Webtaru Site Options and Login Security

Description

Webtaru Site Options and Login Security is a comprehensive toolkit for WordPress administrators to manage essential site information, business hours, and visual branding, while simultaneously hardening your site’s security by allowing you to change the default login URL and add CAPTCHA protection.

Features

Security & Privacy

• Secure Login Customization: Change your WordPress login URL to a custom slug to prevent brute-force attacks.
• CAPTCHA Integration: Support for Google reCAPTCHA v3 and Cloudflare Turnstile to protect your login forms.
• Login Attempt Limiter: Prevent brute-force attacks by limiting failed login attempts.
• Advanced XSS Protection: Add basic and advanced security headers to protect against script injections.
• Basic Security Firewall: Block common malicious query strings, SQL injection, and malware patterns.
• Login Email Alerts: Receive instant email notifications with IP, User Agent, Time, and Site URL when someone logs in.
• REST API Restriction: Block unauthorized access to the WordPress REST API to prevent data enumeration.
• Content Protection: Disable Right-Click, Text Selection, and Copy-Paste to protect your content.
• Auto-Alt Text: Automatically fill missing Alt tags with image titles for better SEO.
• Disable Common Usernames: Prevent registration of weak usernames like “admin” to harden site security.
• Site Hardening: Restrict author archives to prevent username enumeration and improve security.

UI & UX Enhancements

• Admin Bar Zen Mode: Instantly declutter the admin bar by removing distracting logos, comments, and update nodes.
• Admin Bar Cleanup: Declutter your WordPress dashboard by selectively hiding top-level admin bar items.
• Duplicate Menu: One-click duplication of navigation menus for faster site setup.
• Sticky WhatsApp Button: Add a floating WhatsApp contact button with custom placement and messages.
• Sticky Vertical Button: Create a custom floating button for Feedback, Contact, or any custom link.
• Mobile Navigation: Fixed bottom navigation buttons specifically for mobile visitors.
• Back to Top: Smooth scrolling back-to-top button with customizable shapes and colors.
• Smooth Scrolling: Enable fluid mousewheel scrolling effect for a premium browsing experience.

Identity & Branding

• Logo Management: Easily manage Light and Dark versions of your site logo.
• Login Page Aesthetics: Customize the login page logo and background image for a premium look.
• Contact & Social Info: Manage phone numbers, emails, addresses, and social links from one place.
• Agency Mode: White-label the plugin by renaming the menu and hiding the default icon.

SEO & Communication

• Business Hours: Flexible weekly schedule management with “Open/Closed” status shortcodes.
• Schema.org Integration: Automatic LocalBusiness JSON-LD generation for improved Local SEO.
• SMTP Integration: Ensure reliable email delivery via external providers (Gmail, Outlook, etc.).
• Maintenance Mode: Toggle a professional maintenance page with dashboard status indicators.

Content Management

• Media Replacement: Upload and replace existing media files while preserving the original URL.
• Post Duplicator: Easily clone posts and pages for faster content creation.
• External Links Control: Force all external links to open in a new tab for better user retention.

Admin Workflow

• Gutenberg Control: Easily disable the Block Editor and return to the Classic interface.
• 404 Redirection: Seamlessly redirect all 404 “Not Found” errors to the homepage.
• Dynamic Menus: Automatically add conditional Log In/Out links to your navigation menus.
• One-Click Cache Flushing: Clear cache across multiple platforms (WP Rocket, LiteSpeed) on settings save.
• Remove Query Strings: Remove version query strings (?ver=) from CSS/JS for better performance scores.
• Copyright Year Shortcode: [wtols_copyright] shortcode that always shows the current year.

External services

This plugin supports the following third-party services to enhance site security:

• Google reCAPTCHA (v3): Used to protect the login form from automated bot attacks.

  • Service: Google reCAPTCHA
  • Usage: Verification of human users during login.
  • Data Sent: User’s IP address and browser interaction signals.
  • Privacy Policy: https://policies.google.com/privacy
  • Terms of Service: https://policies.google.com/terms

• Cloudflare Turnstile: A privacy-focused alternative to CAPTCHA for protecting login forms.

  • Service: Cloudflare Turnstile
  • Usage: Verification of human users during login.
  • Data Sent: Browser and device telemetry.
  • Privacy Policy: https://www.cloudflare.com/privacypolicy/
  • Terms of Service: https://www.cloudflare.com/website-terms/

Shortcodes

• [wtols_phone] – Display primary phone.
• [wtols_email] – Display primary email.
• [wtols_address] – Display business address.
• [wtols_logo] – Display light/dark logo.
• [wtols_map] – Display embedded map.
• [wtols_social_links] – Display social icons.
• [wtols_hours] – Display business hours or open/closed status.
• [wtols_contact_card] – Display a complete contact info block.