a:7:{s:4:"slug";s:13:"login_protect";s:10:"properties";a:13:{s:4:"slug";s:13:"login_protect";s:4:"name";s:11:"Login Guard";s:21:"show_module_menu_item";b:0;s:19:"show_module_options";b:1;s:11:"storage_key";s:12:"loginprotect";s:7:"tagline";s:83:"Block brute force attacks and secure user identities with Two-Factor Authentication";s:12:"show_central";b:1;s:17:"access_restricted";b:1;s:7:"premium";b:0;s:18:"run_if_whitelisted";b:1;s:19:"run_if_verified_bot";b:0;s:12:"run_if_wpcli";b:0;s:5:"order";i:40;}s:13:"admin_notices";a:1:{s:23:"email-verification-sent";a:7:{s:2:"id";s:23:"email-verification-sent";s:8:"schedule";s:10:"conditions";s:16:"plugin_page_only";b:1;s:11:"can_dismiss";b:0;s:4:"type";s:7:"warning";s:12:"plugin_admin";s:3:"yes";s:11:"valid_admin";b:1;}}s:8:"sections";a:10:{i:0;a:5:{s:4:"slug";s:36:"section_brute_force_login_protection";s:7:"primary";b:1;s:5:"title";s:23:"Brute Force Login Guard";s:11:"title_short";s:11:"Brute Force";s:7:"summary";a:2:{i:0;s:87:"Purpose - Blocks brute force hacking attacks against your login and registration pages.";i:1;s:57:"Recommendation - Use of this feature is highly recommend.";}}i:1;a:4:{s:4:"slug";s:17:"section_recaptcha";s:5:"title";s:16:"Google reCAPTCHA";s:11:"title_short";s:9:"reCAPTCHA";s:7:"summary";a:3:{i:0;s:51:"Purpose - Adds Google reCAPTCHA to the Login Forms.";i:1;s:37:"Recommendation - Keep this turned on.";i:2;s:109:"Note - You will need to register for Google reCAPTCHA keys and store them in the Shield 'Dashboard' settings.";}}i:2;a:4:{s:4:"slug";s:17:"section_2fa_email";s:5:"title";s:31:"Email Two-Factor Authentication";s:11:"title_short";s:11:"2FA - Email";s:7:"summary";a:3:{i:0;s:102:"Purpose - Verifies the identity of users who log in to your site using email-based one-time-passwords.";i:1;s:127:"Recommendation - Use of this feature is highly recommend. However, if your host blocks email sending you may lock yourself out.";i:2;s:77:"Note: You may combine multiple authentication factors for increased security.";}}i:3;a:4:{s:4:"slug";s:14:"section_2fa_ga";s:5:"title";s:46:"Google Authenticator Two-Factor Authentication";s:11:"title_short";s:26:"2FA - Google Authenticator";s:7:"summary";a:3:{i:0;s:111:"Purpose - Verifies the identity of users who log in to your site using Google Authenticator one-time-passwords.";i:1;s:127:"Recommendation - Use of this feature is highly recommend. However, if your host blocks email sending you may lock yourself out.";i:2;s:77:"Note: You may combine multiple authentication factors for increased security.";}}i:4;a:4:{s:4:"slug";s:30:"section_yubikey_authentication";s:5:"title";s:33:"Yubikey Two-Factor Authentication";s:11:"title_short";s:12:"2FA -Yubikey";s:7:"summary";a:2:{i:0;s:98:"Purpose - Verifies the identity of users who log in to your site using Yubikey one-time-passwords.";i:1;s:77:"Note: You may combine multiple authentication factors for increased security.";}}i:5;a:4:{s:4:"slug";s:34:"section_multifactor_authentication";s:5:"title";s:27:"Multi-Factor Authentication";s:11:"title_short";s:13:"2-Factor Auth";s:7:"summary";a:3:{i:0;s:103:"Purpose - Verifies the identity of users who log in to your site - i.e. they are who they say they are.";i:1;s:127:"Recommendation - Use of this feature is highly recommend. However, if your host blocks email sending you may lock yourself out.";i:2;s:77:"Note: You may combine multiple authentication factors for increased security.";}}i:6;a:4:{s:4:"slug";s:22:"section_rename_wplogin";s:5:"title";s:18:"Hide WP Login Page";s:11:"title_short";s:15:"Hide Login Page";s:7:"summary";a:2:{i:0;s:142:"Purpose - To hide your wp-login.php page from brute force attacks and hacking attempts - if your login page cannot be found, no-one can login.";i:1;s:145:"Recommendation - This is not required for complete security and if your site has irregular or inconsistent configuration it may not work for you.";}}i:7;a:4:{s:4:"slug";s:21:"section_user_messages";s:5:"title";s:13:"User Messages";s:11:"title_short";s:13:"User Messages";s:7:"summary";a:3:{i:0;s:51:"Purpose - Customize the messages shown to visitors.";i:1;s:70:"Recommendation - Be sure to change the messages to suit your audience.";i:2;s:75:"Hint - To reset any message to its default, enter the text exactly: default";}}i:8;a:4:{s:4:"slug";s:46:"section_enable_plugin_feature_login_protection";s:5:"title";s:26:"Disable Login Guard Module";s:11:"title_short";s:7:"Disable";s:7:"summary";a:2:{i:0;s:91:"Purpose - Login Guard blocks all automated and brute force attempts to log in to your site.";i:1;s:55:"Recommendation - Keep the Login Guard module turned on.";}}i:9;a:2:{s:4:"slug";s:14:"section_non_ui";s:6:"hidden";b:1;}}s:7:"options";a:24:{i:0;a:9:{s:3:"key";s:20:"enable_login_protect";s:7:"section";s:46:"section_enable_plugin_feature_login_protection";s:7:"default";s:1:"Y";s:4:"type";s:8:"checkbox";s:9:"link_info";s:19:"https://shsec.io/51";s:9:"link_blog";s:23:"https://shsec.io/wpsf03";s:4:"name";s:18:"Enable Login Guard";s:7:"summary";s:42:"Enable (or Disable) The Login Guard Module";s:11:"description";s:70:"Un-Checking this option will completely disable the Login Guard module";}i:1;a:10:{s:3:"key";s:19:"rename_wplogin_path";s:7:"section";s:22:"section_rename_wplogin";s:9:"sensitive";b:1;s:7:"default";s:0:"";s:4:"type";s:4:"text";s:9:"link_info";s:19:"https://shsec.io/5q";s:9:"link_blog";s:19:"https://shsec.io/5r";s:4:"name";s:15:"Hide Login Page";s:7:"summary";s:31:"Rename The WordPress Login Page";s:11:"description";s:101:"Creating a path here will disable your 'wp-login.php'. Only letters and numbers are permitted: abc123";}i:2;a:9:{s:3:"key";s:29:"enable_chained_authentication";s:7:"section";s:34:"section_multifactor_authentication";s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:19:"https://shsec.io/9r";s:9:"link_blog";s:19:"https://shsec.io/84";s:4:"name";s:27:"Multi-Factor Authentication";s:7:"summary";s:41:"Require All Active Authentication Factors";s:11:"description";s:123:"When enabled, all multi-factor authentication methods will be applied to a user login. Disable to only require one to pass.";}i:3;a:11:{s:3:"key";s:8:"mfa_skip";s:7:"section";s:34:"section_multifactor_authentication";s:7:"premium";b:1;s:7:"default";i:0;s:3:"min";i:0;s:4:"type";s:7:"integer";s:9:"link_info";s:19:"https://shsec.io/b1";s:9:"link_blog";s:0:"";s:4:"name";s:20:"Multi-Factor By-Pass";s:7:"summary";s:79:"A User Can By-Pass Multi-Factor Authentication (MFA) For The Set Number Of Days";s:11:"description";s:98:"Enter the number of days a user can by-pass future MFA after a successful MFA-login. 0 to disable.";}i:4;a:10:{s:3:"key";s:17:"allow_backupcodes";s:7:"section";s:34:"section_multifactor_authentication";s:7:"premium";b:1;s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:19:"https://shsec.io/dx";s:9:"link_blog";s:19:"https://shsec.io/dy";s:4:"name";s:18:"Allow Backup Codes";s:7:"summary";s:37:"Allow Users To Generate A Backup Code";s:11:"description";s:95:"Allow users to generate a backup code that can be used to login if MFA factors are unavailable.";}i:5;a:9:{s:3:"key";s:27:"enable_google_authenticator";s:7:"section";s:14:"section_2fa_ga";s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:22:"https://shsec.io/shld7";s:9:"link_blog";s:22:"https://shsec.io/shld6";s:4:"name";s:27:"Enable Google Authenticator";s:7:"summary";s:39:"Allow Users To Use Google Authenticator";s:11:"description";s:101:"When enabled, users will have the option to add Google Authenticator to their WordPress user profile.";}i:6;a:9:{s:3:"key";s:27:"enable_email_authentication";s:7:"section";s:17:"section_2fa_email";s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:19:"https://shsec.io/3t";s:9:"link_blog";s:19:"https://shsec.io/9q";s:4:"name";s:27:"Enable Email Authentication";s:7:"summary";s:40:"Two-Factor Login Authentication By Email";s:11:"description";s:90:"All users will be required to verify their login by email-based two-factor authentication.";}i:7;a:10:{s:3:"key";s:26:"two_factor_auth_user_roles";s:7:"section";s:17:"section_2fa_email";s:4:"type";s:15:"multiple_select";s:7:"default";a:4:{i:0;s:11:"contributor";i:1;s:6:"author";i:2;s:6:"editor";i:3;s:13:"administrator";}s:13:"value_options";a:10:{i:0;a:2:{s:9:"value_key";s:10:"subscriber";s:4:"text";s:11:"Subscribers";}i:1;a:2:{s:9:"value_key";s:11:"contributor";s:4:"text";s:12:"Contributors";}i:2;a:2:{s:9:"value_key";s:6:"author";s:4:"text";s:7:"Authors";}i:3;a:2:{s:9:"value_key";s:6:"editor";s:4:"text";s:7:"Editors";}i:4;a:2:{s:9:"value_key";s:13:"administrator";s:4:"text";s:14:"Administrators";}i:5;a:2:{s:9:"value_key";s:8:"customer";s:4:"text";s:14:"[Woo] Customer";}i:6;a:2:{s:9:"value_key";s:12:"shop_manager";s:4:"text";s:22:"[Woo/EDD] Shop Manager";}i:7;a:2:{s:9:"value_key";s:15:"shop_accountant";s:4:"text";s:21:"[EDD] Shop Accountant";}i:8;a:2:{s:9:"value_key";s:11:"shop_worker";s:4:"text";s:17:"[EDD] Shop Worker";}i:9;a:2:{s:9:"value_key";s:14:"edd_subscriber";s:4:"text";s:14:"[EDD] Customer";}}s:9:"link_info";s:19:"https://shsec.io/4v";s:9:"link_blog";s:0:"";s:4:"name";s:30:"Enforce - Email Authentication";s:7:"summary";s:46:"All User Roles Subject To Email Authentication";s:11:"description";s:130:"Enforces email-based authentication on all users with the selected roles. Note: This setting only applies to email authentication.";}i:8;a:10:{s:3:"key";s:18:"email_any_user_set";s:7:"section";s:17:"section_2fa_email";s:7:"premium";b:1;s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:19:"https://shsec.io/gj";s:9:"link_blog";s:0:"";s:4:"name";s:14:"Allow Any User";s:7:"summary";s:60:"Allow Any User To Turn-On Two-Factor Authentication By Email";s:11:"description";s:61:"Allow Any User To Turn-On Two-Factor Authentication By Email.";}i:9;a:10:{s:3:"key";s:24:"bot_protection_locations";s:7:"section";s:36:"section_brute_force_login_protection";s:4:"type";s:15:"multiple_select";s:7:"default";a:1:{i:0;s:5:"login";}s:13:"value_options";a:4:{i:0;a:2:{s:9:"value_key";s:5:"login";s:4:"text";s:5:"Login";}i:1;a:2:{s:9:"value_key";s:8:"register";s:4:"text";s:8:"Register";}i:2;a:2:{s:9:"value_key";s:8:"password";s:4:"text";s:13:"Lost Password";}i:3;a:2:{s:9:"value_key";s:12:"checkout_woo";s:4:"text";s:22:"Checkout (WooCommerce)";}}s:9:"link_info";s:19:"https://shsec.io/dv";s:9:"link_blog";s:0:"";s:4:"name";s:20:"Protection Locations";s:7:"summary";s:38:"How Google reCAPTCHA Will Be Displayed";s:11:"description";s:64:"Choose for which forms bot protection measures will be deployed.";}i:10;a:10:{s:3:"key";s:20:"login_limit_interval";s:7:"section";s:36:"section_brute_force_login_protection";s:7:"default";s:2:"10";s:3:"min";i:0;s:4:"type";s:7:"integer";s:9:"link_info";s:19:"https://shsec.io/3q";s:9:"link_blog";s:19:"https://shsec.io/9o";s:4:"name";s:23:"Login Cooldown Interval";s:7:"summary";s:39:"Limit login attempts to every X seconds";s:11:"description";s:109:"WordPress will process only ONE login attempt for every number of seconds specified. Zero (0) turns this off.";}i:11;a:9:{s:3:"key";s:23:"enable_login_gasp_check";s:7:"section";s:36:"section_brute_force_login_protection";s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:19:"https://shsec.io/3r";s:9:"link_blog";s:19:"https://shsec.io/9n";s:4:"name";s:14:"Bot Protection";s:7:"summary";s:54:"Protect WP Login From Automated Login Attempts By Bots";s:11:"description";s:138:"Adds a dynamically (Javascript) generated checkbox to the login form that prevents bots using automated login techniques. Recommended: ON.";}i:12;a:10:{s:3:"key";s:29:"enable_google_recaptcha_login";s:7:"section";s:36:"section_brute_force_login_protection";s:7:"default";s:8:"disabled";s:4:"type";s:6:"select";s:13:"value_options";a:5:{i:0;a:2:{s:9:"value_key";s:8:"disabled";s:4:"text";s:8:"Disabled";}i:1;a:2:{s:9:"value_key";s:7:"default";s:4:"text";s:13:"Default Style";}i:2;a:2:{s:9:"value_key";s:5:"light";s:4:"text";s:11:"Light Theme";}i:3;a:2:{s:9:"value_key";s:4:"dark";s:4:"text";s:10:"Dark Theme";}i:4;a:2:{s:9:"value_key";s:9:"invisible";s:4:"text";s:9:"Invisible";}}s:9:"link_info";s:19:"https://shsec.io/9m";s:9:"link_blog";s:22:"https://shsec.io/shld5";s:4:"name";s:16:"Google reCAPTCHA";s:7:"summary";s:23:"Enable Google reCAPTCHA";s:11:"description";s:41:"Use Google reCAPTCHA on the login screen.";}i:13;a:10:{s:3:"key";s:17:"enable_antibot_js";s:7:"section";s:36:"section_brute_force_login_protection";s:7:"premium";b:1;s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:19:"https://shsec.io/dw";s:9:"link_blog";s:0:"";s:4:"name";s:10:"AntiBot JS";s:7:"summary";s:42:"Load Anti-Bot JS For 3rd Party Login Forms";s:11:"description";s:79:"Important: This is experimental. Please contact support for further assistance.";}i:14;a:9:{s:3:"key";s:16:"antibot_form_ids";s:7:"section";s:36:"section_brute_force_login_protection";s:4:"type";s:5:"array";s:7:"default";a:2:{i:0;s:19:"form#ihc_login_form";i:1;s:15:"form#createuser";}s:9:"link_info";s:0:"";s:9:"link_blog";s:0:"";s:4:"name";s:13:"AntiBot Forms";s:7:"summary";s:66:"Enter The IDs Of The 3rd Party Login Forms For Use With AntiBot JS";s:11:"description";s:32:"For Use With AnitBot JS (above).";}i:15;a:9:{s:3:"key";s:14:"enable_yubikey";s:7:"section";s:30:"section_yubikey_authentication";s:7:"default";s:1:"N";s:4:"type";s:8:"checkbox";s:9:"link_info";s:19:"https://shsec.io/4f";s:9:"link_blog";s:19:"https://shsec.io/9t";s:4:"name";s:29:"Enable Yubikey Authentication";s:7:"summary";s:49:"Turn On / Off Yubikey Authentication On This Site";s:11:"description";s:99:"Combined with your Yubikey API Key (below) this will form the basis of your Yubikey Authentication.";}i:16;a:10:{s:3:"key";s:14:"yubikey_app_id";s:7:"section";s:30:"section_yubikey_authentication";s:9:"sensitive";b:1;s:7:"default";s:0:"";s:4:"type";s:4:"text";s:9:"link_info";s:19:"https://shsec.io/4g";s:9:"link_blog";s:0:"";s:4:"name";s:14:"Yubikey App ID";s:7:"summary";s:26:"Your Unique Yubikey App ID";s:11:"description";s:91:"Combined with your Yubikey API Key this will form the basis of your Yubikey Authentication.";}i:17;a:10:{s:3:"key";s:15:"yubikey_api_key";s:7:"section";s:30:"section_yubikey_authentication";s:9:"sensitive";b:1;s:7:"default";s:0:"";s:4:"type";s:4:"text";s:9:"link_info";s:19:"https://shsec.io/4g";s:9:"link_blog";s:0:"";s:4:"name";s:15:"Yubikey API Key";s:7:"summary";s:31:"Your Unique Yubikey App API Key";s:11:"description";s:90:"Combined with your Yubikey App ID this will form the basis of your Yubikey Authentication.";}i:18;a:11:{s:3:"key";s:13:"text_imahuman";s:7:"section";s:21:"section_user_messages";s:9:"sensitive";b:1;s:7:"premium";b:1;s:7:"default";s:7:"default";s:4:"type";s:4:"text";s:9:"link_info";s:19:"https://shsec.io/dz";s:9:"link_blog";s:0:"";s:4:"name";s:18:"GASP Checkbox Text";s:7:"summary";s:47:"The Message Displayed Next To The GASP Checkbox";s:11:"description";s:99:"You can change the text displayed to the user beside the checkbox if you need a customized message.";}i:19;a:11:{s:3:"key";s:19:"text_pleasecheckbox";s:7:"section";s:21:"section_user_messages";s:9:"sensitive";b:1;s:7:"premium";b:1;s:7:"default";s:7:"default";s:4:"type";s:4:"text";s:9:"link_info";s:19:"https://shsec.io/dz";s:9:"link_blog";s:0:"";s:4:"name";s:15:"GASP Alert Text";s:7:"summary";s:55:"The Message Displayed If The User Doesn't Check The Box";s:11:"description";s:95:"You can change the text displayed to the user in the alert message if they don't check the box.";}i:20;a:6:{s:3:"key";s:26:"email_can_send_verified_at";s:7:"section";s:14:"section_non_ui";s:12:"transferable";b:0;s:4:"type";s:7:"integer";s:7:"default";i:0;s:3:"min";i:0;}i:21;a:6:{s:3:"key";s:8:"gasp_key";s:7:"section";s:14:"section_non_ui";s:12:"transferable";b:0;s:9:"sensitive";b:1;s:4:"type";s:4:"text";s:7:"default";s:0:"";}i:22;a:6:{s:3:"key";s:21:"two_factor_secret_key";s:7:"section";s:14:"section_non_ui";s:12:"transferable";b:0;s:9:"sensitive";b:1;s:4:"type";s:4:"text";s:7:"default";s:0:"";}i:23;a:5:{s:3:"key";s:21:"use_login_intent_page";s:7:"section";s:14:"section_non_ui";s:12:"transferable";b:0;s:4:"type";s:7:"boolean";s:5:"value";b:1;}}s:11:"definitions";a:2:{s:20:"login_intent_timeout";i:5;s:6:"events";a:16:{s:23:"2fa_backupcode_verified";a:0:{}s:19:"2fa_backupcode_fail";a:1:{s:7:"offense";b:1;}s:18:"2fa_email_verified";a:0:{}s:21:"2fa_email_verify_fail";a:1:{s:7:"offense";b:1;}s:23:"2fa_googleauth_verified";a:0:{}s:15:"2fa_google_fail";a:1:{s:7:"offense";b:1;}s:20:"2fa_yubikey_verified";a:0:{}s:16:"2fa_yubikey_fail";a:1:{s:7:"offense";b:1;}s:22:"2fa_email_send_success";a:0:{}s:19:"2fa_email_send_fail";a:0:{}s:13:"cooldown_fail";a:0:{}s:13:"honeypot_fail";a:0:{}s:11:"botbox_fail";a:0:{}s:11:"login_block";a:3:{s:5:"audit";b:0;s:6:"recent";b:1;s:7:"offense";b:1;}s:14:"hide_login_url";a:1:{s:5:"audit";b:0;}s:11:"2fa_success";a:2:{s:5:"audit";b:0;s:6:"recent";b:1;}}}s:10:"meta_modts";i:1582499933;}