WP Manifestindependent plugin directory
manifest / security / xdlogin

XDLOGIN [2025.01.02]

Plugin Login wordpress, giao diện hiện đại

by XD-DMAIC Team · github.com/xdmaicdigital/xdlogin · website

★ 0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/xdmaicdigital/xdlogin/archive/refs/heads/main.zip
Readme github.com/xdmaicdigital/xdlogin ↗

🛡️ XD-LOGIN

XD-LOGIN Banner

The Ultimate Modern Security & Login System for WordPress

Version PHP React Tailwind License

🌟 Overview

XD-LOGIN is a high-performance, SaaS-grade security layer for WordPress that replaces the legacy login experience with a modern, React-powered interface. Built for agencies and security-conscious developers, it provides military-grade protection through multi-factor authentication, advanced firewalls, and intelligent rate limiting.

🚀 Why XD-LOGIN?

  • Modern Experience: Smooth React transitions and a premium Dark Mode UI.
  • Hardened Security: RFC 6238 compliant TOTP and automated IP lockouts.
  • Developer First: Fully extensible via REST API with complete audit trails.

🛠️ Key Features

🔐 Security & Protection

  • Multi-Factor Authentication: Native TOTP (Google Authenticator) support with encrypted backup codes.
  • Intelligent Firewall: Advanced protection against XML-RPC attacks and REST API user enumeration.
  • Atomic Rate Limiting: Prevents brute-force attacks using atomic IP-based tracking.
  • Audit Logging: Comprehensive tracking of every login attempt, IP change, and security event.

🎨 Premium Interface

  • React-Powered: Built with React 18 and Framer Motion for a fluid, app-like feel.
  • Glassmorphism Design: Sleek, modern aesthetics that wow your users.
  • Dark Mode Native: Optimized for professional workflows with a curated dark palette.
  • Fully Responsive: Perfect experience across mobile, tablet, and desktop.

⚙️ Admin Control

  • IP Management: One-click block/unblock capabilities from a centralized dashboard.
  • Firewall Config: Fine-tune security headers and SEO spam protection.
  • 2FA Dashboard: Easy management of user security status and QR code generation.

🏗️ Tech Stack

Layer Technology
Frontend React 18, Framer Motion, TailwindCSS
Backend WordPress REST API, PHP 7.4+
Security TOTP (RFC 6238), CSP Headers, Atomic Lockouts
Build Tool Vite, PostCSS

📦 Installation

  1. Upload: Navigate to Plugins > Add New > Upload Plugin and select the xd-login.zip.
  2. Activate: Click Activate after the upload completes.
  3. Configure: Access the management dashboard at XD Board > Cấu hình.

Custom Login URL

By default, XD-LOGIN intercepts wp-login.php. You can also access it directly at: https://yourdomain.com/?xd-login=1

🔒 Security Architecture

XD-LOGIN implements multiple layers of defense:

  1. Request Layer: Nonce verification & CSRF protection on all API calls.
  2. Session Layer: RFC 6238 TOTP validation.
  3. Application Layer: Custom Firewall blocking unauthorized XML-RPC and User Probing.
  4. Network Layer: Automatic IP Lockout after 5 (configurable) failed attempts.

📈 Development

If you're modifying the frontend, ensure you have Node.js installed:

# Install dependencies
npm install

# Build for production
npm run build

📄 License

Distributed under the GPL v2 or later. See CHANGELOG.md for full history.

Developed with ❤️ by X-DMAIC Digital
Empowering WordPress with Modern Security