bulktheme

<p>In most of the time WordPress attacks are a result of plugin vulnerabilities, weak passwords, and obsolete software. WP Smart Security will hide the places those vulnerabilities live keeping an attacker from learning too much about your site and keeping them away from sensitive areas like login, admin, etc.</p>
<p>Download Pro version here: <a href="http://wpsmartsecurity.com" title="WP Smart Security Pro" rel="nofollow ugc">WP Smart Security Pro</a>.</p>
<p>WP Smart Security plugin will take your website security to a whole new level with it’s best WordPress security features and techniques and combines them in a single plugin. Thereby ensuring that as many security holes as possible are patched without having to worry about conflicting features or the possibility of missing anything on your site. It reduces security risk by checking for vulnerabilities, and by implementing and enforcing the latest recommended WordPress security practices and techniques.</p>
<p>Download Pro version here: <a href="http://wpsmartsecurity.com" title="WP Smart Security Pro" rel="nofollow ugc">WP Smart Security Pro</a>.</p>
<p>You can make your website basic secured by one-click activation of most features. As well as if you are experienced user, you can activate advanced features for better security to protect any site.</p>
<p>Download Pro version here: <a href="http://wpsmartsecurity.com" title="WP Smart Security Pro" rel="nofollow ugc">WP Smart Security Pro</a>.</p>
<p>Below is a top list of the security and firewall features offered in this plugin:</p>
<ol>
<li>Quick Statistics and quick action widget in WordPress admin dashboard</li>
<li>Anti-spam and captcha protection by Open-source free PHP CAPTCHA library by http://www.phpcaptcha.org is included (customized version)</li>
<li>Set CAPTCHA on the forms for comments, registration, lost password, login, or all.</li>
<li>Allows Trackbacks and Pingbacks.</li>
<li>Remove the meta “Generator” tag</li>
<li>Change the urls for WordPress dashboard including login, admin, and more</li>
<li>Completely turn off the ability to login for a given time period (away mode)</li>
<li>Rename “admin” account</li>
<li>Change the ID on the user with ID 1</li>
<li>Backup WordPress database</li>
<li>Change the WordPress database table prefix</li>
<li>Remove theme, plugin, and core update notifications from users who do not have permission to update them</li>
<li>Remove Windows Live Write header information</li>
<li>Remove RSD header information</li>
<li>Change wp-content path</li>
<li>Removes login error messages</li>
<li>Enforce strong passwords for all accounts of a configurable minimum role</li>
<li>Force SSL for admin pages (on supporting servers)</li>
<li>Force SSL for any page or post (on supporting servers)</li>
<li>Turn off file editing from within WordPress admin area</li>
<li>Display a random version number to non administrative users anywhere version is used</li>
<li>Scan your site to instantly tell where vulnerabilities are and fix them in seconds</li>
<li>Ban troublesome bots and other hosts</li>
<li>Ban troublesome user agents</li>
<li>Prevent brute force attacks by banning hosts and users with too many invalid login attempts</li>
<li>Strengthen server security</li>
<li>Monitor filesystem for unauthorized changes</li>
<li>Create and email database backups on a customizable schedule</li>
<li>Make it easier for users to log into a site by giving them login and admin URLs that make more sense to someone not accustomed to WordPress</li>
<li>Detect hidden 404 errors on your site that can affect your SEO such as bad links, missing images, etc.</li>
<li>Detect and block numerous attacks to your filesystem and database</li>
<li>Detect bots and other attempts to search for vulnerabilities</li>
</ol>
<p>Download Pro version here: <a href="http://wpsmartsecurity.com" title="WP Smart Security Pro" rel="nofollow ugc">WP Smart Security Pro</a>.</p>
<p>WP Smart Security is the <strong>number one</strong> security and firewall plugin for WordPress. Please check out all the features it has. It’s simply awesome.</p>
<h4>Captcha in Forms</h4>
<p>Protect your website forcing user to have an captcha option in registration form, login form, comment form and other forms.</p>
<h4>Anti Spam Protection</h4>
<p>This plugin enables hidden empty field honeypot trap for spam bots. Bots and other scripts can never break your system.</p>
<h4>Admin User</h4>
<p>Mostly hackers try on your website’s admin account, This plugin forces to change the admin username and the admin user ID.</p>
<h4>Maintenance Mode</h4>
<p>You can always send your website’s status as maintenance mood. You can do it for both front-end and the back-end.</p>
<h4>Content Directory</h4>
<p>This plugin helps you to protect your content directories, where your themes, plugins and other files stored.</p>
<h4>Files Protection</h4>
<p>By continuous monitoring on your websites files for any changes happen this plugin protect your website files.</p>
<h4>Database Backup</h4>
<p>WP Smart Security will make regular backups of your WordPress database allowing you to get back online quickly. You can also create and email database backups on a customized schedule.</p>
<h4>Database Prefix</h4>
<p>WP Smart Security helps protects website database by changing the WordPress database table prefix.</p>
<h4>Login Limitation</h4>
<p>This plugin protects your user’s accounts by forcing Login Limitation, continuous bot tries blocks the account.</p>
<h4>Ban User</h4>
<p>This feature allows you to ban hosts and user agents from your site completely using individual or groups of IP addresses as well as user agents without having to manage any configuration of your server.</p>
<h4>IP Blacklist</h4>
<p>You can block the blacklisted IP addresses by the excellent blacklist developed by Jim Walker of HackRepair.com.</p>
<h4>Hide Back-end</h4>
<p>The <code>hide backend</code> feature changes the URL from which you can access your WordPress backend thereby further obscuring your site to potential attackers.</p>
<h4>Intrusion Detation</h4>
<p>In every website are getting a large number of 404 errors. It assumes that a user who hits a lot of 404 errors in a short period of time is scanning for something and locks them out accordingly.</p>
<h4>SSL Protection</h4>
<p>Secure Socket Layers is a technology that is used to encrypt the data sent between your server or host and the visitor to your web page.</p>
<h4>System Tweaking</h4>
<p>Server tweaks make use of rewrite rules and, in the case of Apache or LiteSpeed, will write them to your .htaccess file.</p>
<h4>Log File</h4>
<p>This feature contains the logs generated by WP Smart Security, current lockouts and a way to cleanup the logs to save space on the server and reduce CPU load.</p>
<h4>Continuous Update</h4>
<p>We are always updating, developing and adding new features day by day. Once you purchase this plugin, you get the life time update and download with all updated features.</p>
<h4>Unparalleled Support</h4>
<p>We always try to make our clients happy. So we are providing continous and unparalleled supports to our customers.</p>
<p>Download Pro version here: <a href="http://wpsmartsecurity.com" title="WP Smart Security Pro" rel="nofollow ugc">WP Smart Security Pro</a>.</p>
<h4>Compatibility</h4>
<ol>
<li>Works on multi-site (network) and single site installations</li>
<li>Works with Apache, LiteSpeed or NGINX</li>
<li>Some features can be problematic if you don’t have enough RAM to support them. All my testing servers allocate 128MB to WordPress and usually don’t have any other plugins installed.</li>
<li>Works with WordPress 2.9+, WPMU, and BuddyPress (WordPress 3.6+ is highly recommended)</li>
<li>PHP5+ is highly recommended</li>
</ol>
<h3>Additional Features</h3>
<h3>See below some features of this plugin</h3>
<ol>
<li>Quick Statistics and quick action widget in WordPress admin dashboard</li>
<li>Anti-spam and captcha protection by Open-source free PHP CAPTCHA library by http://www.phpcaptcha.org is included (customized version)</li>
<li>Set CAPTCHA on the forms for comments, registration, lost password, login, or all.</li>
<li>Allows Trackbacks and Pingbacks.</li>
<li>Remove the meta “Generator” tag</li>
<li>Change the urls for WordPress dashboard including login, admin, and more</li>
<li>Completely turn off the ability to login for a given time period (away mode)</li>
<li>Rename “admin” account</li>
<li>Change the ID on the user with ID 1</li>
<li>Backup WordPress database</li>
<li>Change the WordPress database table prefix</li>
<li>Remove theme, plugin, and core update notifications from users who do not have permission to update them</li>
<li>Remove Windows Live Write header information</li>
<li>Remove RSD header information</li>
<li>Change wp-content path</li>
<li>Removes login error messages</li>
<li>Enforce strong passwords for all accounts of a configurable minimum role</li>
<li>Force SSL for admin pages (on supporting servers)</li>
<li>Force SSL for any page or post (on supporting servers)</li>
<li>Turn off file editing from within WordPress admin area</li>
<li>Display a random version number to non administrative users anywhere version is used</li>
<li>Scan your site to instantly tell where vulnerabilities are and fix them in seconds</li>
<li>Ban troublesome bots and other hosts</li>
<li>Ban troublesome user agents</li>
<li>Prevent brute force attacks by banning hosts and users with too many invalid login attempts</li>
<li>Strengthen server security</li>
<li>Monitor filesystem for unauthorized changes</li>
<li>Create and email database backups on a customizable schedule</li>
<li>Make it easier for users to log into a site by giving them login and admin URLs that make more sense to someone not accustomed to WordPress</li>
<li>Detect hidden 404 errors on your site that can affect your SEO such as bad links, missing images, etc.</li>
<li>Detect and block numerous attacks to your filesystem and database</li>
<li>Detect bots and other attempts to search for vulnerabilities</li>
</ol>


WP Smart Security

Working fine

WP Smart Security is a comprehensive and easy to use WordPress security plugin. It gives you over 50+ ways to secure and protect your WordPress site.

Cornelius Bergen

<p>Gauntlet Security can find opportunities for improving the security of your site. It checks many aspects of the site’s configuration including file permissions, server software, PHP, database, plugins, themes, and user accounts. The plugin will give each check a pass, warning, or fail and explain in clear language how you can fix the issue.</p>
<p>How you ultimately choose to patch these issues is up to you but whatever method you use, this plugin should always provide an accurate report. It does not make changes to your database or to any of your files and it should be compatible with all other security plugins.</p>
<p>Checks and recommendations include:</p>
<ul>
<li>Set correct file and directory permissions</li>
<li>Turn off directory indexing</li>
<li>Prevent code execution in the uploads directory</li>
<li>Block files in the includes directory</li>
<li>Prevent access to stray files which could be useful to attackers</li>
<li>Keep PHP up-to-date</li>
<li>Disable dangerous PHP functions</li>
<li>Disable allow_url_include and allow_url_fopen PHP flags</li>
<li>Turn off the display of PHP errors</li>
<li>Don’t advertise the PHP version you are running</li>
<li>Use a strong database password</li>
<li>Change the default database table prefix</li>
<li>Keep WordPress up-to-date</li>
<li>Turn off file editing in the control panel</li>
<li>Set security keys in WP-Config file</li>
<li>Don’t advertise the WordPress version you are running</li>
<li>Turn off self-registration</li>
<li>Force SSL when accessing the admin area</li>
<li>Review the development activity and reputation of all plugins</li>
<li>Remove unused themes from the server</li>
<li>Rename the plugin directory</li>
<li>Move the active theme to an alternate location</li>
<li>Do not use TimThumb</li>
<li>Do not use common user names (such as “admin”)</li>
<li>Do not use weak passwords</li>
<li>Do not have a user with an ID = 1</li>
<li>Minimize the number of admin users</li>
<li>Users should not display their login usernames publicly</li>
<li>Prevent username enumeration through standard author URLs</li>
<li>…more tests planned</li>
</ul>
<p>Check the <a href="screenshots" rel="nofollow ugc">screenshots</a> for more detail on some of the above features.</p>
<p>Many of these security checks are based on recommendations from the WordPress codex: https://codex.wordpress.org/Hardening_WordPress.</p>
<h4>Disclaimer</h4>
<p>Some of the tips included in this plugin only require making small changes to configuration files (.htaccess, php.ini, wp-config.php, functions.php). Others require more in-depth changes to the filesystem or database. Before attempting any of these fixes, you should be comfortable experimenting and know how to undo any change you make. That includes making backups and knowing how restore your site from those backups. I can’t guarantee that the recommendations or sample code provided in this plugin will not break your site or that they will prevent it from being hacked.</p>
<h4>Requirements</h4>
<ul>
<li>Apache web server</li>
<li>WordPress 3.4 minimum</li>
<li>PHP 5.2.7 minimum</li>
</ul>


Gauntlet Security

Performs a detailed security analysis of your WordPress installation. Provides specific instructions on how to make your site more secure.

WP Smart Security vs Gauntlet Security