Plugins

Spy options

Simone Fioravanti

Get a list of which plugin use which option and delete unused ones.

Download

More Info
SEO Canonical Extended

IndoCreativeMedia

Extends insertion of rel canonical link into wp_head for all non-singular pages.

Download

More Info
Limit Login Attempts NG

Simone Fioravanti

Limit rate of login attempts, including by way of cookies, for each IP.

Download

More Info
Limit the number of login attempts possible both through normal login as well as using auth cookies.

By default WordPress allows unlimited login attempts either through the login page or by sending special cookies. This allows passwords (or hashes) to be brute-force cracked with relative ease.

Limit Login Attempts blocks an Internet address from making further attempts after a specified limit on retries is reached, making a brute-force attack difficult or impossible.

This plugin is a fork of Limit Login Attempts Copyright 2008 – 2012 Johan Eenfeldt

Features
- Limit the number of retry attempts when logging in (for each IP). Fully customizable
- Limit the number of attempts to log in using auth cookies in same way
- Informs user about remaining retries or lockout time on login page
- Optional logging, optional email notification
- Handles server behind reverse proxy
- It is possible to whitelist IPs using a filter. But you probably shouldn’t. :-)
Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Italian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish

Plugin uses standard actions and filters only.

Installation
1. Download and extract plugin files to a wp-content/plugin directory.
2. Activate the plugin through the WordPress admin interface.
3. Customize the settings on the options page, if desired. If your server is located behind a reverse proxy make sure to change this setting.
If you have any questions or problems please make a post here: http://wordpress.org/tags/limit-login-attempts

Frequently Asked Questions

= Why not reset failed attempts on a successful login? =

This is very much by design. Otherwise you could brute force the “admin” password by logging in as your own user every 4th attempt.

= What is this option about site connection and reverse proxy? =

A reverse proxy is a server in between the site and the Internet (perhaps handling caching or load-balancing). This makes getting the correct client IP to block slightly more complicated.

The option default to NOT being behind a proxy — which should be by far the common case.

= How do I know if my site is behind a reverse proxy? =

You probably are not or you would know. We show a pretty good guess on the option page. Set the option using this unless you are sure you know better.

= Can I whitelist my IP so I don’t get locked out? =

First please consider if you really need this. Generally speaking it is not a good idea to have exceptions to your security policies.

That said, there is now a filter which allows you to do it: “limit_login_whitelist_ip”.

Example:

function my_ip_whitelist($allow, $ip) { return ($ip ## 'my-ip') ? true : $allow; }
add_filter(‘limit_login_whitelist_ip’, ‘my_ip_whitelist’, 10, 2);

Note that we still do notification and logging as usual. This is meant to allow you to be aware of any suspicious activity from whitelisted IPs.

= I locked myself out testing this thing, what do I do? =

Either wait, or:

If you know how to edit / add to PHP files you can use the IP whitelist functionality described above. You should then use the “Restore Lockouts” button on the plugin settings page and remove the whitelist function again.

If you have ftp / ssh access to the site rename the file “wp-content/plugins/limit-login-attempts/limit-login-attempts.php” to deactivate the plugin.

If you have access to the database (for example through phpMyAdmin) you can clear the limit_login_lockouts option in the wordpress options table. In a default setup this would work: “UPDATE wp_options SET option_value = ” WHERE option_name = ‘limit_login_lockouts'”

= How many IPs are logged? =

By default 250.

That said, there is now a filter which allows you to do it: “limit_login_log_max_ips”.

Setting the value to 0 means no limits.

Example:

function limit_login_log_unlimited_ips($max_ips) { return 0; } add_filter('limit_login_log_max_ips', 'limit_login_log_unlimited_ips', 10, 2);
Also In This Collection

ElisabettaC77

Create Post Collections, show Collection information on posts and show a list of Collections.

Download

More Info
Group related posts in a collection. Automatically insert a list of all posts in the collection as part of the content.

Manually embed a collection listing with the provided shortcode and widget. Override the series template with a custom template.

How To Use

Create new Collection terms from the Collection manager under Posts. Add posts to collection either through the quick edit screen or through the full edit screen.

Also In This Collection can be configured to automatically insert a collection listing in posts belonging to a collection.

To do so, navigate to Also In This Collection settings under the settings option.

Settings
- Title heading level sets the HTML tag that will wrap the collection title in collection inserted automatically, with shortcodes, and with widgets.
- Title template picks from a list of title presets for displaying the title, including a preset for no title.
- Automatically display collection listing on post allows for automatic listing insertion in posts that belong to a collection.
- Order of collection display controls the order of posts (newest first or oldest first) in collection listings.
- Window collection listing display creates a window around the current post in a collection listing. This is useful for large collections where it is cumbersome to show the entire listing at once.
- Do not display collection listing prevents the collection listing from being shown. When checked, a link to the collection is always shown.
- Always show collection link forces a link to the collection archive regardless of windowing. When unchecked, a link to the collection will not be shown when the entire collection listing is visible.
Shortcode

To manually insert the collection listing of a post within a collection as part of the content, use the shortcode [alsointhiscollection].

This will have no effect if the post isn’t in a collection.

To manually insert a specific collection, use the collection-slug attribute with the shortcode like [alsointhiscollection collection-slug=”your-collection-slug”].

The shortcode attributes are
- collection-slug=”slug”
- use-frame=”yes|no”
- frame-width=”number”
- sort-order=”asc|desc”
- title-wrap=”h1|h2|h3|span”
- title-template=”also-in|ordinal|none”
- hide-collection-listing=”yes|no”
- always-link-collection=”yes|no”
Widget

A widget that exposes all of the above options is available.

Custom Template

If you’d like to use your own collection listing template, there are two options available.
- Place a template file also-in-this-collection/collectionlisting.php in your theme.
- Use the alsointhiscollection_template filter to provide an absolute path to a template file.
Installation
1. Unpack the plugin zip and upload the contents to the /wp-content/plugins/ directory. Alternatively, upload the plugin zip via the install screen within the WordPress Plugins manager
2. Activate the plugin through the Plugins manager in WordPress
ClassicPress password fixer

Simone Fioravanti

Fix passwords issues when migrating from WP 6.8.x

Download

More Info
Hordes

tradesouthwest

Front side submitted form to add links or bookmarks of websites. Made for creators and ClassicPress.

Download

More Info
VertyCal

tradesouthwest

Schedule based vertical table data application to post service calls or list events. Front side calendar is viewable by the public or private. Front side calendar is viewable by the public and the input functions restricted to a log in access only. Appointment Calendar layout vertically for mobile readability. Front-side form private. Front-side readable to public select-able.

Download

More Info
X Smtp

Simone Fioravanti

Configure a SMTP server to send email from your site. Adds a page under "General Settings" where you can configure the parameters of the SMTP.

Download

More Info
Switch to ClassicPress

ClassicPress

Switch your WordPress installation to ClassicPress. Also a tool to try different versions of ClassicPress (also nightly builds or RC).

Download

More Info
Basic Info Tool

tradesouthwest

Display site information on your ClassicPress administrator screen to display what version of PHP is running and much more.

Download

More Info
You can pass the information to others, like a support team or maybe to test what version of PHP you have when a plugin tells you that you are required to have a certain version of PHP, in order to load the plugin or theme.

Installation

This section describes how to install the plugin and get it working.
1. Upload the plugin files to the /wp-content/plugins/ directory, or install the plugin through the WordPress plugins screen directly.
2. Activate the plugin through the ‘Plugins’ screen in WordPress
3. Use the ‘Tools’->’Basic Info Tool’ screen to get your WordPress debug information.
4. Copy this information and send it to your developer / support engineer.
Basci Info example

Frequently Asked Questions

Where do I see my debug information =

You may go to ‘Tools’ > ‘Basic Info Tool’ to view your ClassicPress environment debug information.
Changelog

= 1.0.2

fix headers

Initial release

Upgrade Notice

= 1.0.0 = Minor bug fixes
Spoof User Agent

Simone Fioravanti

Change your User Agent to whatever you want. Go to Settings > Spoof User Agent to configure the User Agent exposed when doing HTTP requests.

Download

More Info
Share Classicly

Kelson Vibber

Adds a link to ShareOpenly at the end of your posts so that readers can share to Mastodon, Bluesky, and similar open social media

Download

More Info
Stable tag: 0.4
Tags: sharing, fediverse, mastodon, classicpress
Contributors: Kelson
License: GPLv2 or later

Adds a link to the ShareOpenly service at the end of your posts for easy sharing to Mastodon, Bluesky, Threads and similar open social media sites.

Description

Adds a link to the ShareOpenly service at the end of you posts so that readers can easily share them to Mastodon, Bluesky, Threads and similar open social media sites. No remote scripts or data are loaded until the visitor clicks on the link.

The plugin is built for ClassicPress, but will probably work fine on WordPress too.

Notes

ShareOpenly is a service built and run by Ben Werdmuller. I just used the link format described at Add ShareOpenly links to your site.

There is a WordPress plugin that does something similar, but it detects when it’s running on ClassicPress and deactivates itself. I thought about forking it, but decided to just write my own, since I’d already done it myself with Eleventy. I did not read any of that plugin’s code except for the function that blocks running on forks — which I’m obviously not using here! — and did not reference any of it when writing this one.

Installation

Add share-classicly.zip from the latest release using your plugin dashboard, or unzip it yourself and upload the share-classicly folder to wp-content/plugins/, or (once it’s approved) install it from the ClassicPress Plugin Directory.

Then just activate it. Nothing else special is needed.

Changelog

[0.4] – 2024-11-23
- Change default link text and make it customizable.
[0.3] – 2024-11-14
- More code cleanup.
- Submit to plugin directory.
[0.2] – 2024-11-11
- Code cleanup.
- Use translatable text.
- Add option for whether to show on posts, pages or both.
[0.1pre] – 2024-10-31
- Initial prototype.
Source on Codeberg.
Mirror on GitHub.
Plugin page at ClassicPress.

(c) 2024 Kelson Vibber