WPS Protect: Login URL & Security Headers

The WPS Protect: Login URL & Security Headers plugin enhances your WordPress site security with multiple layers of protection. It provides a comprehensive solution for securing your WordPress installation through custom login URL protection, advanced security headers, and SSL enforcement.

Key Features:

• Custom Login URL Protection

  • Change and hide the default WordPress login URL
  • Protect against brute force attacks
  • Maintain compatibility with wp-admin access

• Advanced Security Headers

  • X-Frame-Options: Prevent clickjacking attacks
  • X-XSS-Protection: Enable browser’s XSS filtering
  • X-Content-Type-Options: Prevent MIME-type sniffing
  • Content-Security-Policy (CSP): Control resource loading
  • Permissions-Policy: Control browser features and APIs
  • Strict-Transport-Security (HSTS): Enforce HTTPS
  • Referrer-Policy: Control referrer information
  • Access-Control-Allow-Origin: Manage CORS policies

• SSL Enforcement

  • Force HTTPS across your site
  • Secure cookie handling
  • Mixed content protection

• User-Friendly Interface

  • Tab-based admin interface
  • Easy configuration of all security features
  • Recommended values for security headers
  • Real-time feedback on settings changes

1. Upload the plugin files to the /wp-content/plugins/wordpress-security directory, or install the plugin through the WordPress plugins screen directly.
2. Activate the plugin through the ‘Plugins’ screen in WordPress.
3. Use the WPS Protect menu in the WordPress Admin Dashboard to configure the plugin.

1.1

• Added Permissions-Policy header support
• Improved Content-Security-Policy configuration
• Enhanced login URL handling
• Added tab-based admin interface
• Fixed wp-admin access issues
• Updated security headers with recommended values

1.0

• Initial release with basic security features