AegisPress 🛡️

A comprehensive, high-performance security engine and firewall for WordPress.

AegisPress (formerly Advanced Security Plugin) is a lightweight yet powerful security plugin designed to shield WordPress sites from modern web threats, script injections, bots, and unauthorized access attempts. Featuring a modular architecture, an active firewall, and an automated security scanner, AegisPress ensures your WordPress instance remains hardened without degrading performance.

🌟 Key Features

1. Web Application Firewall (WAF)

Active threat detection that inspects requests before they reach your WordPress theme or database.

• Injection Shield: Blocks Command Injection, SQL Injection (SQLi), NoSQL Injection, LDAP Injection, XML Injection, XPath Injection, HTML Injection, SSTI, and CRLF Injection.
• XSS Protection: Sanitizes and blocks malicious Cross-Site Scripting payloads.
• PHP Object Injection Guard: Prevents PHP object deserialization exploits.
• DDoS Protection: Mitigates high-frequency malicious requests.
• Geo-Blocking: Restricts access based on geographical origins.
• Bot Fight Mode & AI Bot Shield: Blocks scrapers, bad user-agents, and automated AI scrapers.

2. Security & Hardening Core

• Access Control: Standardizes role-based access controls for security actions.
• Secure Authentication: Hardens WordPress authentication protocols.
• CSRF Protection: Comprehensive cross-site request forgery prevention.
• SSRF Protection: Prevents Server-Side Request Forgery by blocking suspicious local/internal network requests.
• File Upload Security: Restricts upload sizes, extensions, and MIME types to prevent web shell execution.
• Session Management: Keeps sessions secure, tracking logins and preventing session hijacking.

3. Scanner & Auto-Pilot

• File & Database Scanner: Crawls directories and databases to identify modified core files, malformed configurations, or web shells.
• Auto-Pilot: An automated scanning coordinator that triggers background cleanup and alert actions when anomalies are detected.

4. Interactive Admin Dashboard & Tracker

• Security Dashboard: Live visualization of system health, active protections, and statistics.
• Threat Tracker: Detailed audit logs recording block actions, suspicious activities, IP addresses, and violation reasons.

📁 Directory Structure

├── assets/
│   └── css/
│       └── admin.css            # Styles for security dashboard and admin pages
├── includes/
│   ├── Admin/
│   │   ├── Pages/               # Individual security dashboards & pages
│   │   │   ├── AccessControl.php
│   │   │   ├── Authentication.php
│   │   │   ├── AutoScanner.php
│   │   │   ├── BotProtection.php
│   │   │   ├── CSRF.php
│   │   │   ├── Dashboard.php
│   │   │   ├── FileUpload.php
│   │   │   ├── Injection.php
│   │   │   ├── SSRF.php
│   │   │   ├── Scanner.php
│   │   │   ├── Session.php
│   │   │   ├── Tracker.php
│   │   │   └── XSS.php
│   │   ├── BasePage.php         # Base abstract class for admin pages
│   │   └── Menu.php             # Registers the WordPress admin menu and pages
│   ├── Firewall/
│   │   ├── Rules/               # Firewall rules checking request integrity
│   │   │   ├── AIBots.php
│   │   │   ├── BotFightMode.php
│   │   │   ├── CRLFInjection.php
│   │   │   ├── CommandInjection.php
│   │   │   ├── DDoSProtection.php
│   │   │   ├── GeoBlocking.php
│   │   │   ├── HTMLInjection.php
│   │   │   ├── LDAPInjection.php
│   │   │   ├── NoSQLInjection.php
│   │   │   ├── PHPObjectInjection.php
│   │   │   ├── SQLInjection.php
│   │   │   ├── SSTI.php
│   │   │   ├── XMLInjection.php
│   │   │   ├── XPathInjection.php
│   │   │   └── XSS.php
│   │   ├── Firewall.php         # Firewall runner compiling and checking all rules
│   │   └── Rule.php             # Rule interface
│   ├── Scanner/
│   │   ├── AutoPilot.php        # Automation for routine background scans
│   │   └── Scanner.php          # Code/Database scanning mechanism
│   ├── Security/
│   │   ├── AccessControl.php    # Access checks implementation
│   │   ├── Authentication.php   # Login hardening checks implementation
│   │   ├── CSRF.php             # CSRF token generator and validator
│   │   ├── FileUpload.php       # Upload filters and sanitization
│   │   ├── SSRF.php             # Safe host validation
│   │   └── Session.php          # Session security configuration
│   ├── Core.php                 # Core orchestrator running security tasks
│   └── Logger.php               # Logs security events in the WP database
└── security-plugin.php          # Main plugin entry point (autoloader & initialization)

🛠️ Installation

1. Download/Clone: Download this repository as a .zip archive or clone it directly.
2. Upload to WordPress:
   • Navigate to your WordPress Admin Dashboard.
   • Go to Plugins > Add New > Upload Plugin.
   • Upload the zipped folder.
   • Alternatively, place the aegispress directory directly inside wp-content/plugins/.
3. Activate: Click Activate inside the WordPress Plugins menu. The plugin will automatically run the activation hook to initialize database logger tables.

📝 Architecture & How It Works

• Autoloader: Initialized in security-plugin.php, registering the namespace prefix ASP\ mapped to the includes/ folder.
• Bootstrapping: Upon activation, the core runs asp_init_plugin(). includes/Core.php fires the firewall engine during the early plugins_loaded hook to block threats before any page output.
• Security Log Table: The activation hook registers \ASP\Logger::create_table(), creating a custom database table to archive security logs and threat telemetry.

👥 Contributing

We welcome security professionals and WordPress developers to contribute!

1. Fork the repository.
2. Create your feature branch (git checkout -b feature/AmazingFeature).
3. Commit your changes (git commit -m 'Add some AmazingFeature').
4. Push to the branch (git push origin feature/AmazingFeature).
5. Open a Pull Request.

📄 License

Distributed under the MIT License. See LICENSE for more information.