WP Manifestindependent plugin directory
manifest / unclassified / ips-security-guard

IPS Security Guard

Advanced WordPress security hardening, application firewall, brute-force shield, and .htaccess protection.

by tysonchamp · github.com/tysonchamp/ips-security-guard · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/tysonchamp/ips-security-guard/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/tysonchamp/ips-security-guard ↗

IPS Security Guard is a lightweight, zero-bloat, high-performance WordPress security hardening, web application firewall (WAF), and brute-force mitigation plugin built specifically for the Indian Public School website.

Features

1. Automated Server & .htaccess Protection

  • Uploads Directory PHP Lockdown: Automatically injects and maintains rules in both the site root .htaccess and wp-content/uploads/.htaccess to block direct execution of .php, .phtml, .phps, .phar, and executable scripts.
  • Sensitive Files & Database Dump Protection: Completely blocks direct HTTP access to database dumps (.sql), .git repositories, .env environment files, backup files (.bak), configuration files (.ini, .conf), and log files (.log).
  • Critical File Cloaking: Forbids web access to wp-config.php, readme.html, and license.txt (preventing WordPress version and configuration disclosure).
  • One-Click Rule Verification: Provides a button in the admin dashboard to verify and re-apply all .htaccess hardening rules if they are ever overwritten.

2. Real-Time Application Firewall (WAF)

  • SQL Injection (SQLi) Protection: Inspects raw and decoded query strings for common SQL injection attack signatures (UNION SELECT, SLEEP(), BENCHMARK(), information_schema, comment injection) and immediately aborts malicious requests with a 403 Forbidden.
  • Cross-Site Scripting (XSS) Shield: Detects and blocks requests containing `