul>

Treder Secure Login Shield

Create a private login URL and hide /wp-login.php with stealth 404s. Logged-out /wp-admin/ visits redirect to your homepage.

Lunexia .htaccess Shield vs Treder Secure Login Shield