Pranshtech Solutions Private Limited

<p>TotalWeb offers a multi-layered approach to WordPress security, combining advanced protection mechanisms with an intuitive administrative interface. From real-time monitoring to proactive threat detection and prevention, TotalWeb empowers website administrators to maintain a secure online presence.</p>
<h3>Features</h3>
<h3>1. Login Security</h3>
<ul>
<li><strong>Login Attempt Tracking:</strong> Monitors and logs all login attempts, both successful and failed, including IP addresses and usernames.</li>
<li><strong>Two-Factor Authentication (2FA):</strong> Enhances login security using TOTP-based 2FA with WooCommerce support.</li>
<li><strong>IP and User Lockouts:</strong> Automatically locks IP addresses and users after a configurable number of failed login attempts.</li>
<li><strong>Login Log Management:</strong> View, filter, bulk delete, and export login attempt logs to CSV.</li>
</ul>
<h3>2. CAPTCHA Integration</h3>
<ul>
<li><strong>Multi-form CAPTCHA Protection:</strong> Adds CAPTCHA to:
<ul>
<li>Login Form  </li>
<li>Registration Form  </li>
<li>Lost Password Form  </li>
<li>Reset Password Form  </li>
<li>Comment Form  </li>
<li>WooCommerce Forms  </li>
</ul>
</li>
<li><strong>Supported CAPTCHA Types:</strong> reCAPTCHA v2, reCAPTCHA v3, hCaptcha, and Math CAPTCHA.</li>
<li><strong>Contact Form 7 Integration:</strong> Seamlessly injects CAPTCHA into CF7 forms.</li>
</ul>
<h3>3. File and Database Security</h3>
<ul>
<li><strong>Comprehensive File Scanning:</strong> Scans core files, plugins, and themes for modifications, new files, and deletions.</li>
<li><strong>Scheduled & On-Demand Scans:</strong> Run daily scheduled scans or manual scans anytime.</li>
<li><strong>Customizable Monitoring:</strong> Configure file types, exclusions, and email alerts.</li>
<li><strong>REST API Integration:</strong> Initiate scans and check status programmatically.</li>
<li><strong>MD5 Hash Verification:</strong> Detects unauthorized file changes.</li>
<li><strong>Database Backup & Restore:</strong> Perform manual or automated backups and restore previous versions.</li>
<li><strong>Database Prefix Change:</strong> Enhances security by changing the WP database prefix.</li>
<li><strong>SQL Injection Protection:</strong> Blocks suspicious queries and monitors DB activity.</li>
<li><strong>Query Monitoring:</strong> Detects and blocks suspicious SQL patterns.</li>
<li><strong>WordPress Hardening:</strong> Disable insecure WP features such as:
<ul>
<li>File Editor  </li>
<li>Unfiltered HTML (non-admins)  </li>
<li>XML-RPC  </li>
<li>Force SSL  </li>
<li>Hide WP version  </li>
<li>Block PHP execution in uploads  </li>
<li>Block dangerous file types  </li>
<li>Protect sensitive files (e.g., wp-config.php, .htaccess)</li>
</ul>
</li>
<li><strong>REST API Controls:</strong> Manage security settings and logs via API.</li>
</ul>
<h3>4. Malware Scanner</h3>
<ul>
<li><strong>Malicious Code Detection:</strong> Scans core, themes, plugins, and uploads for malware signatures.</li>
<li><strong>Manual & Scheduled Scans:</strong> Flexible scanning options.</li>
<li><strong>Issue Tracking:</strong> Detects modified, missing, unknown, and infected files.</li>
<li><strong>Email Reports:</strong> Sends alerts when malware is detected.</li>
</ul>
<h3>5. Firewall</h3>
<ul>
<li><strong>Web Application Firewall (WAF):</strong> Supports custom regex rules and ModSecurity CRS patterns.</li>
<li><strong>IP Blacklist/Whitelist:</strong> Block malicious IPs or allow trusted ones.</li>
<li><strong>Geo-Blocking:</strong> Restrict access by country.</li>
<li><strong>Rate Limiting & DDoS Protection:</strong> Limits requests per IP.</li>
<li><strong>Comment Spam IP Monitoring:</strong> Auto-blocks frequent spam IPs.</li>
<li><strong>Bad Bot Protection:</strong> Blocks known scrapers and bots.</li>
<li><strong>Smart 404 Blocking:</strong> Blocks IPs generating excessive 404 errors.</li>
<li><strong>General Firewall Options:</strong>
<ul>
<li>Disable RSS/ATOM feeds  </li>
<li>Block proxy comment submissions  </li>
<li>Advanced string filtering  </li>
<li>Enable 6G Firewall rules  </li>
<li>Block unauthorized REST requests  </li>
<li>Block blank user-agent or referrer POST requests  </li>
</ul>
</li>
</ul>
<h3>6. Redirects</h3>
<ul>
<li><strong>Custom 301 Redirects:</strong> Manage permanent redirect rules.</li>
<li><strong>Admin Interface:</strong> Add, edit, and delete redirects easily.</li>
<li><strong>URL Validation:</strong> Prevents duplicates and formatting issues.</li>
</ul>
<h3>7. Security Hardening</h3>
<ul>
<li><strong>HTTP Security Headers:</strong> Configure:
<ul>
<li>HSTS  </li>
<li>X-Frame-Options  </li>
<li>Content Security Policy (CSP)  </li>
<li>Referrer-Policy  </li>
</ul>
</li>
<li><strong>Role-Based Access Restrictions:</strong> Limit access to specific plugin features.</li>
<li><strong>One-Click Setup Wizard:</strong> Apply recommended hardening automatically.</li>
</ul>
<h3>8. Audit Logging</h3>
<ul>
<li><strong>Logs:</strong>
<ul>
<li>Logins (success/failure)</li>
<li>User profile changes</li>
<li>Role/capability changes</li>
<li>Plugin/theme activation/deactivation/updates</li>
<li>Theme switches</li>
</ul>
</li>
<li>Daily summaries.</li>
<li>Email alerts for important events.</li>
<li>Dashboard widget with recent events.</li>
<li>REST API access to logs.</li>
</ul>


TotalWeb – Security, Firewall & Malware Scanner

TotalWeb strengthens your site security with malware defense, brute-force protection, firewall rules, and smart hardening controls.

Ben Treder

<p><strong>Secure Login Shield</strong> helps you lock down your WordPress login page.<br />
By default, WordPress exposes <code>/wp-login.php</code> and <code>/wp-admin/</code>. Bots hammer these URLs every day.</p>
<p>This plugin gives you a <strong>private login slug</strong> (e.g. <code>/dragon-lair</code>) and hides the default login endpoint:</p>
<ul>
<li>Defaults to <code>/wp-login.php</code> until you change it.</li>
<li>Once changed, <strong>only your custom slug</strong> works.</li>
<li>Direct access to <code>/wp-login.php</code> shows a <strong>404 Not Found</strong> (stealth mode).</li>
<li>Logged-out visitors hitting <code>/wp-admin/</code> are <strong>redirected to the homepage</strong>.</li>
<li>Deactivate the plugin <span aria-hidden="true" class="wp-exclude-emoji">→</span> everything reverts to normal.</li>
</ul>
<p>Made with ❤️ by <a href="https://BenTreder.com" rel="nofollow ugc">Ben Treder</a></p>
<h3>Features</h3>
<ul>
<li><strong>Private login slug</strong> (e.g. <code>/dragon-lair</code>, <code>/control-center</code>, <code>/secret-gate</code>)</li>
<li><strong>Stealth 404 protection</strong>: Bots hitting <code>/wp-login.php</code> see “Not Found”</li>
<li><strong>Homepage redirect</strong>: <code>/wp-admin/</code> (logged out) <span aria-hidden="true" class="wp-exclude-emoji">→</span> homepage</li>
<li><strong>Easy settings page</strong> under Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Secure Login Shield</li>
<li><strong>Safe activation/deactivation</strong>: no core hacks, auto-reverts when disabled</li>
</ul>
<h3>Contribute & Support</h3>
<ul>
<li>Website: <a href="https://BenTreder.com" rel="nofollow ugc">BenTreder.com</a>  </li>
<li>Author: <a href="https://profiles.wordpress.org/bentreder/" rel="nofollow ugc">Ben Treder</a>  </li>
<li>Issues & Feature Requests: Please open a ticket on <a href="https://BenTreder.com" rel="nofollow ugc">BenTreder.com</a>  </li>
<li>Like this plugin? ⭐ Leave a review and help spread the word!  </li>
<li>☕ Support development: <a href="https://www.buymeacoffee.com/bentreder" rel="nofollow ugc">Buy Me a Coffee</a></li>
</ul>


Secure Login Shield

Create a private login URL and hide /wp-login.php with stealth 404s. Logged-out /wp-admin/ visits redirect to your homepage.

TotalWeb – Security, Firewall & Malware Scanner vs Secure Login Shield