{"id":33996485,"url":"https://github.com/salkhwlani/wp-security","last_synced_at":"2026-04-18T23:04:12.112Z","repository":{"id":57086693,"uuid":"112006838","full_name":"salkhwlani/wp-security","owner":"salkhwlani","description":"Basic security helper for WordPress.","archived":false,"fork":false,"pushed_at":"2017-11-27T07:09:41.000Z","size":87,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-12-14T19:59:10.062Z","etag":null,"topics":["plugins","security","themes","uploads","wordpress","wp-includes","xmlrpc","zip"],"latest_commit_sha":null,"homepage":null,"language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/salkhwlani.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-11-25T13:47:29.000Z","updated_at":"2023-07-25T14:13:05.000Z","dependencies_parsed_at":"2022-08-25T00:50:46.648Z","dependency_job_id":null,"html_url":"https://github.com/salkhwlani/wp-security","commit_stats":null,"previous_names":[],"tags_count":7,"template":false,"template_full_name":null,"purl":"pkg:github/salkhwlani/wp-security","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salkhwlani%2Fwp-security","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salkhwlani%2Fwp-security/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salkhwlani%2Fwp-security/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salkhwlani%2Fwp-security/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/salkhwlani","download_url":"https://codeload.github.com/salkhwlani/wp-security/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/salkhwlani%2Fwp-security/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31987885,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-18T20:23:30.271Z","status":"ssl_error","status_checked_at":"2026-04-18T20:23:29.375Z","response_time":103,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["plugins","security","themes","uploads","wordpress","wp-includes","xmlrpc","zip"],"created_at":"2025-12-13T08:06:26.557Z","updated_at":"2026-04-18T23:04:12.039Z","avatar_url":"https://github.com/salkhwlani.png","language":"PHP","readme":"# Basic WordPress Security\n\n[![Software License][ico-license]](LICENSE.md)\n[![Build Status][ico-build]][link-build]\n[![Quality Score][ico-code-quality]][link-code-quality]\n\n\n\u003e Basic security helper for WordPress.\n\n## Features\n- PHP Files Editation Disabled.\n- Directory Listing Disabled.\n- PHP Files Forbidden for `uploads` and `wp-includes`.\n- Disallow file editor for (plugins \u0026 themes).\n- Remove WordPress version from assets url.\n- Disable REST API methods to anonymous users.\n- Disable XmlRpc service.\n- Disallow upload plugin/theme zip file manually via dashboard.\n- Prevent deactivate security without FTP or file manager access.\n\n## Getting Started\n\n### via composer\n\n1. from `wp-content/plugins` folder run `composer create-project yemenifree/wp-security`\n2. Activate the plugin through the 'Plugins' menu in WordPress\n3. All done.\n\n### Manually\n\n1. Download [last version][link-last-version]\n1. unzip \u0026 rename folder to `wp-security`\n1. Upload the folder `wp-security` to the `/wp-content/plugins/` directory\n1. Activate the plugin through the 'Plugins' menu in WordPress\n1. All done.\n\n## Uninstall\n\n1. Remove lock file `/wp-content/plugins/wp-security/.wp-security-lock` via FTP or file manager (CPanel).\n2. Deactivate plugin through the \"Plugins page\" in WordPress.\n3. Uninstall plugin.\n\n## Why lock file\n\nThe goal of this plugin prevents use some built-in functions to a hacking website by users they have access to the dashboard, so to confirmed deactivate this plugin you need access to FTP or CPanel to remove the lock file.\n\n## TODO\n- Secure/Scan all upload files.\n- ~~Disable upload plugin manually (zip plugin) form admin panel.~~\n\n## Change log\n\nPlease see [CHANGELOG](CHANGELOG.md) for more information on what has changed recently.\n\n## Contributing\n\nPlease see [CONTRIBUTING](CONTRIBUTING.md) for details.\n\n## Security\n\nIf you discover any security related issues, please email yemenifree@yandex.com instead of using the issue tracker.\n\n## Credits\n\n- [Salah Alkhwlani][link-author]\n- [All Contributors][link-contributors]\n\n## License\n\nThe MIT License (MIT). Please see [License File](LICENSE.md) for more information.\n\n[ico-license]: https://img.shields.io/badge/license-MIT-brightgreen.svg?style=flat-square\n[ico-code-quality]: https://scrutinizer-ci.com/g/yemenifree/wp-security/badges/quality-score.png?b=master\n[ico-build]: https://scrutinizer-ci.com/g/yemenifree/wp-security/badges/build.png?b=master\n\n[link-author]: https://github.com/yemenifree\n[link-contributors]: ../../contributors\n[link-code-quality]: https://scrutinizer-ci.com/g/yemenifree/wp-security/code-structure\n[link-build]: https://scrutinizer-ci.com/g/yemenifree/wp-security/build-status/maste\n[link-last-version]: https://api.github.com/repos/yemenifree/wp-security/zipball\n\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsalkhwlani%2Fwp-security","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsalkhwlani%2Fwp-security","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsalkhwlani%2Fwp-security/lists"}