Title: Security Control by Reflecters Author: Reflecters Published: സെപ്റ്റംബർ 13, 2025 Last modified: സെപ്റ്റംബർ 13, 2025 --- Search plugins This plugin **hasn’t been tested with the latest 3 major releases of WordPress**. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress. ![](https://ps.w.org/security-controll-by-reflecters/assets/icon-256x256.png?rev =3361074) # Security Control by Reflecters By [Reflecters](https://profiles.wordpress.org/wearereflecters/) [Download](https://downloads.wordpress.org/plugin/security-controll-by-reflecters.1.1.zip) * [Details](https://ml.wordpress.org/plugins/security-controll-by-reflecters/#description) * [Reviews](https://ml.wordpress.org/plugins/security-controll-by-reflecters/#reviews) * [Installation](https://ml.wordpress.org/plugins/security-controll-by-reflecters/#installation) * [Development](https://ml.wordpress.org/plugins/security-controll-by-reflecters/#developers) [Support](https://wordpress.org/support/plugin/security-controll-by-reflecters/) ## Description **Security Control by Reflecters** secures WordPress by detecting new devices, blocking them with a password overlay, and alerting users with sirens and banners. ### Key Features * **New Device Detection**: Identifies new devices using a secure cookie-based system. * **Siren Password Overlay**: Blocks new devices with a full-screen password prompt( default password: `2210`). * **Broadcast Alerts**: Notifies all admin, editor, and author users with a siren sound and warning banner when a new device logs in. * **Master Admin Control**: Only the designated master admin can manage settings, block/unblock users, or reset trusted devices. * **IP Blocking**: Temporarily blocks IPs after multiple failed password attempts. * **Email Notifications**: Sends alerts to admins, editors, and authors for new device logins, blocks, or trusted devices (configurable). * **Trusted Device Management**: Allows users to trust their devices after verification and admins to manage trusted devices. * **Customizable Siren**: Upload custom MP3 audio for the siren alert. * **Security Headers**: Adds X-Frame-Options, X-Content-Type-Options, and Referrer- Policy headers for admin pages. This plugin is ideal for WordPress sites needing robust security for multi-user environments, ensuring only trusted devices access the admin area while keeping authorized users informed of potential threats. ### Additional Notes * **Default Password**: The default siren stop password is `2210`. Change it in the settings for security. * **Security**: The plugin uses nonces for AJAX security, secure cookies for device tracking, and hashes passwords client-side before transmission. * **Performance**: Uses transients for temporary data (new device detection, IP blocking) to minimize database load. * **Compatibility**: Tested with WordPress 6.8. Requires PHP 7.4+ for modern features like typed arrays. For support, contact Reflecters at [support@reflecters.com](https://ml.wordpress.org/plugins/security-controll-by-reflecters/support@reflecters.com?output_format=md) or visit [https://reflecters.com](https://reflecters.com). ## Screenshots [⌊Master Admin Setup: Prompt to select the master admin on first activation.⌉⌊Master Admin Setup: Prompt to select the master admin on first activation.⌉[ **Master Admin Setup**: Prompt to select the master admin on first activation. [⌊Settings Page: Configure plugin status, siren password, custom audio, and features.⌉⌊ Settings Page: Configure plugin status, siren password, custom audio, and features .⌉[ **Settings Page**: Configure plugin status, siren password, custom audio, and features. [⌊New Device Overlay: Full-screen password prompt for untrusted devices.⌉⌊New Device Overlay: Full-screen password prompt for untrusted devices.⌉[ **New Device Overlay**: Full-screen password prompt for untrusted devices. [⌊Warning Banner: Alert for other users when a new device logs in, with trust/block/ mute options.⌉⌊Warning Banner: Alert for other users when a new device logs in, with trust/block/mute options.⌉[ **Warning Banner**: Alert for other users when a new device logs in, with trust/ block/mute options. [⌊Trusted Devices Management: View and remove trusted devices in the settings.⌉⌊ Trusted Devices Management: View and remove trusted devices in the settings.⌉[ **Trusted Devices Management**: View and remove trusted devices in the settings. ## Installation 1. **Download and Upload**: 2. * Download the plugin zip file. * In your WordPress admin panel, go to Plugins > Add New > Upload Plugin. * Upload the zip file and click “Install Now.” 3. **Activate**: 4. * Activate the plugin through the Plugins menu in WordPress. 5. **Set Up Master Admin**: 6. * Upon activation, a notice will prompt an administrator to set the Master Admin. * Select an administrator from the dropdown and click “Set Master Admin.” 7. **Configure Settings**: 8. * Go to Settings > Siren Protector in the WordPress admin menu. * Enable the plugin (set Status to ON). * Configure the siren stop password, custom audio, and other features as needed. * Save settings to activate device monitoring and alerts. 9. **Folder Structure**: 10. * Ensure the plugin folder (`security-controll-by-reflecters`) contains: - `security-controll-by-reflecters.php` - `js/scbr-settings.js` - `js/scbr-overlay.js` - `js/scbr-broadcast.js` - `css/scbr-admin.css` ## FAQ ### What happens when a new device logs in? When an admin, editor, or author logs in from a new device, that device is blocked with a full-screen overlay requiring the siren stop password (default: `2210`). Other logged-in users (including the same user on trusted devices) see a warning banner and hear a siren (if enabled). The master admin can block the user, or any authorized user can trust the device. ### How do I trust a new device? Enter the correct siren stop password on the new device to trust it automatically. Alternatively, from another trusted device, click “Trust Device” in the warning banner. The master admin can also manage trusted devices in the settings. ### Who can block or unblock users? Only the master admin can block or unblock users via the warning banner or the settings page. Blocking a user logs them out, clears their trusted devices, and prevents further logins until unblocked. ### Why don’t I hear the siren? Browsers require user interaction (e.g., click, scroll) to play audio. The siren plays automatically after interaction. Check your browser’s sound settings (e.g.,` chrome://settings/content/sound`). You can also mute the siren via the warning banner. ### Can I change the siren sound? Yes, in Settings > Siren Protector, upload an MP3 file for a custom siren sound. Leave it blank to use the default siren. ### What roles are monitored? The plugin monitors users with admin, editor, or author roles. Contributors and subscribers are not affected. ### How do I debug issues? Enable `WP_DEBUG` in `wp-config.php` (`define('WP_DEBUG', true);`). Check the browser console (DevTools > Console) for JavaScript errors and the Network tab for AJAX responses. Verify plugin options in `wp_options` (`scbr_settings`, `scbr_blocked_users`) and transients (`scbr_trigger_*`, `scbr_broadcast`). ## Reviews ![](https://secure.gravatar.com/avatar/b70307058f097d8215a3c47e1d46685fe091cfa0ccf1aecba539b9035ce060c1? s=60&d=retro&r=g) ### 󠀁[Amazing plugin—very useful and easy to use.](https://wordpress.org/support/topic/amazing-plugin-very-useful-and-easy-to-use/)󠁿 [fahimafridi](https://profiles.wordpress.org/fahimafridi/) ഡിസംബർ 3, 2025 This plugin is extremely well-built and performs flawlessly. The interface is clean, the features are powerful, and everything works smoothly without any errors. It has definitely improved my workflow and saved me a lot of time. Highly recommended for anyone looking for a reliable and efficient solution! ![](https://secure.gravatar.com/avatar/5e5467825341f0787f534a80bc1ebfe73a4b9a299c37bb3eeb1a8df1656f9bbe? s=60&d=retro&r=g) ### 󠀁[Focused, effective device-trust layer for multi-user sites](https://wordpress.org/support/topic/focused-effective-device-trust-layer-for-multi-user-sites/)󠁿 [tasmiahasan](https://profiles.wordpress.org/tasmiahasan/) സെപ്റ്റംബർ 25, 2025 1 reply Security Control by Reflecters delivers a clear, well-scoped solution. it strengthens login hygiene by verifying new or untrusted devices before granting access. ![](https://secure.gravatar.com/avatar/cd8dd5be035a658f6f83fbf35663f6fec80259fef357354e3437e2410110165a? s=60&d=retro&r=g) ### 󠀁[Reliable and Easy-to-Use Security Plugin](https://wordpress.org/support/topic/reliable-and-easy-to-use-security-plugin/)󠁿 [rezasojib](https://profiles.wordpress.org/rezasojib/) സെപ്റ്റംബർ 24, 2025 1 reply I’ve been using Security Control by Reflecters for a few months, and it has significantly improved my site’s protection. The setup was intuitive, and I appreciated the regular updates and detailed logs. Highly recommend it for WordPress site owners! ![](https://secure.gravatar.com/avatar/e9a2bbedf7b21d2c1598dfca585771cabdede1f878c5c0aca5822c4aef3e6782? s=60&d=retro&r=g) ### 󠀁[Excellent Plugin with Great Features](https://wordpress.org/support/topic/excellent-plugin-with-great-features-2/)󠁿 [mahmuda024](https://profiles.wordpress.org/mahmuda024/) സെപ്റ്റംബർ 24, 2025 1 reply I’ve been using this plugin for a while and it has exceeded my expectations. The setup was very simple, the interface is user-friendly, and it works flawlessly without slowing down my site. I especially liked how customizable the options are. Support is also quick and helpful. Highly recommended for anyone looking for a reliable solution! ![](https://secure.gravatar.com/avatar/4fdce64e9ea4121cc1930c22a235f3d65be41011c905652d6e704d2c4a8df0b1? s=60&d=retro&r=g) ### 󠀁[Great Plugin with Useful Features](https://wordpress.org/support/topic/great-plugin-with-useful-features-5/)󠁿 [nusrat jahan lucky](https://profiles.wordpress.org/lucky60/) സെപ്റ്റംബർ 24, 2025 1 reply I have been using this plugin for a while, and my experience has been very positive. The setup was simple, and the features worked exactly as expected. The interface is user-friendly, and it made my workflow much easier. ![](https://secure.gravatar.com/avatar/0fd853e1e3b5bd923f4e7f5b802371e734f3e20936c30b000f4aac710819e542? s=60&d=retro&r=g) ### 󠀁[Excellent Plugin – Smooth and Reliable](https://wordpress.org/support/topic/excellent-plugin-smooth-and-reliable/)󠁿 [Rownok Jahan Boby](https://profiles.wordpress.org/rownokjahan/) സെപ്റ്റംബർ 24, 2025 1 reply This plugin exceeded expectations. It’s simple to set up, very intuitive to use, and runs smoothly without affecting site speed. Features work exactly as described, and the overall performance is consistent and reliable. A well-built tool that I would recommend without hesitation. [ Read all 21 reviews ](https://wordpress.org/support/plugin/security-controll-by-reflecters/reviews/) ## Contributors & Developers “Security Control by Reflecters” is open source software. The following people have contributed to this plugin. Contributors * [ Reflecters ](https://profiles.wordpress.org/wearereflecters/) [Translate “Security Control by Reflecters” into your language.](https://translate.wordpress.org/projects/wp-plugins/security-controll-by-reflecters) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/security-controll-by-reflecters/), check out the [SVN repository](https://plugins.svn.wordpress.org/security-controll-by-reflecters/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/security-controll-by-reflecters/) by [RSS](https://plugins.trac.wordpress.org/log/security-controll-by-reflecters/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.1 * Changed prefix from `wrs` to `scbr` for all options, transients, user meta, cookies, and scripts to avoid conflicts with other plugins. * Improved script and style enqueuing to load only on relevant admin pages. * Moved inline scripts and styles to proper JavaScript (`scbr-overlay.js`, `scbr- settings.js`, `scbr-broadcast.js`) and CSS (`scbr-admin.css`) files. * Added data migration during activation to preserve existing settings and user data. * Fixed plugin name to “Security Control by Reflecters” for consistency. #### 1.0 * Initial release with device-based authentication, siren alerts, master admin control, and IP blocking. * Features new device detection, broadcast alerts, and trusted device management. * Supports admin, editor, and author roles with email notifications and customizable siren audio. ## Meta * Version **1.1** * Last updated **11 മാസങ്ങള്‍ ago** * Active installations **Fewer than 10** * വേർഡ്പ്രസ്സ് പതിപ്പ് ** 5.5 അല്ലെങ്കില്‍ അതിലും ഉയര്‍ന്നത് ** * Tested up to **6.8.8** * PHP പതിപ്പ് ** 7.4 അല്ലെങ്കില്‍ അതിലും ഉയര്‍ന്നത് ** * Language * [English (US)](https://wordpress.org/plugins/security-controll-by-reflecters/) * Tags * [admin protection](https://ml.wordpress.org/plugins/tags/admin-protection/)[login security](https://ml.wordpress.org/plugins/tags/login-security/) [security](https://ml.wordpress.org/plugins/tags/security/) * [Advanced View](https://ml.wordpress.org/plugins/security-controll-by-reflecters/advanced/) ## Ratings 5ൽ 5 നക്ഷത്രങ്ങൾ. * [ 21 5-star reviews ](https://wordpress.org/support/plugin/security-controll-by-reflecters/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/security-controll-by-reflecters/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/security-controll-by-reflecters/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/security-controll-by-reflecters/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/security-controll-by-reflecters/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/security-controll-by-reflecters/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/security-controll-by-reflecters/reviews/) ## Contributors * [ Reflecters ](https://profiles.wordpress.org/wearereflecters/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/security-controll-by-reflecters/)