{"id":306505,"date":"2026-05-08T07:42:49","date_gmt":"2026-05-08T07:42:49","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/dynamic-contact-access\/"},"modified":"2026-05-15T06:35:30","modified_gmt":"2026-05-15T06:35:30","slug":"webtaru-site-options-login-security","status":"publish","type":"plugin","link":"https:\/\/fa.wordpress.org\/plugins\/webtaru-site-options-login-security\/","author":13408420,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"2.6.0","stable_tag":"2.6.0","tested":"6.9.4","requires":"5.8","requires_php":"7.4","requires_plugins":null,"header_name":"Webtaru Site Options and Login Security","header_author":"Aaditya Sharma","header_description":"Securely manage site options, logos, social links, schema.org, and enhance login security with CAPTCHA and custom login URL.","assets_banners_color":"fcfcfc","last_updated":"2026-05-15 06:35:30","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/github.com\/geekyaaditya\/webtaru-site-options-login-security","header_author_uri":"https:\/\/profiles.wordpress.org\/aadityasharma\/","rating":5,"author_block_rating":0,"active_installs":0,"downloads":244,"num_ratings":3,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","changelog"],"tags":{"2.3.0":{"tag":"2.3.0","author":"AadityaSharma","date":"2026-05-08 08:43:55"},"2.4.0":{"tag":"2.4.0","author":"AadityaSharma","date":"2026-05-12 02:04:44"},"2.6.0":{"tag":"2.6.0","author":"AadityaSharma","date":"2026-05-15 06:35:30"}},"upgrade_notice":[],"ratings":{"1":0,"2":0,"3":0,"4":0,"5":3},"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3526244,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3526244,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3526256,"resolution":"772x250","location":"assets","locale":"","width":1544,"height":500}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["2.3.0","2.4.0","2.6.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3526244,"resolution":"1","location":"assets","locale":"","width":2902,"height":1658},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3526244,"resolution":"2","location":"assets","locale":"","width":2558,"height":1398},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3526244,"resolution":"3","location":"assets","locale":"","width":2532,"height":1594},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3526244,"resolution":"4","location":"assets","locale":"","width":2576,"height":1420},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3526244,"resolution":"5","location":"assets","locale":"","width":2528,"height":1538}},"screenshots":{"1":"Dashboard overview and contact details.","2":"Floating widgets","3":"Login protection and brute force settings.","4":"Workflow Utilities have disable Gutenberg, comment etc.","5":"System and backup options."},"jetpack_post_was_ever_published":false},"plugin_section":[262246],"plugin_tags":[83,155767,157352,602,600],"plugin_category":[38,44,54],"plugin_contributors":[262274],"plugin_business_model":[],"class_list":["post-306505","plugin","type-plugin","status-publish","hentry","plugin_section-dashboard-widgets","plugin_tags-admin","plugin_tags-classic-editor","plugin_tags-clear-cache","plugin_tags-login","plugin_tags-security","plugin_category-authentication","plugin_category-discussion-and-community","plugin_category-security-and-spam-protection","plugin_contributors-aadityasharma","plugin_committers-aadityasharma"],"banners":{"banner":"https:\/\/ps.w.org\/webtaru-site-options-login-security\/assets\/banner-772x250.png?rev=3526256","banner_2x":"https:\/\/ps.w.org\/webtaru-site-options-login-security\/assets\/banner-1544x500.png?rev=3526244","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/webtaru-site-options-login-security\/assets\/icon-256x256.png?rev=3526244","icon_2x":"https:\/\/ps.w.org\/webtaru-site-options-login-security\/assets\/icon-256x256.png?rev=3526244","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/webtaru-site-options-login-security\/assets\/screenshot-1.png?rev=3526244","caption":"Dashboard overview and contact details."},{"src":"https:\/\/ps.w.org\/webtaru-site-options-login-security\/assets\/screenshot-2.png?rev=3526244","caption":"Floating widgets"},{"src":"https:\/\/ps.w.org\/webtaru-site-options-login-security\/assets\/screenshot-3.png?rev=3526244","caption":"Login protection and brute force settings."},{"src":"https:\/\/ps.w.org\/webtaru-site-options-login-security\/assets\/screenshot-4.png?rev=3526244","caption":"Workflow Utilities have disable Gutenberg, comment etc."},{"src":"https:\/\/ps.w.org\/webtaru-site-options-login-security\/assets\/screenshot-5.png?rev=3526244","caption":"System and backup options."}],"raw_content":"<!--section=description-->\n<p>Webtaru Site Options and Login Security is a comprehensive toolkit for WordPress administrators to manage essential site information, business hours, and visual branding, while simultaneously hardening your site's security by allowing you to change the default login URL and add CAPTCHA protection.<\/p>\n\n<h3>Features<\/h3>\n\n<h4>Security &amp; Privacy<\/h4>\n\n<ul>\n<li><strong>Secure Login Customization:<\/strong> Change your WordPress login URL to a custom slug to prevent brute-force attacks.<\/li>\n<li><strong>CAPTCHA Integration:<\/strong> Support for Google reCAPTCHA v3 and Cloudflare Turnstile to protect your login forms.<\/li>\n<li><strong>Login Attempt Limiter:<\/strong> Prevent brute-force attacks by limiting failed login attempts.<\/li>\n<li><strong>Advanced XSS Protection:<\/strong> Add basic and advanced security headers to protect against script injections.<\/li>\n<li><strong>Basic Security Firewall:<\/strong> Block common malicious query strings, SQL injection, and malware patterns.<\/li>\n<li><strong>Login Email Alerts:<\/strong> Receive instant email notifications with IP, User Agent, Time, and Site URL when someone logs in.<\/li>\n<li><strong>REST API Restriction:<\/strong> Block unauthorized access to the WordPress REST API to prevent data enumeration.<\/li>\n<li><strong>Content Protection:<\/strong> Disable Right-Click, Text Selection, and Copy-Paste to protect your content.<\/li>\n<li><strong>Auto-Alt Text:<\/strong> Automatically fill missing Alt tags with image titles for better SEO.<\/li>\n<li><strong>Disable Common Usernames:<\/strong> Prevent registration of weak usernames like \"admin\" to harden site security.<\/li>\n<li><strong>Site Hardening:<\/strong> Restrict author archives to prevent username enumeration and improve security.<\/li>\n<\/ul>\n\n<h4>UI &amp; UX Enhancements<\/h4>\n\n<ul>\n<li><strong>Admin Bar Zen Mode:<\/strong> Instantly declutter the admin bar by removing distracting logos, comments, and update nodes.<\/li>\n<li><strong>Admin Bar Cleanup:<\/strong> Declutter your WordPress dashboard by selectively hiding top-level admin bar items.<\/li>\n<li><strong>Duplicate Menu:<\/strong> One-click duplication of navigation menus for faster site setup.<\/li>\n<li><strong>Sticky WhatsApp Button:<\/strong> Add a floating WhatsApp contact button with custom placement and messages.<\/li>\n<li><strong>Sticky Vertical Button:<\/strong> Create a custom floating button for Feedback, Contact, or any custom link.<\/li>\n<li><strong>Mobile Navigation:<\/strong> Fixed bottom navigation buttons specifically for mobile visitors.<\/li>\n<li><strong>Back to Top:<\/strong> Smooth scrolling back-to-top button with customizable shapes and colors.<\/li>\n<li><strong>Smooth Scrolling:<\/strong> Enable fluid mousewheel scrolling effect for a premium browsing experience.<\/li>\n<\/ul>\n\n<h4>Identity &amp; Branding<\/h4>\n\n<ul>\n<li><strong>Logo Management:<\/strong> Easily manage Light and Dark versions of your site logo.<\/li>\n<li><strong>Login Page Aesthetics:<\/strong> Customize the login page logo and background image for a premium look.<\/li>\n<li><strong>Contact &amp; Social Info:<\/strong> Manage phone numbers, emails, addresses, and social links from one place.<\/li>\n<li><strong>Agency Mode:<\/strong> White-label the plugin by renaming the menu and hiding the default icon.<\/li>\n<\/ul>\n\n<h4>SEO &amp; Communication<\/h4>\n\n<ul>\n<li><strong>Business Hours:<\/strong> Flexible weekly schedule management with \"Open\/Closed\" status shortcodes.<\/li>\n<li><strong>Schema.org Integration:<\/strong> Automatic LocalBusiness JSON-LD generation for improved Local SEO.<\/li>\n<li><strong>SMTP Integration:<\/strong> Ensure reliable email delivery via external providers (Gmail, Outlook, etc.).<\/li>\n<li><strong>Maintenance Mode:<\/strong> Toggle a professional maintenance page with dashboard status indicators.<\/li>\n<\/ul>\n\n<h4>Content Management<\/h4>\n\n<ul>\n<li><strong>Media Replacement:<\/strong> Upload and replace existing media files while preserving the original URL.<\/li>\n<li><strong>Post Duplicator:<\/strong> Easily clone posts and pages for faster content creation.<\/li>\n<li><strong>External Links Control:<\/strong> Force all external links to open in a new tab for better user retention.<\/li>\n<\/ul>\n\n<h4>Admin Workflow<\/h4>\n\n<ul>\n<li><strong>Gutenberg Control:<\/strong> Easily disable the Block Editor and return to the Classic interface.<\/li>\n<li><strong>404 Redirection:<\/strong> Seamlessly redirect all 404 \"Not Found\" errors to the homepage.<\/li>\n<li><strong>Dynamic Menus:<\/strong> Automatically add conditional Log In\/Out links to your navigation menus.<\/li>\n<li><strong>One-Click Cache Flushing:<\/strong> Clear cache across multiple platforms (WP Rocket, LiteSpeed) on settings save.<\/li>\n<li><strong>Remove Query Strings:<\/strong> Remove version query strings (?ver=) from CSS\/JS for better performance scores.<\/li>\n<li><strong>Copyright Year Shortcode:<\/strong> <code>[wtols_copyright]<\/code> shortcode that always shows the current year.<\/li>\n<\/ul>\n\n<h3>External services<\/h3>\n\n<p>This plugin supports the following third-party services to enhance site security:<\/p>\n\n<ul>\n<li><p><strong>Google reCAPTCHA (v3):<\/strong> Used to protect the login form from automated bot attacks.<\/p>\n\n<ul>\n<li><strong>Service:<\/strong> Google reCAPTCHA<\/li>\n<li><strong>Usage:<\/strong> Verification of human users during login.<\/li>\n<li><strong>Data Sent:<\/strong> User's IP address and browser interaction signals.<\/li>\n<li><strong>Privacy Policy:<\/strong> https:\/\/policies.google.com\/privacy<\/li>\n<li><strong>Terms of Service:<\/strong> https:\/\/policies.google.com\/terms<\/li>\n<\/ul><\/li>\n<li><p><strong>Cloudflare Turnstile:<\/strong> A privacy-focused alternative to CAPTCHA for protecting login forms.<\/p>\n\n<ul>\n<li><strong>Service:<\/strong> Cloudflare Turnstile<\/li>\n<li><strong>Usage:<\/strong> Verification of human users during login.<\/li>\n<li><strong>Data Sent:<\/strong> Browser and device telemetry.<\/li>\n<li><strong>Privacy Policy:<\/strong> https:\/\/www.cloudflare.com\/privacypolicy\/<\/li>\n<li><strong>Terms of Service:<\/strong> https:\/\/www.cloudflare.com\/website-terms\/<\/li>\n<\/ul><\/li>\n<\/ul>\n\n<h3>Shortcodes<\/h3>\n\n<ul>\n<li><code>[wtols_phone]<\/code> - Display primary phone.<\/li>\n<li><code>[wtols_email]<\/code> - Display primary email.<\/li>\n<li><code>[wtols_address]<\/code> - Display business address.<\/li>\n<li><code>[wtols_logo]<\/code> - Display light\/dark logo.<\/li>\n<li><code>[wtols_map]<\/code> - Display embedded map.<\/li>\n<li><code>[wtols_social_links]<\/code> - Display social icons.<\/li>\n<li><code>[wtols_hours]<\/code> - Display business hours or open\/closed status.<\/li>\n<li><code>[wtols_contact_card]<\/code> - Display a complete contact info block.<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>webtaru-site-options-login-security<\/code> folder to the <code>\/wp-content\/plugins\/<\/code> directory.<\/li>\n<li>Activate the plugin through the 'Plugins' menu in WordPress.<\/li>\n<li>Navigate to <strong>Webtaru Site Options<\/strong> in your admin menu to configure settings.<\/li>\n<\/ol>\n\n<!--section=changelog-->\n<h4>2.6.0<\/h4>\n\n<ul>\n<li>IMPROVED: Full security audit with late-stage escaping for all outputs.<\/li>\n<li>IMPROVED: Enhanced input sanitization for better data integrity.<\/li>\n<li>IMPROVED: PHP 8.2 compatibility fixes.<\/li>\n<li>UPDATED: Tested up to WordPress 6.9.<\/li>\n<li>UPDATED: Plugin tags for better repository visibility.<\/li>\n<li>New: Content Protection (Disable Right-Click, Selection, and Copy-Paste).<\/li>\n<li>New: Auto-Alt Text for missing image Alt tags.<\/li>\n<li>New: Duplicate Menu functionality in the menu editor.<\/li>\n<li>New: Remove Query Strings (?ver=) for improved caching and speed scores.<\/li>\n<li>New: <code>[wtols_copyright]<\/code> shortcode for automatic copyright year updates.<\/li>\n<li>New: Login Email Alerts with custom email recipient and Site URL support.<\/li>\n<li>New: Basic Security Firewall and REST API Restriction for unauthorized users.<\/li>\n<li>New: Admin Bar Zen Mode for a distraction-free experience.<\/li>\n<li>Improved: Login alert now uses site-configured time format and provides tracking links.<\/li>\n<\/ul>\n\n<h4>2.5.0<\/h4>\n\n<ul>\n<li>New: Advanced XSS Protection (Basic &amp; Advanced modes).<\/li>\n<li>New: Disable Common Usernames feature with admin dashboard notification.<\/li>\n<li>New: Smooth Scrolling (Fluid Mousewheel) enhancement.<\/li>\n<li>Fix: Sticky Header layout overlap with WordPress admin sidebar.<\/li>\n<li>Fix: Removed incorrect references to SVG Support and Robots.txt Editor.<\/li>\n<\/ul>\n\n<h4>2.4.0<\/h4>\n\n<ul>\n<li>NEW: Professional Media Replacement module with AJAX upload.<\/li>\n<li>NEW: Full SMTP mail delivery integration with test email capability.<\/li>\n<li>NEW: Admin Bar Cleanup feature to declutter the top admin bar.<\/li>\n<li>IMPROVED: Security hardening and output escaping for WordPress.org compliance.<\/li>\n<li>IMPROVED: Broadened detection for third-party Admin Bar nodes (Forms, Elementor, etc.).<\/li>\n<li>FIXED: Capturing of raw HTML in Admin Bar node titles.<\/li>\n<li>REMOVED: Prohibited update-blocking features for repository standards.<\/li>\n<\/ul>\n\n<h4>2.3.0<\/h4>\n\n<ul>\n<li>NEW: SVG file upload support with strict XML tag sanitization.<\/li>\n<li>NEW: Maintenance Mode admin bar indicator and search engine visibility alerts.<\/li>\n<li>NEW: Advanced redirect controls (404 to Homepage, Custom Login\/Logout redirects).<\/li>\n<li>NEW: \"Disable Author Archives\" for better security and SEO.<\/li>\n<li>NEW: Automated conditional Log In\/Log Out menu items.<\/li>\n<li>NEW: \"Open External Links in New Tab\" post content filter.<\/li>\n<li>NEW: Admin functionality to manage and overwrite <code>robots.txt<\/code> output.<\/li>\n<li>IMPROVED: Login UI CSS constrained logo width and fixed background attachment.<\/li>\n<li>IMPROVED: Direct wp-admin access attempts now seamlessly redirect to the homepage.<\/li>\n<\/ul>\n\n<h4>2.2.6<\/h4>\n\n<ul>\n<li>Refactored and rebranded as \"Webtaru Site Options and Login Security\".<\/li>\n<li>REMOVED: Prohibited arbitrary code insertion features.<\/li>\n<li>HARDENED: Security through strict input sanitization and late-stage output escaping.<\/li>\n<li>UPDATED: Documentation to disclose external service usage.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release of the rebranded version.<\/li>\n<\/ul>","raw_excerpt":"Manage contact info, business hours, schema SEO, and harden login security with custom slugs and CAPTCHA from a single premium admin panel.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/306505","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=306505"}],"author":[{"embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/aadityasharma"}],"wp:attachment":[{"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=306505"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=306505"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=306505"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=306505"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=306505"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/fa.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=306505"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}