Loading

Documentation

=== WP Shieldora ===

Contributors: kolmiconeroyal

Tags: security, firewall, waf, malware scanner, 2fa, woocommerce security

Requires at least: 5.6

Tested up to: 6.5

Stable tag: 14.0.0

Requires PHP: 7.4

License: GPLv2 or later

License URI: https://www.gnu.org/licenses/gpl-2.0.html

The Undisputed Apex of Enterprise Security. Features Cloud Licensing, Stealth Login, Anti-Spam Shield, Nightly Scans, Geo-IP Blocking, and Threat Detection.

== Description ==

WP Shieldora is an enterprise-grade security engine engineered for businesses that need serious protection without sacrificing site speed. Unlike bloated traditional security plugins, WP Shieldora operates as a lightweight, stateless firewall that intercepts threats before WordPress even fully loads.

Built with a focus on high-volume e-commerce and agency operations, the PRO edition includes specialized features like the WooCommerce Anti-Carding Shield (which stops bots from testing stolen credit cards and getting your payment gateway suspended) and WhatsApp 2FA Login OTPs.

Key Features (Free)

  • Deep Payload Inspection: Stops SQL Injection (SQLi), Cross-Site Scripting (XSS), and Directory Traversal payloads.
  • IP Spoofing Immunity: Strictly validates X-Forwarded headers.
  • Block Fake Bots: Verifies reverse DNS to block fake Googlebots and malicious scrapers.
  • REST API Restriction: Blocks hackers from enumerating and stealing admin usernames.
  • Disable File Editor: Turns off the internal WordPress theme/plugin editor to prevent malicious injections.

Premium Features (PRO Edition)

  • WooCommerce Anti-Carding Shield: Protects your Paystack/Flutterwave merchant accounts from suspension by instantly blocking checkout bots.
  • Stealth Login Mode: Completely hides wp-login.php and /wp-admin/ behind a secret custom URL parameter.
  • WhatsApp 2FA Authentication: Delivers a secure 6-digit OTP to your phone via the Termii API.
  • Session Hijacking Prevention: Binds admin cookies to their current IP address and User-Agent.
  • Geo-IP Country Firewall: Instantly block entire high-risk regions from accessing your site.
  • 1-Click Lockdown Mode: A panic button for active DDoS attacks that drops all incoming connections except for authenticated Admins.
  • Automated Nightly Scans: Runs a deep forensic scan every night and emails the administrator if threats are found.

== Documentation ==

For complete documentation, configuration guides, and troubleshooting, please visit our official documentation page:

WP Shieldora

== Installation ==

  1. Upload the wp-shieldora directory to the /wp-content/plugins/ directory.
  2. Activate the plugin through the ‘Plugins’ menu in WordPress.
  3. Click on the ‘WP Shieldora’ tab in the left-hand WordPress menu to access your Enterprise Command Center.
  4. Review your System Score and configure your desired hardening features under the Settings tab.

== Frequently Asked Questions ==

= Does WP Shieldora slow down my website? =

No. WP Shieldora is designed as a stateless firewall. It does not bloat your database with massive log tables or run heavy CPU processes during standard page loads.

= How do I upgrade to PRO? =

You can view the pricing tiers and securely purchase a license key via Flutterwave directly from the “Settings & PRO” tab inside the plugin dashboard.

= What happens if I get locked out using Stealth Login? =

If you lose your secret login URL, you can temporarily disable the plugin by renaming the plugin folder via FTP or your hosting file manager.

== Changelog ==

= 14.0.0 =

  • Major Refactoring: Compliant with WPBay Marketplace Standards.
  • Security: Sanitized all superglobals and fully implemented the WP_Filesystem API for secure data handling.
  • UI: Updated the React Dashboard with brand new WP Shieldora branding and animated scanning.
  • Fix: Addressed direct database queries and replaced highly dangerous automated operations with safe WordPress core functions.