Luis

Vanguard Admin Protection & Notifications is a vital and strict security plugin for WordPress that shields your site against vulnerabilities, malicious plugins, and direct database access attempts to escalate privileges or create unauthorized administrator users.
MAIN FEATURES: 
* RESTRICTED ADMINISTRATORS: Delegate administrator access safely! Allow your team to manage plugins, themes, and content, while strictly blocking their ability to create or promote new administrators. 
* 6 Real-time protection levels against privilege escalation. 
* Strict WP-CLI blocking for user creation and updates. 
* Configurable Scan Frequency: Adjust the database integrity scan interval to 30 minutes, 1, 3, 6, 12, or 24 hours. 
* External Cron Support: Fully supports ultra-efficient database integrity scanning triggered by your server’s Cron via a secure, token-protected REST API endpoint. 
* Visual Scan Tracking: Real-time visibility of the last exact time the cron executed in your dashboard. 
* Monitoring and automatic degradation of unauthorized administrators. 
* Detailed audit log table with 90-day automatic retention and CSV export. 
* Periodic integrity verification of wp-config.php. 
* Prevention of unauthorized plugin deactivation and deletion.
<h3>Disclaimer</h3>
WordPress® is a registered trademark of the WordPress Foundation. This plugin, “Vanguard Admin Protection & Notifications”, is an independent software developed by @luisescoffie and is not affiliated with, sponsored by, endorsed by, or associated with the WordPress Foundation, Automattic Inc., or any of their products or services. The use of the “WordPress” name is for descriptive and compatibility purposes only.

Vanguard Admin Protection & Notifications

Advanced protection against unauthorized administrator creation, role changes, and direct database access.

Scott Reilly

This plugin records the IP address of the original post author when a post first gets created.
The admin listing of posts is amended with a new “Author IP” column that shows the IP address of the author who first saved the post.
The plugin is unable to provide IP address information for posts that were created prior to the use of this plugin.
Links: <a href="https://coffee2code.com/wp-plugins/post-author-ip/" rel="nofollow ugc">Plugin Homepage</a> | <a href="https://wordpress.org/plugins/post-author-ip/" rel="ugc">Plugin Directory Page</a> | <a href="https://github.com/coffee2code/post-author-ip/" rel="nofollow ugc">GitHub</a> | <a href="https://coffee2code.com" rel="nofollow ugc">Author Homepage</a>
<h3>Hooks</h3>
The plugin is further customizable via four filters. Typically, code making use of filters should ideally be put into a mu-plugin or site-specific plugin (which is beyond the scope of this readme to explain).
c2c_show_post_author_ip_column (filter)
The ‘c2c_show_post_author_ip_column’ filter allows you to determine if the post author IP column should appear in the admin post listing table. Your hooking function can be sent 1 argument:
Argument :
<ul>
<li>$show_column (bool) Should the column be shown? Default true.</li>
</ul>
Example:
<pre><code>/**
 * Don't show the post author IP column except to admins.
 *
 * @param bool $show_column Should the column be shown? Default true.
 * @return bool
 */
function post_author_ip_column_admin_only( $show ) {
 if ( ! current_user_can( 'manage_options' ) ) {
 $show = false;
 }
 return $show;
}
add_filter( 'c2c_show_post_author_ip_column', 'post_author_ip_column_admin_only' );
</code></pre>
c2c_get_post_author_ip (filter)
The ‘c2c_get_post_author_ip’ filter allows you to customize the value stored as the post author IP address. Your hooking function can be sent 2 arguments:
Arguments :
<ul>
<li>$ip (string) The post author IP address.</li>
<li>$post_id (int) The post ID.</li>
</ul>
Example:
<pre><code>/**
 * Store all IP addresses from local subnet IP addresses as the same IP address.
 *
 * @param string $ip The post author IP address.
 * @param int $post_id The post ID.
 * @return string
 */
function customize_post_author_ip( $ip, $post_id ) {
 if ( 0 === strpos( $ip, '192.168.' ) ) {
 $ip = '192.168.1.1';
 }
 return $ip;
}
add_filter( 'c2c_get_post_author_ip', 'customize_post_author_ip', 10, 2 );
</code></pre>
c2c_get_current_user_ip (filter)
The ‘c2c_get_current_user_ip’ filter allows you to customize the current user’s IP address, as used by the plugin. Your hooking function can be sent 1 argument:
Argument :
<ul>
<li>$ip (string) The post author IP address.</li>
</ul>
Example:
<pre><code>/**
 * Overrides localhost IP address.
 *
 * @param string $ip The post author IP address.
 * @param int $post_id The post ID.
 * @return string
 */
function customize_post_author_ip( $ip, $post_id ) {
 if ( 0 === strpos( $ip, '192.168.' ) ) {
 $ip = '192.168.1.1';
 }
 return $ip;
}
add_filter( 'c2c_get_post_author_ip', 'customize_post_author_ip', 10, 2 );
</code></pre>
c2c_post_author_ip_allowed (filter)
The ‘c2c_post_author_ip_allowed’ filter allows you to determine on a per-post basis if the post author IP should be stored. Your hooking function can be sent 3 arguments:
Arguments :
<ul>
<li>$allowed (bool) Can post author IP be saved for post? Default true.</li>
<li>$post_id (int) The post ID.</li>
<li>$ip (string) The post author IP address.</li>
</ul>
Example:
<pre><code>/**
 * Don't bother storing localhost IP addresses.
 *
 * @param bool $allowed Can post author IP be saved for post? Default true.
 * @param int $post_id The post ID.
 * @param string $ip The post author IP address.
 * @return string
 */
function disable_localhost_post_author_ips( $allowed, $post_id, $ip ) {
 if ( $allowed && 0 === strpos( $ip, '192.168.' ) ) {
 $allowed = false;
 }
 return $allowed;
}
add_filter( 'c2c_post_author_ip_allowed', 'disable_localhost_post_author_ips', 10, 3 );
</code></pre>

Post Author IP

Records the IP address of the original post author when a post first gets created.

Vanguard Admin Protection & Notifications vs Post Author IP