| 1 |
=== WebTotem Security === |
| 2 |
Contributors: wordpress@wtsec |
| 3 |
Donate Link: https://wtotem.com/ |
| 4 |
Tags: security, firewall, monitoring, scan, antivirus, wtotem, protection, wt-security |
| 5 |
Requires at least: 5.0 |
| 6 |
Tested up to: 5.9 |
| 7 |
Requires PHP: 7.0 |
| 8 |
|
| 9 |
WebTotem is a SaaS which provides powerful tools for securing and monitoring your website in one place in easy and flexible way. |
| 10 |
|
| 11 |
== Description == |
| 12 |
|
| 13 |
**WebTotem Security** – is a security plugin for WordPress that monitors websites and prevents website attacks with the help of special internal and external utilities. |
| 14 |
|
| 15 |
## Internal utilities:## |
| 16 |
1) **Antivirus** looks for shells, viruses, obfuscations, or file changes. |
| 17 |
2) **Firewall** checks client requests to the server preventing SQL injections, XSS, or DDOS attacks. |
| 18 |
|
| 19 |
## External utilities:## |
| 20 |
1) **Deface scanner** shows the substitution of pages by hackers on the website. |
| 21 |
2) **SSL module** shows the expiration date of the website SSL certificate. |
| 22 |
3) **Port scanner** detects open ports on the web server that can be exploited by intruders. |
| 23 |
4) **Reputation module** shows blacklist entries. |
| 24 |
5) **Accessibility module** tracks the website availability and page response time. |
| 25 |
6) **Technology module** detects the technology stack and its versions. |
| 26 |
7) **Server Resources module** shows RAM/CPU load data and server disc usage. |
| 27 |
|
| 28 |
It is required to have an account on [WebTotem](https://wtotem.com/) to use the extension. |
| 29 |
|
| 30 |
== Installation == |
| 31 |
Installing the WebTotem security plugin is very simple. Detailed description of the process with screenshots is available [here](https://docs.wtotem.com/plugin-for-wordpress) , however below we give a short instruction. |
| 32 |
|
| 33 |
To install WebTotem Security: |
| 34 |
|
| 35 |
1. Go to the "Plugins" page and then select "Add New", |
| 36 |
2. Search for our plugin using the name "WebTotem Security", |
| 37 |
3. Once you have installed the plugin, you need to activate it. Go to the "Installed Plugins" page and click on the "Activate" button, |
| 38 |
4. Go to the [WebTotem](https://wtotem.com/cabinet/profile/keys) and Generate an API-key on the "API-keys" page, |
| 39 |
5. Use the API-key to activate plugin in the Wordpress admin panel on the "WebTotem Security" page. |
| 40 |
|
| 41 |
Visit the [Support Forum](https://wordpress.org/support/plugin/wt-security/) to ask questions, report bugs or suggest new features. |
| 42 |
|
| 43 |
== Frequently Asked Questions == |
| 44 |
|
| 45 |
More information on the WebTotem Security plugin can be found in our [Help Center](https://docs.wtotem.com/plugin-for-wordpress). |
| 46 |
|
| 47 |
= SETUP = |
| 48 |
**Why can’t I activate Wordpress plugin with API-Keys?** |
| 49 |
It is required to copy API-Key immediately after it has been generated. Since we don't store API-Keys with authentic namings for the sake of security issues. If you did not copy it from generation window, we recommend you to delete it, generate a new one again and copy it with original naming. |
| 50 |
|
| 51 |
= FIREWALL = |
| 52 |
**Why doesn’t firewall block the attacks?** |
| 53 |
After installation the firewall is undergoing training for two weeks, analyzing the operation of the system and all requests. Upon completion of the training, the firewall will start to block attacks. If after two weeks after installation the firewall does not block attacks, then contact support. |
| 54 |
|
| 55 |
**Does GDN send my data to other WebTotem clients?** |
| 56 |
Thanks for the question. You don't have to worry about your personal data. GDN option shares data collected between your websites and does not share it with other WebTotem clients. |
| 57 |
|
| 58 |
= ANTIVIRUS = |
| 59 |
**How does antivirus work?** |
| 60 |
Our antivirus scans every 6 hours and scans automatically each time the filesystem changes. In other words, if you upload a new file to your website our antivirus scans it immediately. There is also an option to start manual scanning by clicking the rescan button in the right top of the module. Manual scanning shows the same results if no changes to filesystem has occured since the last automatic scanning. |
| 61 |
|
| 62 |
**How do I delete an infected file?** |
| 63 |
It is impossible to completely delete a file marked as infected by an antivirus using our service. This can be a vital file for your website. You can quarantine this file. To do this, select the site you need in your personal account. Go to the antivirus module, click the "SHOW MORE" button, configure the filter for infected files and click the "trash bin" icon next to the file name. |
| 64 |
|
| 65 |
== Screenshots == |
| 66 |
1. Dashboard - Shows statistics for all modules. |
| 67 |
2. Firewall - Shows firewall activity, attacks map. |
| 68 |
3. Antivirus - Shows antivirus and quarantine logs. |
| 69 |
4. Settings - Offers multiple settings to configure the functionality of the plugin. |
| 70 |
4. Reports - Offers multiple tools to create reports. |
| 71 |
|
| 72 |
== Changelog == |
| 73 |
|
| 74 |
= 2.4.2 = |
| 75 |
* Fixed multisite page view |
| 76 |
|
| 77 |
= 2.4.1 = |
| 78 |
* Added multisite support. |
| 79 |
* All settings have been moved to the settings page. |
| 80 |
* Internal improvements. |
| 81 |
|
| 82 |
= 2.3.47 = |
| 83 |
* Change title for request counter on WAF blocks |
| 84 |
* Fixed adding domains. |
| 85 |
|
| 86 |
= 2.3.46 = |
| 87 |
* Fixed adding IDN domains |
| 88 |
|
| 89 |
= 2.3.45 = |
| 90 |
* Fixed page reload issue |
| 91 |
|
| 92 |
= 2.3.44 = |
| 93 |
* Fixed a problem with viewing AV logs |
| 94 |
|
| 95 |
= 2.3.43 = |
| 96 |
* Added URL white list |
| 97 |
* Fixed the issue of time zone |
| 98 |
|
| 99 |
= 2.3.42 = |
| 100 |
* Added port ignore list |
| 101 |
* Added the ability to send IP addresses by list |
| 102 |
* Added notifications settings |
| 103 |
|
| 104 |
= 2.3.41 = |
| 105 |
* Fixed the issue of reinstalling agents |
| 106 |
|
| 107 |
= 2.3.40 = |
| 108 |
* Fixed styles |
| 109 |
|
| 110 |
= 2.3.39 = |
| 111 |
* Added antivirus last scan time |
| 112 |
|
| 113 |
= 2.3.38 = |
| 114 |
* Fixed an issue with API key authorization |
| 115 |
|
| 116 |
= 2.3.37 = |
| 117 |
* Fixed the issue of deleting agent files |
| 118 |
|
| 119 |
= 2.3.36 = |
| 120 |
* Fixed redirects issue |
| 121 |
|
| 122 |
= 2.3.35 = |
| 123 |
* Fixed the authorization issue |
| 124 |
|
| 125 |
= 2.3.34 = |
| 126 |
* Changed the translation algorithm |
| 127 |
* Added ru-Ru language |
| 128 |
|
| 129 |
= 2.3.33 = |
| 130 |
* Fixed logout bug |
| 131 |
|
| 132 |
= 2.3.32 = |
| 133 |
* Fixed waf training period |
| 134 |
|
| 135 |
= 2.3.31 = |
| 136 |
* Changed display of data |
| 137 |
|
| 138 |
= 2.3.30 = |
| 139 |
* Fixed file filter by status |
| 140 |
* Updated agents statuses |
| 141 |
|
| 142 |
= 2.3.29 = |
| 143 |
* Fixed styles dark mode |
| 144 |
* Logic changed, agents are removed when logout |
| 145 |
|
| 146 |
= 2.3.28 = |
| 147 |
* Updated plugin information |
| 148 |
* Updated screenshots |
| 149 |
|
| 150 |
= 2.3.27 = |
| 151 |
* Fixed the issue of deactivating the plugin |
| 152 |
|
| 153 |
= 2.3.26 = |
| 154 |
* Fixed the issue of adding a file to the quarantine |
| 155 |
|
| 156 |
= 2.3.25 = |
| 157 |
* Added analytics system |
| 158 |
|
| 159 |
= 2.3.24 = |
| 160 |
* Added Firewall advanced options allow/deny list |
| 161 |
|
| 162 |
= 2.3.23 = |
| 163 |
* Fixed conflict with some plugins |
| 164 |
* Fixed session errors in the "site health" section |
| 165 |
|
| 166 |
= 2.3.1-22 = |
| 167 |
* Added antivirus permission changed filter |
| 168 |
* Added download antivirus log |
| 169 |
* Added antivirus rescan |
| 170 |
* Fixed plugin deactivation bug |
| 171 |
* Fixed the issue of adding sites with www |
| 172 |
|
| 173 |
= 2.3 = |
| 174 |
* Added report page |
| 175 |
* Limit login attempt option |
| 176 |
* Added file quarantine |
| 177 |
* Added Server resources module |
| 178 |
|
| 179 |
= 2.2 = |
| 180 |
* Added settings page |
| 181 |
* Fixed data display error |
| 182 |
* Added dark mode |
| 183 |
* Added attacks map view |
| 184 |
|
| 185 |
= 1.1 = |
| 186 |
* Disable waf in admin page |
| 187 |
|
| 188 |
== Upgrade Notice == |
| 189 |
= 1.0 = |
| 190 |
Publishing the plugin |
| 191 |
|
