silence

This is a plugin that allows http authentication to the rss feeds of blog.
The plugin is based on post “A test post for a short lived experiment” by Mark Down on: 
http://blog.samdevore.com/archives/2004/12/10/another-test-post/
To work on some sites that runs php as cgi like dreamhost hosted you can add to the htaccess file: 
 AddHandler application/x-httpd-php .php 
Tip from: http://codestacker.com/codes/15-activing-php-auth-on-dreamhost
Tips to work on some other hosted sites are on article “HTTP Authentication with PHP running 
as CGI/SuExec” from Best Host Ratings blog: 
http://www.besthostratings.com/articles/http-auth-php-cgi.html

Protect RSS

A plugin to protect rss feeds to only registered users with http authentication.

Ayesh Karunaratne

This plugin swaps out WordPress core’s password hashing mechanism with PHP 5.5’s <code>password_hash()</code> and its accompanying functions. By default, PHP uses bcrypt to hash the passwords. If available, this plugin will use modern Argon2 algorithm. The transition will be transparent.
<ul>
<li>A password salt will be generated using a Cryptographically Secure Pseudo-Random Number Generator (<code>CSPRNG</code>)</li>
<li>Password hashes are safe from dictionary attacks with rainbow tables or any other precomputed hash lists, because a secure salt is generated for each password.</li>
<li>The password hashing is iterated multiple times to provide a good resistance against brute-force attacks.</li>
<li>Password checks are made in a way that it mitigates time-attacks.</li>
<li>You do not have to reset passwords of all users. Passwords already hashed in the database will be rehashed automatically and transparently the next time the user logs in.</li>
<li>PHP might come up with newer password hashing algorithms, and they will be automatically supported without having to reset all the passwords.</li>
</ul>
This plugin was made initially because one of our applications used WordPress for authentication, but we needed to use an external system 
to verify the passwords directly from the database too. Since WordPress has its own password hashing algorithm, we decided to make this plugin to address that problem. 
With this plugin, passwords generated by both WordPress and other custom applications now use the PHP’s default <code>password_hash()</code> functions without compromising any of the applications’ security.
This plugin is designed to be as minimal and fast as possible, and can be considered a must-use for EVERY WordPress application given the minimal footprint of this plugin, and considering the importance of using a secure hashing algorithm for passwords.

PHP Native Password Hash

Makes WordPress use PHP's native password_hash() functions for portable, stronger, and time-attack safe bcrypt and Argon2 hashes.

Protect RSS vs PHP Native Password Hash