Vladimir Marusic

<p>Maroon Horizon Smart Firewall is built for practical WordPress protection: block bad traffic, scan for malware, quarantine suspicious files, and reduce attack surface — without sending your site files off-server.</p>
<p>Advanced Security Check (Quick Scan) gives you an easy-to-understand Overall Security Rating, plus clear details and explanations for each check so you can quickly see what to improve and raise your security level.</p>
<p>This WordPress.org (FREE) build is fully functional for the FREE feature set and is designed to run locally for those features. Advanced capabilities are provided by a separate commercial PRO plugin (not included in this WordPress.org build).</p>
<p>Outbound network requests (if any) are disclosed under “External Services” and “Privacy”.</p>
<h4>What you get in the FREE plugin (local-only)</h4>
<ul>
<li>Advanced Security Check (Quick Scan) with an Overall Security Rating and easy-to-follow explanations so you can improve your security level step by step.</li>
<li>Manual IP blocking and IP management.</li>
<li>Security patch toggles for common hardening actions.</li>
<li>Malware scanning of uploads and theme directories using local pattern detection (no external signatures).</li>
<li>Quarantine management (restore / delete quarantined files).</li>
<li>Quick file integrity checks (where supported in the FREE workflow).</li>
</ul>
<h4>Local-first design (privacy & control)</h4>
<ul>
<li>Malware scans run on your server.</li>
<li>Scanned file contents are not uploaded by the plugin.</li>
<li>External requests (if any) are limited and disclosed below.</li>
</ul>
<h4>Who it’s for</h4>
<ul>
<li>Site owners who want simple, practical protection without complex configuration.</li>
<li>Agencies and developers who need a clean hardening + scanning toolkit.</li>
<li>Anyone who wants a transparent FREE build, with an optional PRO upgrade path.</li>
</ul>
<h4>PRO features (separate commercial plugin, optional)</h4>
<ul>
<li>AI-Powered Threat Feed (encrypted subnet feed) and automatic sync.</li>
<li>Real-Time AI Threat Detection (AI model signatures).</li>
<li>AI-Powered Deep Scan and scheduled email reports.</li>
</ul>
<h4>Commercial PRO plugin</h4>
<p>The PRO edition is a separate commercial plugin (not included in this WordPress.org build).<br />
Learn more: <a href="https://mh.ie/maroon-horizon-smart-firewall/" rel="nofollow ugc">https://mh.ie/maroon-horizon-smart-firewall/</a></p>
<h3>External Services</h3>
<p>This plugin may perform outbound network requests in the following cases:</p>
<p>1) WordPress.org Core Checksums API (FREE: Core Integrity Scan)<br />
* Service provider: WordPress.org<br />
* Endpoint: https://api.wordpress.org/core/checksums/1.0/<br />
* When: Only when you manually run the Core Integrity Scan from Maroon Horizon -> Scanner.<br />
* Data sent: WordPress version and locale via URL query parameters. Your server IP address is inherently shared as part of the HTTPS request.<br />
* Data received: Official JSON containing WordPress core file checksums, used to verify your local core files. No site files or content are uploaded.<br />
* Privacy: https://wordpress.org/about/privacy/</p>
<p>2) Freemius (optional: licensing, updates, opt-in telemetry)<br />
* Service provider: Freemius (freemius.com)<br />
* When: Only if you opt in to Freemius (for example, to manage licensing and receive updates).<br />
* Data sent: Technical information required for licensing and updates (and, if you opt in, diagnostic/usage metadata), as described by Freemius.<br />
* Data received: License status and update metadata needed to deliver plugin updates.<br />
* Terms: https://freemius.com/terms/<br />
* Privacy: https://freemius.com/privacy/</p>
<p>3) Maroon Horizon service (mh.ie) (PRO only: encrypted threat-feed / AI signature bundles)<br />
* Service provider: Maroon Horizon Ltd – <a href="https://mh.ie" rel="nofollow ugc">https://mh.ie</a><br />
* When: Only in the separate PRO plugin, when you use PRO features that require server-side data (e.g., Threat Feed sync / AI signature updates).<br />
* Data sent: Site URL, install ID, product/plan identifiers, license identifiers/keys, plugin/WP/PHP versions, plus standard HTTPS request metadata (including your server IP).<br />
* Data received: A JSON response containing metadata and a time-limited download URL, followed by encrypted bundles used by the PRO engine. No site files or content are uploaded.<br />
* Terms: https://mh.ie/terms<br />
* Privacy: https://mh.ie/privacy-policy</p>
<h3>Privacy</h3>
<p>Maroon Horizon Smart Firewall is designed to minimize data sharing.</p>
<ul>
<li>Most FREE features run locally and do not transmit your site content.</li>
<li>Malware scanning runs locally on your server; scanned file contents are not uploaded by the plugin.</li>
<li>Any outbound requests (and the data exchanged) are disclosed in the “External Services” section above.</li>
<li>PRO-only services are not included in this WordPress.org build.</li>
</ul>


Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking

Firewall, malware scan & IP blocking for WordPress, with Quick Scan Overall Security Rating, hardening, quarantine and integrity checks. PRO adds AI.

Carrero

<p>ES Football Bypass for Cloudflare is a WordPress plugin created by David Carrero Fernandez-Baillo to help Spanish website owners protect their legitimate sites from collateral damage caused by mass IP blocks ordered during football matches. The project is open source (GPLv2) and available on GitHub: https://github.com/dcarrero/cf-football-bypass</p>
<p>The plugin automatically monitors football events in Spain by querying hayahora.futbol and, based on the result, manages Cloudflare DNS records to toggle between Proxied and DNS Only modes. This prevents legitimate visitors from being affected by judicial blocks targeting pirate football streaming.</p>
<h4>The Problem</h4>
<p>In Spain, during football matches, mass IP blocks are enforced by judicial orders to combat pirate streaming. These blocks also affect legitimate websites that have nothing to do with football, causing traffic and revenue losses.</p>
<h4>The Solution</h4>
<p>When football is detected:<br />
– Automatically disables the Cloudflare proxy for selected DNS records<br />
– Your website switches to DNS Only mode, avoiding potentially blocked Cloudflare IPs<br />
– After the configured cooldown period, automatically re-enables the Cloudflare proxy</p>
<h4>Key Features</h4>
<p>Full Automation<br />
– Automatic monitoring every X minutes (configurable 5-60 min)<br />
– Automatic bypass activation/deactivation<br />
– Integrated WordPress cron system</p>
<p>Dual Cloudflare Authentication Support<br />
– Global API Key (traditional)<br />
– API Token with specific permissions (more secure)</p>
<p>Granular Control<br />
– Specific DNS record selection (A, AAAA, and CNAME)<br />
– Configurable bypass duration (60-600 minutes)<br />
– Customizable cooldown interval after disabling Cloudflare<br />
– Manual control for special cases</p>
<p>Informative Dashboard<br />
– Real-time football status<br />
– Last check performed<br />
– Bypass status (active/inactive)</p>
<p>Additional Tools<br />
– Cloudflare connection test button<br />
– Manual football status check<br />
– Manual activation/deactivation buttons<br />
– Detailed logging for debugging and auditing<br />
– Protected endpoint for external cron</p>
<h3>External Services</h3>
<p>This plugin connects to the following external services:</p>
<h4>hayahora.futbol</h4>
<p>The plugin periodically queries the endpoint https://hayahora.futbol/estado/data.json to check whether there are active IP blocks during football events in Spain. This query runs automatically based on the configured cron interval (default: every 15 minutes) and can also be triggered manually from the admin panel.<br />
– Data sent: An HTTP GET request with the site’s home URL in the User-Agent header. No personal or visitor data is transmitted.<br />
– URL: https://hayahora.futbol/<br />
– About the service and privacy: https://hayahora.futbol/#sobre-los-bloqueos<br />
– Terms of use: The service is free, open source, and does not collect personal data from plugin users or their visitors.</p>
<h4>Cloudflare API</h4>
<p>The plugin uses the official Cloudflare API (https://api.cloudflare.com/client/v4/) to read DNS records and toggle the proxy status (Proxied/DNS Only) for selected records. It requires API credentials that you provide in the plugin settings. Credentials are stored in the WordPress database and sent via HTTPS headers to Cloudflare.<br />
– Data sent: API credentials (in headers), DNS record modifications (record ID, type, name, content, proxied status).<br />
– URL: https://api.cloudflare.com/<br />
– Terms of Service: https://www.cloudflare.com/terms/<br />
– Privacy Policy: https://www.cloudflare.com/privacypolicy/</p>
<h4>Server IP Detection Services</h4>
<p>The plugin detects your server’s outgoing IP address (displayed in the Settings page) by querying three public services. Only the server’s own IP is returned; no personal or visitor data is transmitted. Results are cached for 1 hour.<br />
– https://api.ipify.org/ – Provided by ipify. Privacy Policy: https://www.ipify.org/<br />
– https://checkip.amazonaws.com/ – Provided by Amazon Web Services. Privacy Policy: https://aws.amazon.com/privacy/<br />
– https://icanhazip.com/ – Provided by Cloudflare. Privacy Policy: https://www.cloudflare.com/privacypolicy/</p>
<h4>Affiliate Links</h4>
<p>The plugin’s operation page includes affiliate links clearly marked with “(aff)” to VPN services and security tools. These links are optional and do not affect the plugin’s functionality.</p>
<h3>Cron and Automation</h3>
<h4>How does the cron system work?</h4>
<p>The plugin uses WordPress internal cron (wp_cron) which runs when there are visits to the website. This is usually sufficient for most sites.</p>
<h4>What if my site has low traffic and cron doesn’t run regularly?</h4>
<p>Go to Settings > ES Football Bypass for Cloudflare and copy the token from the “External cron” section. With that token you can set up a real server cron:</p>
<p>*/15 * * * * curl -s “https://yourdomain.com/wp-cron.php?cfbcolorvivo_cron=1&token=YOUR_TOKEN_HERE” > /dev/null 2>&1</p>
<p>You can regenerate the token by clearing the field and saving settings (a new one is generated). This endpoint only runs the plugin check, without depending on visits.</p>
<h4>What is the “Cooldown after disabling Cloudflare”?</h4>
<p>This is the waiting time (default 60 minutes) that the plugin respects before checking if Cloudflare can be re-enabled after detecting a block. During this period, the proxy remains in “DNS Only” mode even if the JSON stops marking the domain, avoiding rapid activation/deactivation cycles.</p>
<h4>How do I verify that cron is working correctly?</h4>
<p>In the Operation tab, click “WP-Cron Diagnostics” to see the next execution and the result of the last check. You can also review the integrated logs.</p>
<h3>Logs and Auditing</h3>
<h4>Where can I see the action history?</h4>
<p>In the ES Football Bypass for Cloudflare > Logs menu. It shows the latest automatic executions (internal or external cron) and manual actions with date, detail, and user.</p>
<h4>Can I disable logging?</h4>
<p>Yes. In Settings > ES Football Bypass for Cloudflare you can disable logging or adjust retention days (minimum 1). Logs are stored in the uploads directory under <code>es-football-bypass-for-cloudflare/logs/</code> protected with .htaccess.</p>
<h4>How do I verify that cron is working correctly?</h4>
<p>You can check if it’s scheduled in Tools > Site Health > Info > Scheduled Events, looking for the ‘cfbcolorvivo_check_football_status’ event. You can also review WordPress error logs where the plugin records all its actions.</p>
<h3>Server Requirements</h3>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>PHP Extensions: curl, json</li>
<li>Permissions: Ability to make outbound HTTP requests</li>
<li>Cron: Functional WordPress cron system</li>
</ul>
<h3>Support</h3>
<ul>
<li>Author: David Carrero Fernandez-Baillo</li>
<li>Website: https://carrero.es</li>
<li>Contact: https://carrero.es/contacto/</li>
</ul>
<p>If you need help, send a direct message on X or use the contact form. Issues and improvements are also welcome in the repository: https://github.com/dcarrero/cf-football-bypass</p>
<p>This plugin was born from the real need to protect legitimate websites from the mass blocks affecting the Spanish digital industry during sporting events.</p>
<h3>Specific Use Cases</h3>
<p>High Traffic Sites<br />
– Allows selecting only critical records (www, root domain)<br />
– Keeps other services (mail, ftp, etc.) always proxied<br />
– Minimizes impact on CDN and cache</p>
<p>Sites with Multiple Subdomains<br />
– Granular control per subdomain<br />
– Different strategies for different services<br />
– Total configuration flexibility</p>
<p>Emergencies and Manual Override<br />
– Manual control buttons for special situations<br />
– Does not depend solely on automatic detection<br />
– Allows quick reaction to failures</p>
<h3>License</h3>
<p>GPLv2 or later. You are free to use, modify, and distribute this plugin under the terms of the GPL.</p>


ES Football Bypass for Cloudflare

Automatically manages Cloudflare configuration during football matches to avoid mass IP blocks affecting legitimate websites in Spain.

Maroon Horizon Smart Firewall – Malware Scanner & IP Blocking vs ES Football Bypass for Cloudflare