Privacy Shield: Website Data Leak Monitor

A comprehensive WordPress security plugin that monitors login attempts, tracks suspicious behavior, and provides real-time alerts to protect small businesses from cyber threats.

🚀 Features

Live Security Feed

• Real-time monitoring of all login attempts and security events
• Auto-refresh every 10 seconds with smooth animations
• Event filtering by type (failed logins, successful logins, lockouts, rate limits)
• Detailed logging with IP address, geolocation, user agent, and threat scores

Suspicious User Score System

• 0-100 threat scoring based on multiple factors:
  • Failed login attempts
  • Login frequency and patterns
  • Success/failure ratio
  • Recent activity timing
• Color-coded threat levels:
  • 🟢 Safe (0-30): Low risk
  • 🟡 Warning (31-60): Moderate risk
  • 🔴 Danger (61-100): High risk

Instant Alerts System

• Multi-channel notifications:
  • 📱 Telegram integration
  • 💬 WhatsApp integration (via API)
• Configurable triggers:
  • Danger level threshold crossed
  • IP lockout events
  • Custom alert conditions

Auto Lockout & Cool-Off Timer

• Automatic IP blocking when threat score exceeds threshold
• Configurable lockout duration (minutes to hours)
• Rate limiting to prevent brute force attacks
• Whitelist/Blacklist management
• Manual unlock functionality from dashboard

Admin Dashboard

• Statistics cards showing total events, failed logins, active lockouts, and high-risk IPs
• Threat distribution visualization
• High-risk IP table with detailed information
• Active lockouts management page
• Comprehensive settings with tabbed interface

📋 Requirements

• WordPress 5.8 or higher
• PHP 7.4 or higher
• MySQL 5.6 or higher
• HTTPS recommended for production

📦 Installation

Method 1: Upload via WordPress Admin

1. Download the privacy-shield folder
2. Compress it into a ZIP file
3. Go to WordPress Admin → Plugins → Add New
4. Click "Upload Plugin"
5. Choose the ZIP file and click "Install Now"
6. Click "Activate Plugin"

Method 2: Manual Installation

1. Download the privacy-shield folder
2. Upload it to /wp-content/plugins/ directory
3. Go to WordPress Admin → Plugins
4. Find "Privacy Shield" and click "Activate"

Method 3: FTP Upload

1. Connect to your server via FTP
2. Navigate to /wp-content/plugins/
3. Upload the entire privacy-shield folder
4. Activate the plugin from WordPress Admin

⚙️ Configuration

Initial Setup

1. After activation, go to Privacy Shield → Settings
2. Configure general security settings:
   • Failed login threshold (default: 5)
   • Lockout duration (default: 30 minutes)
   • Danger score threshold (default: 60)
   • Rate limiting parameters

Alert Configuration

Telegram Setup

1. Create a Telegram bot:

   • Open Telegram and search for @BotFather
   • Send /newbot and follow instructions
   • Copy the Bot Token

2. Get your Chat ID:

   • Search for @userinfobot on Telegram
   • Start a chat to get your Chat ID

3. In Privacy Shield Settings → Alerts:

   • Enable Telegram alerts
   • Paste your Bot Token
   • Paste your Chat ID
   • Click "Test Telegram Alert" to verify

WhatsApp Setup

1. Choose a WhatsApp Business API provider:

   • Twilio (recommended)
   • WhatsApp Business API
   • Other third-party services

2. Obtain API credentials from your provider

3. In Privacy Shield Settings → Alerts:

   • Enable WhatsApp alerts
   • Enter your API key
   • Enter your phone number (with country code)
   • Click "Test WhatsApp Alert" to verify

IP Lists Management

Whitelist: IPs that will never be blocked (e.g., your office IP, trusted locations)

Blacklist: IPs that will be permanently blocked (e.g., known malicious IPs)

Add one IP address per line in the IP Lists tab.

📊 Dashboard Overview

Security Feed

• View all security events in real-time
• Filter by event type
• See threat scores and geolocation data
• Auto-refreshes every 10 seconds

Statistics

• Total security events
• Failed logins today
• Active lockouts
• High-risk IP count

Active Lockouts

• View all currently locked IPs
• See lockout reason and duration
• Manually unlock IPs if needed

🔧 Advanced Options

Danger Zone Actions

Clear All Logs: Removes all security event logs (cannot be undone)

Reset All Threat Scores: Resets all IP threat scores to 0 (cannot be undone)

Unlock All IPs: Removes all active lockouts (cannot be undone)

🛡️ Why This Plugin Matters (2025)

Rising Cybersecurity Threats

• 300% increase in brute force attacks since 2023
• Small businesses are 3x more likely to be targeted
• Average cost of a data breach: $4.45 million

Small Business Vulnerability

• 43% of cyberattacks target small businesses
• 60% of small businesses close within 6 months of a cyber attack
• Most small businesses lack dedicated security teams

Privacy Shield Solution

• Affordable enterprise-level security
• Easy to use - no technical expertise required
• Real-time protection with instant alerts
• Comprehensive logging for compliance and auditing

🔐 Security Best Practices

1. Use HTTPS for your WordPress site
2. Keep WordPress updated to the latest version
3. Use strong passwords for all user accounts
4. Enable two-factor authentication when possible
5. Regular backups of your website
6. Monitor the security feed regularly
7. Review high-risk IPs weekly
8. Test alerts monthly to ensure they're working

📝 Database Tables

The plugin creates four tables:

• wp_privacy_shield_logs - Security event logs
• wp_privacy_shield_lockouts - IP lockout records
• wp_privacy_shield_scores - User threat scores
• wp_privacy_shield_alerts - Alert history

All tables are automatically removed when the plugin is uninstalled.

🐛 Troubleshooting

Alerts Not Sending

Telegram:

• Verify Bot Token is correct
• Ensure Chat ID is correct
• Start a conversation with your bot first
• Check that bot is not blocked

WhatsApp:

• Verify API credentials
• Check phone number format (include country code)
• Ensure API service is active
• Check API usage limits

Feed Not Updating

• Check browser console for JavaScript errors
• Ensure jQuery is loaded
• Clear browser cache
• Verify AJAX URL is correct

False Positives

• Add trusted IPs to whitelist
• Adjust lockout threshold
• Increase danger score threshold
• Review scoring algorithm weights

🔄 Uninstallation

1. Deactivate the plugin from WordPress Admin
2. Delete the plugin
3. All database tables and options will be automatically removed

📄 License

This plugin is licensed under GPL v2 or later.

👨‍💻 Support

For support, feature requests, or bug reports:

• Email: adnancyber90@gmail.com
• Documentation: https://adnancyber-he.github.io

🎯 Roadmap

• [ ] Two-factor authentication integration
• [ ] Email alert support
• [ ] Advanced reporting and analytics
• [ ] IP reputation API integration
• [ ] Geofencing capabilities
• [ ] Mobile app for monitoring

📸 Screenshots

Screenshots will be added in the WordPress plugin repository

🙏 Credits

Developed with ❤️ for small businesses who deserve enterprise-level security.

---

Version: 1.0.0
Last Updated: December 2025
Tested up to: WordPress 6.4