Upgrade to 3.2.2 for improved cryptographic token verification, Lifetime license persistence, and staging domain normalization.<\/p>"},"ratings":{"1":0,"2":0,"3":0,"4":0,"5":2},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3693517,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3693517,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3693517,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3693517,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.1","1.1.0","1.1.1","1.2.1","2.0.0","3.0.0","3.1.0","3.1.1","3.2.1","3.2.2"],"block_files":[],"assets_screenshots":[],"screenshots":{"1":"Main Security Dashboard showing protection score, active security modules, and status metrics.","2":"Rules Management Interface with one-click toggles and backup\/restore controls.","3":"Two-Factor Authentication (2FA) and Login Security configuration.","4":"Malware Scanner, Threat Findings table, and Quarantine Manager.","5":"Live Traffic Surveillance and IP Blocking logs."}},"plugin_section":[262246],"plugin_tags":[1174,602,1184,600,9217],"plugin_category":[54],"plugin_contributors":[263133],"plugin_business_model":[],"class_list":["post-300344","plugin","type-plugin","status-publish","hentry","plugin_section-dashboard-widgets","plugin_tags-firewall","plugin_tags-login","plugin_tags-malware","plugin_tags-security","plugin_tags-two-factor","plugin_category-security-and-spam-protection","plugin_contributors-lunexiait","plugin_committers-lunexiait"],"banners":{"banner":"https:\/\/ps.w.org\/lunexia-htaccess-shield\/assets\/banner-772x250.png?rev=3693517","banner_2x":"https:\/\/ps.w.org\/lunexia-htaccess-shield\/assets\/banner-1544x500.png?rev=3693517","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/lunexia-htaccess-shield\/assets\/icon-128x128.png?rev=3693517","icon_2x":"https:\/\/ps.w.org\/lunexia-htaccess-shield\/assets\/icon-256x256.png?rev=3693517","generated":false},"screenshots":[],"raw_content":"\n
Lunexia Security & .htaccess Shield<\/strong> is an all-in-one WordPress security suite engineered to defend your website against attacks, malicious bots, unauthorized login attempts, and malware infections. Combining proven .htaccess server hardening<\/strong>, an intelligent Web Application Firewall (WAF)<\/strong>, Two-Factor Authentication (2FA \/ OTP login protection)<\/strong>, login brute force defense<\/strong>, and a deep malware scanner with 1-click quarantine<\/strong>, Lunexia provides comprehensive website security that is ultra-lightweight, safe, and fully compatible with WordPress 7.0 Modern admin and PHP 8+.<\/p>\n\n Whether you need rock-solid login protection, two-factor authentication, malware removal, or instant .htaccess security headers, Lunexia delivers enterprise-grade protection with zero bloat.<\/p>\n\n This plugin connects to external services as follows:<\/p>\n\n Lunexia License Authority (api.lunexiait.com)<\/strong>\nThis plugin connects to the Lunexia central license server to validate commercial license authenticity, verify cryptographic Ed25519 tokens, and check domain bindings. This connection is used when activating, validating, or deactivating a license key in the plugin dashboard.<\/p>\n\n Lunexia adds OTP (one-time password) verification during login for selected user roles (such as Administrator and Editor). When enabled, users must enter a secure verification code sent to their registered email address before gaining dashboard access, effectively stopping unauthorized logins even if passwords are leaked.<\/p><\/dd>\n Yes! Lunexia includes intelligent page builder detection. Firewall inspection automatically accommodates Elementor editor previews, AJAX widget saving, and REST API publishing without false positives or 403 blocks.<\/p><\/dd>\n When the malware scanner detects a suspicious file or backdoor, you can quarantine it with a single click. The file is immediately moved into a secure, isolated quarantine directory with revoked execution permissions ( Yes. Lunexia automatically creates timestamped backups of your Lunexia can be used as your primary lightweight security shield or alongside complementary tools. Its low memory footprint and server-level rules provide exceptional performance without slowing down your site.<\/p><\/dd>\n\n<\/dl>\n\n\n\ud83d\udee1\ufe0f Key Security Features:<\/h3>\n\n
\n
wp-admin<\/code> and wp-login.php<\/code> exclusively to trusted, whitelisted IP addresses.<\/li>\n\ud83d\udd12 Security Rules Included:<\/h3>\n\n
\n
Options -Indexes<\/code>)<\/li>\nwp-config.php<\/code> database credentials and .htaccess<\/code> configuration files<\/li>\n.bak<\/code>, .sql<\/code>, .log<\/code>, .ini<\/code>, .sh<\/code>, .env<\/code>)<\/li>\nxmlrpc.php<\/code>) to block pingback DDoS and brute force amplifications<\/li>\nwp-content\/uploads\/<\/code> directory<\/li>\n?author=1<\/code>) to prevent username discovery<\/li>\n\u26a1 Safe, Non-Destructive & Reliable:<\/h3>\n\n
\n
External Services<\/h3>\n\n
\n
\n
lunexia-htaccess-shield<\/code> folder to the \/wp-content\/plugins\/<\/code> directory (or search for Lunexia Security<\/strong> in Plugins > Add New<\/strong>).<\/li>\n\n
How does the Two-Factor Authentication (2FA) and Login Protection work?<\/h3><\/dt>\n
Does this plugin work with Elementor and Gutenberg?<\/h3><\/dt>\n
How does the Malware Quarantine Manager work?<\/h3><\/dt>\n
0400<\/code>) and blocked from direct browser access. You can restore the file to its original location or delete it permanently at any time.<\/p><\/dd>\nIs this plugin safe for my server?<\/h3><\/dt>\n
.htaccess<\/code> file prior to applying any rule changes. If needed, you can restore your configuration with one click from the plugin dashboard.<\/p><\/dd>\nDoes this replace other security plugins?<\/h3><\/dt>\n
3.2.2<\/h4>\n\n
\n
3.2.1<\/h4>\n\n
\n
api.lunexiait.com<\/code> with Ed25519 cryptographic token verification and anti-tampering protection.<\/li>\nDELETE<\/code> operations.<\/li>\n3.0.0<\/h4>\n\n
\n