Admin Tools for WordPress

Emergency Off-Line switch

Put your site securely off-line in the case of an attack

Core 1.3.1

Pro 1.3.1

Master Password

Prevent that client from breaking their site by »doing nothing«

Core 1.3.1

Pro 1.3.1

Password protect WP administration

Protect access to your WordPress administration (wp-admin) directory with a username and password.

Core 1.3.1

Pro 1.3.1

Customize Permissions

ACL: fine-grained permissions, controlling which Admin Tools features each user can access.

Core 1.3.1

Pro 1.3.1

Change File & Folder Permissions

Easily change the permissions of all files and folders on your server. Permissions are fully customizable.

Core 1.3.1

Pro 1.3.1

On-the-fly link rewrite

Automatically rewrite links to point to your new site. Optionally convert HTTP links to HTTPS.

Core 1.3.1

Pro 1.3.1

Update WordPress salts

Update the WordPress salts in wp-config.php for maximum security when you create copies of sites.

Core 1.3.1

Pro 1.3.1

Password expiration

Force users to change their passwords at a regular interval you define. You can choose which roles this policy applies to.

Core 1.3.1

Pro 1.3.1

Post auto-save optimization

Choose how often WordPress auto-saves posts as you edit them and how many revisions of each post it will keep.

Core 1.3.1

Pro 1.3.1

WordPress trash interval

Choose when WordPress will permanently delete posts, pages, attachments and comments from the trash bin. Or have it skip the trash bin altogether.

Core 1.3.1

Pro 1.3.1

Manage WordPress hidden features

Easily manage WordPress features which are normally only accessible by editing the wp-config.php file such as: disable file editing, WordPress debug mode and debug log, JavaScript concatenation, memory limit and WordPress page caching.

Core 1.3.1

Pro 1.3.1

Repair and optimise tables

Repair and optimise all of your site's database tables

Core 1.3.1

Pro 1.3.1

URL redirection

Redirect old URLs or make your own URL shortener.

Core 1.3.1

Pro 1.3.1

Malware detection

Monitor your site for changed or added PHP files and assess their potential for malicious behaviour.

Core 1.3.1

Pro 1.3.1

Settings import / export

Easily duplicate Admin Tools settings between your WordPress sites.

Core 1.3.1

Pro 1.3.1

.htaccess Maker

Disable directory listings

Core 1.3.1

Pro 1.3.1

Protect against common file injection attacks

Core 1.3.1

Pro 1.3.1

Disable PHP Easter Eggs

Core 1.3.1

Pro 1.3.1

Block access to security-sensitive files

Block web access to files such as htaccess.txt, php.ini, wp-config-sample.php or readme.html in your site's root

Core 1.3.1

Pro 1.3.1

Protect against clickjacking

Core 1.3.1

Pro 1.3.1

Reduce MIME type security risks

Core 1.3.1

Pro 1.3.1

Reflected XSS prevention

Core 1.3.1

Pro 1.3.1

Remove Apache and PHP version signature

Core 1.3.1

Pro 1.3.1

Prevent content transformation

Core 1.3.1

Pro 1.3.1

Block specific user agents

Core 1.3.1

Pro 1.3.1

Block direct access to arbitrary PHP files

Protection against direct access to PHP files. It can even block access to uploaded hacking scripts, mitigating the attack.

Core 1.3.1

Pro 1.3.1

Force index.php parsing before index.html

Core 1.3.1

Pro 1.3.1

Optimise expiration time

(good for SEO)

Core 1.3.1

Pro 1.3.1

Compress static resources

Automatically compress static resources such as images, CSS, JS

Core 1.3.1

Pro 1.3.1

Redirect index.php to site root

Core 1.3.1

Pro 1.3.1

Redirect www / non-www

Redirect www to non-www, or non-www to www site, e.g. http://example.com to http://www.example.com

Core 1.3.1

Pro 1.3.1

Redirect old domain name to new domain name

Core 1.3.1

Pro 1.3.1

Force HTTPS for specific URLs

Force HTTPS even when WordPress doesn't let you to

Core 1.3.1

Pro 1.3.1

HSTS header

Increase HTTPS security by telling browsers to never access the unprotected HTTP version of your site.

Core 1.3.1

Pro 1.3.1

Disable HTTP methods TRACE and TRACK

Protect your site against XST attacks

Core 1.3.1

Pro 1.3.1

Control the Cross-Origin Resource Sharing (CORS) policy of your site

Core 1.3.1

Pro 1.3.1

Control if and what ETags will be sent

Optimize client-side caching of your site's content, especially when it's behind a load balancer.

Core 1.3.1

Pro 1.3.1

Web Application Firewall

Customised exceptions

Make specific URLs or URL patterns exempt from firewall protection

Core 1.3.1

Pro 1.3.1

Full logging of security exceptions

Core 1.3.1

Pro 1.3.1

E-Mail Notification at security exception

Send out an email when a security exception occurrs

Core 1.3.1

Pro 1.3.1

IP black-listing

Prevent access to your site by specific IP addresses or blocks of IP addresses

Core 1.3.1

Pro 1.3.1

Administrator IP whitelist

Only allow access to your site's administrator section by specific blocks of IP addresses

Core 1.3.1

Pro 1.3.1

Administrator secret URL parameter.

You can only access the administration (wp-admin) pages if you append ?secretWord to the URL. The secret word is customisable.

Core 1.3.1

Pro 1.3.1

Change administrator login URL

(e.g. use http://www.example.com/mylogin instead of http://www.example.com/wp-login)

Core 1.3.1

Pro 1.3.1

Away schedule

Prevent logging into wp-admin during a preset period every day, e.g. when you're definitely asleep.

Core 1.3.1

Pro 1.3.1

SQLiShield protection

Against SQL injection attacks

Core 1.3.1

Pro 1.3.1

Remote File Inclusion block

(RFIShield)

Core 1.3.1

Pro 1.3.1

Remote PHP protocol block

(PHPShield)

Core 1.3.1

Pro 1.3.1

Direct File Inclusion shield

(DFIShield)

Core 1.3.1

Pro 1.3.1

Uploads scanner

(UploadShield)

Core 1.3.1

Pro 1.3.1

Anti-spam filtering

Based on Bad Words list

Core 1.3.1

Pro 1.3.1

Custom login error message

Don't tell the bad guys if a certain username exists on your site or not

Core 1.3.1

Pro 1.3.1

Remove RSS links

Core 1.3.1

Pro 1.3.1

Remove blog client links

Core 1.3.1

Pro 1.3.1

Change login session duration

Core 1.3.1

Pro 1.3.1

Disable editing users' properties

Prevent Administrator / Super Administrator accounts from being edited.

Core 1.3.1

Pro 1.3.1

Block email domains from user registration

Core 1.3.1

Pro 1.3.1

Hide/customise generator meta tag

Core 1.3.1

Pro 1.3.1

Project Honeypot's HTTP:BL integration

Integration with Project Honeypot's HTTP:BL anti-spam / anti-hacker IP blocking directory

Core 1.3.1

Pro 1.3.1

Auto-ban IPs

Auto-ban IPs causing excessive security exceptions (fully customisable)

Core 1.3.1

Pro 1.3.1

Login E-Mail Notification

Send email on successful or failed administrator login

Core 1.3.1

Pro 1.3.1

Customisable email templates and rate throttling for Admin Tools emails

Core 1.3.1

Pro 1.3.1