Jakub Klapka

This plugin adds new status for posts (or pages/custom post types) called “Secured with link”. If you select this status, that specific post wouldn’t be accessible on its standard URL anymore, but you have to access it on URL with random token in it. This URL is displayed on post edit screen in administration.
<h4>Configuration</h4>
For now, there is no administration screen yet. To configure plugin, you can inject your changes to plugin configuration array from your theme or plugin. Just put this code into functions.php file in your theme:
<pre><code>add_filter( 'lumi.secure_post_with_link.config', function( $config ){
 $config[ 'allowed_post_types' ] = [ 'post', 'page' ];
 $config[ 'url_identifier' ] = 'sec';
 // ... Other $config variables
 return $config;
} );
</code></pre>
Preferably, don’t include lines with attributes, which you don’t want to change.
These are attributes (with defaults), which you can change this way:
<ul>
<li>
allowed_post_types ([ ‘post’ ]) List of post types, which should be affected by this plugin. Use array notation like: <code>[ 'post', 'page', 'custom_type' ]</code>.
</li>
<li>
secured_meta_name (‘_secured_with_link_token’) Name of meta, which stores post token. You can change that in case of conflicts with themes or other plugins.
</li>
<li>
url_identifier (‘s’) Part of URL before token, which identifies secured posts.
</li>
<li>
token_length (4) Length of random token. With default generator, length is in bytes!
</li>
<li>
use_openssl (true) If plugin should use cryptographically secure random generator, or less-secure PHP functions. (See below)
</li>
<li>
assets_url (Defaults to [plugin URL]/assets) URL for static assets (like Javascripts), in case, you want to use your assets for some reason.
</li>
<li>
translations_dir (Defaults to [Plugin path]/lang) You can change path, where plugin looks for translation files. If you want to translate plugin, you should not use this setting, but create standard translation in wp-content/languages folder.
</li>
</ul>
In case, you have changed any settings after plugin installation, deactivate and reactivate plugin, so all changes are correctly applied.
<h4>Compatibility</h4>
<ul>
<li>For now, you need to use WP URL Rewriting for plugin to work correctly</li>
<li>Plugin should work with PHP 5.4, but at least PHP 5.6 is highly recommended. I’m sorry, but I won’t support older, insecure and slow versions of PHP.</li>
<li>By default, plugin uses OpenSSL library to generate cryptographically secure random tokens. If your hosting provider don’t have OpenSSL set up, you can use configuration variable: <code>$config[ 'use_openssl' ] = false</code> to use less-secure method of token generating. This should still be secure enough for most use cases.</li>
</ul>
<h4>Planned features</h4>
<ul>
<li>Administration page</li>
<li>Regenerate token</li>
<li>Role management – users with privileges should be able to access post without token</li>
</ul>
<h4>Developers</h4>
Plugin is also hosted on <a href="https://github.com/jakub-klapka/wp-secure-post-with-link" rel="nofollow ugc">Github</a>.

Secure post with link

Adds new post status "Secured with Link". Posts with this status will be accessible only with randomly generated token in URL.

supersoju

sputala

dmatteson

A2 Hosting

A2BCool

Boosting performance and securing your WordPress site has never been easier with the A2 Optimized WP plugin from <a href="https://www.a2hosting.com/" rel="nofollow ugc">A2 Hosting</a>. Get customized desktop and mobile performance scores for your site, including:
<ul>
<li>Server speed (Time to First Byte)</li>
<li>Page load speed (Largest Contentful Paint)</li>
<li>User perception (First Contentful Paint)</li>
<li>Visual stability (Cumulative Layout Shift)</li>
<li>Website browser speed (First Input Delay)</li>
</ul>
Using these scores, A2 Optimized WP generates specific, personalized recommendations for improving your site:
<ul>
<li>Performance</li>
<li>Security</li>
<li>Best practices compliance</li>
</ul>
With just a few clicks you’ll give your WordPress site the boost it needs with stable, industry-proven optimizations and improvements.
<a href="https://patchstack.com/database/vdp/a2-optimized-wp/" rel="nofollow ugc">Vulnerability disclosure program</a>
<h4>Performance optimizations</h4>
Our plugin is optimized to work best in the A2 Hosting environment, so items marked with an asterisk (*) are only available for sites hosted at A2 Hosting. If you are not an A2 Hosting customer, <a href="https://www.a2hosting.com" rel="nofollow ugc">join today</a>!
Page caching 
* Allows site visitors to save copies of your web pages on their device or browser. When they return to your website in the future, your site files load faster. 
* This optimization improves Time to First Byte (TTFB) and reduces bandwidth usage.
Gzip compression 
* Turns on Gzip compression to make text files smaller. 
* This optimization improves Time to First Byte (TTFB) and reduces bandwidth usage.
Redis object caching (*) 
* Stores commonly used elements such as menus, widgets, and database sets in memory. 
* This optimization improves Time to First Byte (TTFB).
Minify HTML pages 
* Removes extra spaces, tabs, comments, and line breaks from HTML pages. 
* This optimization improves First Contentful Paint (FCP) and First Input Delay (FID).
Automatic database optimizations 
* Periodically cleans MySQL databases of expired transients (a type of cached data used in WordPress) as well as trashed and spam comments. Also optimizes database tables. 
* This optimization improves Time to First Byte (TTFB) for uncached pages.
Compress images on upload (*) 
* Automatically compresses images when they are uploaded to your site. 
* This optimization improves First Contentful Paint (FCP), Largest Contentful Paint (LCP), and First Input Delay (FID).
Turbo Web Hosting (*) 
*Takes advantage of A2 Hosting’s Turbo Web Hosting platform to provide faster serving of static files, pre-compiled .htaccess files for improved performance, PHP opcode caching, and more. 
*This optimization can improve multiple benchmarks.
Use system cron instead of WordPress cron (*) 
* Replaces the WordPress virtual “cron job” with a genuine, system-defined cron job. 
* This optimization reduces the load on WordPress and ensures scheduled tasks run at precise, correct intervals.
Minify inline CSS and JavaScript 
* Removes extra spaces, tabs, comments, and line breaks from inline CSS and JavaScript. 
* This optimization improves First Contentful Paint (FCP) and First Input Delay (FID).
Disable WooCommerce AJAX Cart Fragments 
* Disables WooCommerce AJAX Cart Fragments on your homepage and enables the “redirect to cart page” option. 
* This optimization improves WooCommerce performance.
<h4>Security optimizations</h4>
Our plugin is optimized to work best in the A2 Hosting environment, so items marked with an asterisk (*) are only available for sites hosted at A2 Hosting. If you are not an A2 Hosting customer, <a href="https://www.a2hosting.com" rel="nofollow ugc">join today</a>!
Lock editing of plugins and themes from wp-admin 
* Prevents misuse of built-in editing capabilities for the WordPress admin.
Change login URL (*) 
* Changes the login page URL from the default wp-login.php to a random URL. 
* Helps prevent bots from brute-force attacking your login page.
Add CAPTCHA for comments and login (*) 
* Adds a CAPTCHA to comment forms and login pages to deter bots from posting spam comments and running brute-force attacks..
Block unauthorized XML-RPC requests 
* Rejects XML-RPC requests except for whitelisted services, such as Jetpack.
Deny direct access to configuration files 
* Displays a “403 Forbidden” error when visitors or bots try to access WordPress configuration files.
<h4>Best practices recommendations</h4>
Regenerate wp-config salts 
* Generates new values for wp-config.php salts and security keys for increased security.
Recent post limit 
*Checks the number of recent posts per page, which should be less than 15 for most sites.
RSS post limit 
* Checks the number of posts in RSS feeds, which should be less than 20 for most sites.
Recent posts showing on home page 
* Checks whether the home page displays recent posts, and offers to use a static page instead for faster performance.
Permalink structure 
* Checks that the permalink structure is configured to fully optimize page caching and get additional SEO benefits.
Unused themes 
* Checks if there are any non-default, unused themes that should be deleted.
Inactive plugins 
* Checks if there are any inactive plugins that should be deleted.
Hosted with A2 Hosting 
* Checks if your site is hosted with <a href="https://www.a2hosting.com/" rel="nofollow ugc">A2 Hosting</a> for faster page load times and more optimizations.

A2 Optimized WP – Turbocharge and secure your WordPress site

Make your site faster and more secure with the click of a few buttons

Secure post with link vs A2 Optimized WP – Turbocharge and secure your WordPress site