Andrew Norcross

Jason Coleman

<p>WP Bouncer restricts the number of simultaneous logins for the same WordPress user account. The plugin’s goal is to deter people from sharing their login credentials for your site, which is especially important for a paid membership, premium content, or eLearning site.</p>
<h3>How WP Bouncer Protects Shared User Logins</h3>
<ul>
<li>The plugin stores a random <code>FAKESESSID</code> for each user when they log in.</li>
<li>If a user is logged in, on each page load (init hook), WP Bouncer checks if the <code>FAKESESSID</code> stored in the user’s cookies is the same as the last login stored in a transient (<code>fakesessid_user_login</code>).</li>
<li>If the two values do no match, WP Bouncer logs the user out and redirects them to the WordPress login page or a custom page using the wp_bouncer_redirect_url filter.</li>
</ul>
<p>If the WP_BOUNCER_HEARTBEAT_CHECK is defined to true, JavaScript will be loaded to bounce users when a new user logs in with the same login. This is useful for sites with page caching.</p>
<p>Admininstrator accounts or any users with the “manage_options” capability are excluded from bounces.</p>
<h3>Or, Allow a Specific Number of Active Sessions</h3>
<p>By default, WP Bouncer only allows one session per user.</p>
<p>You can use this plugin to offer bulk memberships to corporate, education, or other group-type customers via a shared login.</p>
<p>Use the <code>wp_bouncer_number_simultaneous_logins</code> filter to allow a defined number of active “sessions”.</p>
<p><a href="https://www.paidmembershipspro.com/limit-user-active-sessions/" rel="nofollow ugc">View the Recipe</a></p>
<h3>Example Use Cases for WP Bouncer</h3>
<ul>
<li>User A logs in as “user”. Their <code>FAKESESSID</code>, say “SESSION_A” is stored in a WordPress option.</li>
<li>User B logs in as “user”. Their <code>FAKESESSID</code>, say “SESSION_B” is overwrites the stored WordPress option.</li>
<li>User A tries to load a page on your site, WP Bouncer catches them and logs them out, redirecting them to the warning message.</li>
<li>User B can browse around the site as normal… unless…</li>
<li>User A logs in again as “user”. Their <code>FAKESESSID</code>, “SESSION_A_v2” is stored in the WordPress option.</li>
<li>Now user B would be logged out if they load another page.</li>
</ul>
<h3>Hooks and Filters</h3>
<ul>
<li><code>wp_bouncer_ignore_admins</code> filter: if returning false even admins will be bounced.</li>
<li><code>wp_bouncer_redirect_url</code> filter: can be used to change the URL redirected to after being bounced.</li>
<li><code>wp_bouncer_number_simultaneous_logins</code> filter: can be set to limit logins to a number other than 1. 0 means unlimited logins.</li>
<li><code>wp_bouncer_login_flag</code>: runs right before bouncing (can be used to potentially stop the bouncing).</li>
<li><code>wp_bouncer_session_ids</code> hook: used to filter session ids when saving them. Passes $session_ids, $old_session_ids (before any were removed/bounced), and the current user’s ID as parameters.</li>
<li><code>wp_bouncer_session_length</code> hook: used to filter how long the session ids transients are set. This way, you can time the transients to expire at a specific time of day. Note that the transient is saved on every page load, so if you set it to 5 minutes, it’s going to push it out 5 minutes on every page load. You should try to set it to (the number of seconds until midnight) or something like that.</li>
</ul>
<h3>Support the Plugin Authors</h3>
<p>If you like this plugin, please check out Jason’s work with <a href="https://www.strangerstudios.com" rel="nofollow ugc">Stranger Studios</a> and <a href="https://www.paidmembershipspro.com" rel="nofollow ugc">Paid Memberships Pro</a> and <a href="http://andrewnorcross.com/" rel="nofollow ugc">Andrew’s work at his personal site</a>.</p>


WP Bouncer – Limit Simultaneous Logins

Deter members from sharing login credentials: restrict simultaneous logins for the same user.

Themeisle

Creativemotion

<p>Titan includes anti-spam, firewall, malware scanner, site accessibility checking, security and threats audits for WordPress websites. Our security functions provide Titan with the latest firewall rules, malware signatures, and database of malicious IP addresses – all you need to ensure the security of your website.</p>
<p>Titan is a comprehensive WordPress security solution, completed by a set of additional features as add-ons, which was placed into a simple and intuitive interface.</p>
<p><strong>Why did we update Anti-Spam and what is Titan?</strong></p>
<p>Let me tell you before we start: your favorite Anti-Spam had not disappeared! Instead of that it revived and became stronger to stand guard over the secure of your site!<br />
The latest update of Anti-Spam is called Titan Anti-spam & Security and represents the brand new version of a plugin.</p>
<p><strong>Why TITAN?</strong></p>
<p>We aim to create a plugin as reliable as this metal – and easy-to-use at the same time. The new name of our plugin sets the pace with newest and highest standards of quality.</p>
<p>What has been changed except the name?<br />
Whilst the process of modernization we had to take some complicated decisions. One of them was:<br />
What should we do: keep Anti-Spam like a simple plugin with the only one function or complicate it with a huge complex of tools made for the security of your site?<br />
Constant feedback from users and versatile development experience lets us claim that the situation when there is too many tools couldn’t exist!<br />
We considered all possibilities thoroughly to secure the best future for the plugin.<br />
Let me introduce new secure functionality that was developed with spending a lot of time, effort and consideration:</p>
<h3>Features</h3>
<h3>ANTI-SPAM</h3>
<p>ANTI-SPAM CHECKS YOUR COMMENTS THROUGH OUR GLOBAL SPAM DATABASE, THEN A SELF-LEARNING NEURAL NETWORK RE-CHECKS UNFILTERED COMMENTS, TO PREVENT YOUR SITE FROM PUBLISHING MALICIOUS CONTENT.</p>
<ul>
<li>No captcha.</li>
<li>We have created algorithms to ensure reliability and accuracy against spam bots. It will save your time and resources, allowing you to focus on developing and improving your website and business. Antispam provides logs of all the processed requests that allows you to check the spam filters results. Regular analysis of parameters allows you to find new spam behavior patterns.</li>
<li>A comment posted by a user appears on the site right away. The background check marks spam comments as spam and hides them on a site. This helps to improve user experience and increase engagement.</li>
<li>[PRO] Checking the already existing comments and users for spam.</li>
<li>[PRO] We provide 24/7 technical support.</li>
<li>[PRO] To identify and block spam bots AntiSpamPro uses a series of tests running in the background, totally transparent to the website User. It allows 100% protection from spam bots No extra protection needed.</li>
<li>[PRO] Anti-spam is a comprehensive and transparent anti-spam protection. We provide detailed statistics of all logged comments and logins. You can always be sure that there are no errors.</li>
<li>[PRO]  Protect Register Form.</li>
<li>[PRO] Advanced protection of comment forms.</li>
<li>We regularly release updates to the anti-spam module. Our modules always meet new versions of CMS and we are constantly expanding supported CMS.</li>
</ul>
<h3>WORDPRESS FIREWALL</h3>
<p>The web application firewall detects and blocks malicious traffic. It protects your website at the endpoint by providing deep integration with WordPress. In contrast to cloud alternatives, it does not violate encryption, cannot be bypassed and does not contribute to data leakage.</p>
<ul>
<li>Protection brute force  attacks by restricting login attempts.</li>
<li>[PRO] Update real-time firewall rules and malware signatures through the threat protection channel.</li>
<li>[PRO] Real-time IP Block List blocks all requests from malicious IP addresses, protecting your site and reducing load.</li>
<li>[PRO] An integrated malware scanner blocks requests containing malicious code or content.</li>
<li>[PRO] Using the Attack Log you can track visits and hacking attempts that are not shown in other analytic packages in real time; including origin, IP address, current time, and time spent on your site.</li>
<li>[PRO] Block intruders by IP address or create advanced rules based on a range of IP addresses, hostname, user agent, and referrer.</li>
</ul>
<h3>WORDPRESS SECURITY SCANNER</h3>
<ul>
<li>The malware scanner checks the system files, themes and plugins for malware, invalid URLs, backdoors, SEO spam, malicious redirects and code injections.</li>
<li>Basic scanning using more than 1000 signatures.</li>
<li>[PRO] Advanced scanning with more than 6000 signatures.</li>
<li>[PRO] Configure three scan speeds to make sure the performance is not affected.</li>
<li>[PRO] Set scan schedules – daily, monthly, and manually.</li>
<li>[PRO] Update malware signatures in real time through a threat protection channel.</li>
<li>Compares your system, themes and plugins with those which are in the WordPress.org repository, checking their integrity and informing you of all changes.</li>
<li>Recover modified files by overwriting them with the original version.</li>
<li>Delete unknown and unwanted files easily via the Titan interface.</li>
<li>Checks your site for vulnerabilities and notifies in case of any problems or discrepancies. It also provides a notification of potential security issues when the plugin has been closed or inactivated.</li>
<li>Checks the content security by scanning the contents of files, messages and comments for dangerous URLs and suspicious content.</li>
</ul>
<h3>SITE CHECKER [PRO]</h3>
<ul>
<li>Check the availability of any URL</li>
<li>Push notifications in the browser to show URLs access issues in real time.<br />
Your browser will receive push notifications if one of the URLS is unavailable.</li>
</ul>
<h3>TWEAKS</h3>
<ul>
<li>Strong Password Requirement</li>
<li>Hide author login</li>
<li>Hide WordPress versions. WordPress itself and many plugins show their version at the visible areas of your site. An attacker who received this information may be aware of the vulnerabilities found in the version of the WordPress core or plugins.</li>
</ul>
<h3>Translations</h3>
<ul>
<li>English (default), always included</li>
<li>Korean — big thanks to @cansmile</li>
<li>Spanish (Venezuela) — big thanks to @yordansoares, @nobnob, @bragnieljimenez</li>
<li>Spanish (Spain) — big thanks to @garridinsi, @nobnob, @nobnob, @nilovelez, @fernandot</li>
<li>Italian — big thanks to @deadpool76</li>
<li>Persian — big thanks to @1farakav</li>
<li>Arabic — big thanks to @alzintani</li>
<li>Swedish — big thanks to @elbogen </li>
<li>Tibetan — big thanks to @bumpagyal </li>
<li>Albanian — big thanks to @besnik </li>
<li>Dutch — big thanks to @robelia </li>
</ul>
<p>We are very need for your help with <a href="https://translate.wordpress.org/projects/wp-plugins/anti-spam/" rel="nofollow ugc">translating the<br />
Titan Anti-spam & Security plugin</a> into your native language. We want to make it international and understandable for everyone. Please contact us via email inside the plugin, or create a topic on our <a href="https://wordpress.org/support/plugin/anti-spam/" rel="ugc">support forum</a> if you can help with the translations. In exchange for your help, we will give you better support and our premium plugins absolutely free!</p>


Titan Anti-spam & Security

Can't uninstall from the dashboard, requires sending data to 3rd party for the survey. Good that I have wp-cli or You can use FTP to uninstall.
NOT WORTH anymore.

Can't uninstall from dashboard, require send data to 3rd party

I liked anti-spam a lot as an anti-spam plugin... But sadly now it has too many things, and I don't like it. With the free option it doesn't offer a complete security system, there are a lot of firewall options that can't be used, so it is too much for only an anti-spam plugin and quite complicated. So I changed to another one, because I also don't want it to collide with the other security plugin I use.

Too much things for an anti-spam plugin too few (on free) for a security one

Anti-spam, Site Security Check & Malware Scanner.

WP Bouncer – Limit Simultaneous Logins vs Titan Anti-spam & Security