WP Manifestindependent plugin directory
manifest / unclassified / advanced-security-shield

Advanced Security Shield (ALFA Shell Protection)

Comprehensive security plugin to prevent backdoor exploits, ALFA shell attacks, and unauthorized admin password changes

by kuyamecky · github.com/kuyamecky/advanced-security-shield · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/kuyamecky/advanced-security-shield/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/kuyamecky/advanced-security-shield ↗

WordPress Security Plugin to Prevent ALFA Shell and Unauthorized Access

Description

Enhance your WordPress site's security with our comprehensive plugin designed to prevent unauthorized access and malicious activities, including ALFA shell attacks. 🛡️

Features

File Upload Protection

  • Blocks Dangerous File Extensions: Prevents the upload of potentially harmful files. 🚫
  • ALFA Shell Detection: Identifies and stops ALFA shell uploads. 🔍
  • Malicious File Signature Checks: Scans for known malicious file signatures. 🖥️

Admin Password Change Prevention

  • IP-Based Access Restrictions: Limits access to trusted IP addresses. 🌐
  • Unauthorized Change Alerts: Sends notifications for unauthorized password change attempts. 📧

File Modification Blocking

  • Critical File Protection: Prevents unauthorized modifications to essential WordPress files. 🔒
  • Suspicious Activity Logging: Records attempts to alter critical files. 📝

Suspicious File Scanning

  • Recursive Directory Search: Thoroughly scans the upload directory. 🔄
  • File Quarantine: Isolates suspicious files for review. 🗂️
  • Malicious Code Detection: Identifies known malicious code patterns. 🛠️

Additional Features

  • Real-Time Threat Detection: Monitors and identifies threats as they occur. ⏱️
  • Email Notifications: Keeps you informed of security events. 📬
  • Security Event Logging: Maintains a log of all security-related activities. 📜
  • Customizable IP Whitelist: Allows you to specify trusted IP addresses. 📝

Installation

  1. Download the Plugin: Obtain the PHP file from the official source. 📥
  2. Upload to WordPress: Place the file in the wp-content/plugins directory. 📂
  3. Activate the Plugin: Enable it through the WordPress admin panel. ✅

Recommended: Customize the allowed IP list and adjust security settings to suit your specific requirements. ⚙️

License

This project is licensed under the MIT License - see the LICENSE file for details.

Contributing

Contributions are welcome! Please read the CONTRIBUTING guidelines first.

Support

For support, please open an issue on the GitHub repository.

Acknowledgments

  • Thanks to all contributors and the open-source community.
  • Special thanks to Mecky for the initial development.