Description
BotFirewall is a powerful and modern plugin designed to protect your WordPress site from malicious bots, spam, and DDoS attacks. Using advanced JavaScript verification and encrypted cookies, BotFirewall ensures robust security without disrupting the experience of real users.
Why Do You Need BotFirewall?
In today’s internet landscape, bots make up a significant portion of web traffic, and many of them are malicious. They can attack your site, send spam, scrape content, or attempt to hack login pages like wp-login.php
. BotFirewall addresses these threats by providing smart and flexible protection that:
– Blocks bots with seamless JavaScript verification that most bots cannot pass.
– Secures key pages like wp-login.php
and wp-signup.php
from unauthorized access.
– Uses encrypted cookies to ensure only verified users gain access.
– Offers customizable settings through an intuitive interface in the WordPress admin panel.
Key Features of BotFirewall
- JavaScript Verification: Ensures visitors can execute JavaScript, effectively filtering out most bots.
- Encrypted Cookies: Cookies are tied to IP and User-Agent for enhanced security against spoofing.
- Customizable Page Protection: Enable or disable protection for
wp-login.php
andwp-signup.php
pages via settings. - Whitelist and Blacklist: Configure lists of allowed bots (e.g., Googlebot) and IPs, and block known malicious IPs.
- Real-Time Statistics: Monitor bot activity with detailed stats – see how many were blocked or passed verification.
- Action Logging: All actions (blocks, successful verifications) are logged for analysis.
- Lightweight and Fast: Optimized for minimal impact on site performance.
- Clean Uninstall: Removes all data, including logs and settings, upon deactivation and deletion.
- Customizable Verification Page: Tailor the text (title, description, countdown) and CSS styling of the verification page to match your site’s design.
- Enhanced Support: Get assistance directly through Live Chat in the Support tab for quick resolution of issues.
How Does BotFirewall Work?
BotFirewall employs a multi-layered protection system:
1. Cookie Check: If a visitor has a valid cookie, they bypass additional checks.
2. Whitelist: Known “good” bots (e.g., search engine crawlers) are automatically allowed.
3. JavaScript Verification: If no cookie is present, the visitor is redirected to a verification page where they must execute a JavaScript request. Bots unable to run JavaScript are blocked.
4. Login Page Protection: Optionally protect wp-login.php
and wp-signup.php
to prevent brute-force attacks.
5. Post-Verification Redirect: After successful verification, the user is redirected to their original page, and a cookie is set for future visits.
Why BotFirewall is a Must-Have for Your Site
- Spam and DDoS Protection: Effectively blocks bots that attempt to spam or overload your site.
- Login Security: Safeguards
wp-login.php
andwp-signup.php
from unauthorized access and brute-force attacks. - Flexibility: Customize protection with whitelists, blacklists, cookie lifetime settings, and verification page styling.
- Transparency: Detailed statistics and logs let you monitor bot activity.
- Ease of Use: A user-friendly interface in the WordPress admin panel makes configuration a breeze.
- Professional Look: Customize the verification page with your own text, styles, and a modern font (Roboto) for a polished appearance.
- Reliable Support: Access our support team via Live Chat for help with any technical or security issues.
BotFirewall is an essential tool for WordPress site owners who want to protect their content, users, and server from malicious bots. Install BotFirewall today and secure your site with confidence!
Installation
- Upload the
botfirewall
folder to the/wp-content/plugins/
directory. - Activate the plugin through the ‘Plugins’ menu in WordPress.
- Go to the BotFirewall menu in your admin dashboard to configure settings.
- Optionally, enable protection for
wp-login.php
andwp-signup.php
in the Settings tab. - Customize the verification page text and styling in the Customization tab.
FAQ
-
How does BotFirewall detect bots?
-
BotFirewall uses JavaScript verification to detect bots. If a visitor cannot execute JavaScript, they are considered a bot and blocked. Additionally, it checks for a valid cookie to allow verified users to bypass the verification process.
-
Can I allow search engine bots like Googlebot?
-
Yes! You can add search engine bots to the whitelist in the Settings tab. For example, add “Googlebot” or “Bingbot” to the “Whitelisted Bots” list, and they will be allowed to access your site without verification.
-
Does BotFirewall protect my login page?
-
Yes, you can enable protection for
wp-login.php
andwp-signup.php
in the Settings tab. This helps prevent brute-force attacks and unauthorized access to these sensitive pages. -
What happens if a visitor fails verification?
-
If a visitor fails verification (e.g., they cannot execute JavaScript), they will be blocked, and the attempt will be logged in
/wp-content/botfirewall-logs/blocked.log
with details like IP, User-Agent, and timestamp. -
Does BotFirewall slow down my site?
-
No, BotFirewall is lightweight and optimized for performance. It only triggers verification for unverified visitors, and the process is seamless for real users.
-
Can I customize the verification process?
-
Yes, you can customize the cookie lifetime, whitelist bots and IPs, blacklist IPs, and choose whether to protect specific pages like
wp-login.php
andwp-signup.php
through the Settings tab. Additionally, you can customize the verification page text and styling in the Customization tab. -
What happens when I uninstall the plugin?
-
BotFirewall performs a clean uninstall, removing all its settings, logs, and data from your WordPress installation, leaving no trace behind.
-
Can I preview my verification page customizations?
-
Yes! In the Customization tab, you can use the Preview button to see how your verification page will look with the customized text and styles before saving.
-
How can I get help if I encounter issues?
-
Visit the Support tab in the BotFirewall admin panel to access our Live Chat feature, where you can get real-time assistance from our support team for any technical or security concerns.
Reviews
Contributors & Developers
“BotFirewall” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “BotFirewall” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
2.1.6
- Added Customization tab to allow tailoring of verification page text and CSS styling.
- Integrated local Roboto font for a modern look on the verification page.
- Added Preview and Reset buttons in the Customization tab for easier design adjustments.
- Introduced Support tab with Live Chat for real-time assistance.
2.1.5
- Initial release with JavaScript verification, encrypted cookies, and full logging.
- Added settings to protect
wp-login.php
andwp-signup.php
.