Site Security Policy GitLab

Site Security Policy - Wordpress Plugin Centralized MFA and password policy enforcement for WordPress. Motivation I'm neither a big Wordpress fan nor a php dev. But when we're talking about "easy" to use CMS there's not much of an alternative. And it offers a pretty decent UX for non techs compared to many other CMS on the market. So no WP-blaiming here. When it comes to Wordpress, one of the first things one stumbles across is the vast amount of plugins that are available for them. A lot of functionality packed into easy to install packages. Sadly most of the plugins do upsell the fuck out of you, meaning, everytime you open the admin panel, some dumb popup blocks your view, trying to sell you the pro variant of their plugin. I get that people want to earn money, but I'm also not willing to pay for basic features that provide features that should be part of Wordpress Vanilla anyway. So that's why I created a pretty easy plugin that enables a few security related things (check below for a complete list). As I don't want to mess with 2FA by myself I decided to use the API provided by a really decent plugin called Two-Factor (https://de-at.wordpress.org/plugins/two-factor/). Th