=== BulletProof Security ===
Contributors: Edward Alexander
Donate link: http://www.ait-pro.com/aitpro-blog/331/bulletproof-security-plugin-support/bulletproof-security-donations-page/
Tags: bulletproof, security, secure, htaccess, chmod, maintenance, plugin, private, privacy, protection, permissions, 503, base64, injection, code, encode, script, attack, hack, hackers, blocked, prevention 
Requires at least: 2.8
Tested up to: 3.1-alpha
Stable tag: .45.6

Fast one click switching between secure .htaccess security modes and maintenance mode from within the Dashboard. 

== Description ==

Protects your website from ALL XSS & SQL Injection hacking attempts. Base64_encode code injection blocked. BPS protects wp-config.php, php.ini and php5.ini files with .htaccess protection. One-click .htaccess security file activation. One-click website under maintenance mode activation (HTTP 503). Hide your WordPress version - WP Generator META tag removed, Check and ensure WP DB errors are off, Check WordPress file and folder permissions, Extensive system info (PHP, MySQL, OS, Memory Usage, IP, Max file size info, etc.). Security Status checking.

The BulletProof Security plugin is designed to be a fast, simple and convenient one click method for you to
switch between different levels of .htaccess website security and .htaccess maintenance modes from within
your WordPress Dashboard. The BulletProof Security WordPress plugin is a one click solution that simply copies,
renames and moves the provided .htaccess master files in the BulletProof Security plugin folder to either your root
folder or your /wp-admin folder or both from within your WordPress Dashboard.

There is no need to access your website via FTP or your Web Host Control Panel in order to switch between
BulletProof Security Maintenance Mode(503 Website Under Maintenance), WordPress Default .htaccess Mode and
BulletProof Security .htaccess Mode. In BulletProof Security Mode your WordPress website is protected from
ALL XSS and SQL Injection hacking attacks. The maintenance .htaccess file allows website developers or
website owners to access and work on a website while a 503 Website Under Maintenance page is displayed to
all other visitors to the website.

WordPress is already very secure, but every website, no matter what type of platform it is built on should
be using a secure .htaccess file as a standard website security measure.
* Additional website security measures and protection
* Additional system information and status display

* If you are upgrading from a previous version - download the existing BulletProof /htaccess folder and /backup
folder first before upgrading if you made customizations or modifications to any of the BPS files. 
* jQuery UI Tabbed Menu with CSS Hover Menu Buttons - see screenshot
* Message Display System
* wp-config.php file is .htaccess protected by BPS .45.4
* php.ini and php5.ini files are .htaccess protected by BPS .45.4
* WordPress Database Errors Are Turned Off - Verification of DB errors off and function insurance
* WordPress Version Is Not Displayed / Not Shown - WordPress version is removed
* WP Generator Meta Tag Removed From The WordPress Core
* The Administrator username “admin” is not being used - check for admin username
* System Information Page PHP, MySQL, Server Info, Memory Usage, Upload size, etc. - see screenshot
* Security Status Page - see screenshot
* Help & FAQ page
* BPS Pro Modules Page - BPS Pro Modules are installed separately
* Backup and Restore your original existing .htaccess files
* Backup and Restore customized / modified .htaccess files
* Use the provided BulletProof .htaccess files or create your own .htaccess files for BulletProof Security to manage for you 
* One-click security mode switching in less than 5 seconds from within the Dashboard
* Secure .htaccess file blocks XSS, SQL Injection attacks and base64_encode attacks
* Website Developer Maintenance Mode (503 Site open to Developer / Site Owner ONLY)
* Log in / out of your website while in Maintenance Mode
* File and Folder Permission Checking
* Customizable 503 Website Under Maintenance Page w/Javascript countdown timer
* Extensive Read Me! help hover ToolTips throughout the BulletProof Security plugin options page

== Installation ==

1. If you are upgrading BPS - download your backed up, customized or modified .htaccess files first before upgrading
2. The location for .htaccess master files is /bulletproof-security/admin/htaccess/
3. For new installations - If you are downloading the zip file from the WordPress Plugin Directory.
4. Download the bulletproof-security.zip file to your computer and unzip it.
5. Upload the bulletproof-security folder (including all files within) to your /wp-content/plugins folder.
6. Activate the BulletProof Security plugin.
7. Activating BulletProof Security DOES NOT enable any of the BulletProof Security .htaccess modes.
8. BulletProof .45.6 includes Backup and Restore. Back up your existing .htaccess files first before enabling any BulletProof Security Modes.
9. To enable BulletProof Security modes, click on the Settings link under BulletProof Security on your Plugins page.
10. Click on the Read Me First link at the top of the BulletProof Security Settings page. Enjoy!

== Frequently Asked Questions ==

= BulletProof Security will not update or install directly from WordPress =

There was a temporary problem with installing and downloading BPS between
10-18-2010 and 10-19-2010. That problem was resolved by some awesome dude or dudess
at WordPress.

= How does the BulletProof Security Plugin work? =

The BulletProof Security Plugin is a secure radio button form with options
that you select for what level of .htaccess security you want for your root
and /wp-admin folders. You can switch between (enable) all available modes
- default .htacces security, bulletproof .htaccess security and maintenance modes
in less than 5 seconds - ALL from within your WordPress Dashboard - No need to
access your site via FTP or your web host Control Panel to do anything more. 

= Are there any known conflicts with other WordPress Plugins? =

Not as this time. Bug fixes completed for: Ozh' Admin Drop Down Menu, ComicPress, 
Simple Facebook Connect and W3 Total Cache. At this time AITpro.com has not been 
notified of any other plugin conflicts. If you know of a plugin that conflicts with 
BulletProof Security please notify AITpro.com.

= Can I add my own .htaccess code to the BulletProof .htaccess files? =

Yes.  Of course. The secure.htaccess and wpadmin-secure.htaccess BulletProof files contain
 .htaccess code that protects your website against ALL XSS (Cross Site Scripting) and SQL Injection
hacking attacks. Add your own additional .htaccess code to the master .htaccess
files to make them even more BulletProof to hackers.

= Does the BulletProof Plugin create or write the .htaccess files? =

No. The .htaccess files have already been created for you so you can just add more code
to them or create completely new .htaccess master files if you want and just use BulletProof
Security to manage the files for you. BulletProof Security is designed to handle copying,
renaming and moving of the master .htaccess files. File writing will be included in later
versions of BulletProof Security.

== Screenshots ==

1. BulletProof Security Modes page
2. BulletProof Security Status page
3. BulletProof System Information page

== Changelog ==

= .45.6 =
* !!!CRITICAL UPDATE!!!
* New SQL Injection hacking method blocked - New code added to master .htaccess files
* BPS was finally successfully hacked after 7 months and thousands of hacking attempts
* This update prevents this latest new SQL Injection hacking method
* Installing BPS does not activate the new BPS .45.6 .htaccess files
* After installation please activate the BPS .45.6 BulletProof modes
* Please download your current htaccess files first before activating BPS .45.6 Security Modes

= .45.5 =
* The SVN DB problem for BPS was fixed by some awesome person at WP!
* WP ROCKS!!! BPS .45.5 will install successfully now. ;)
* Bug fixes: W3 Total Cache, Simple Facebook Connect, Ozh' Admin Drop Down Menu, ComicPress
* Permanent coding fixes incorporated into master htaccess files to replace workarounds
* Additional mission critical PHP Info checks added
* Php.ini and php5.ini files are now protected by BulletProof Security
* Updated BPS help files - AITpro.com site help files pending
* nick nacks here and there

= .45.4 =
* SVN DB Corruption - unable to use this version - will not download - will not install
* Bug fixes: W3 Total Cache, Simple Facebook Connect, Ozh' Admin Drop Down Menu, ComicPress
* Permanent coding fixes incorporated into master htaccess files to replace workarounds
* Additional mission critical PHP Info checks added
* Php.ini and php5.ini files are now protected by BulletProof Security
* Updated BPS help files - AITpro.com site help files pending
* nick nacks here and there

= .45.3 =
* More Query String Exploit Filters added to BPS Master .htaccess files
* Options -Indexes added to BPS Master .htaccess files at user requests
* Added IP address display to maintenance mode javascript countdown timer display
* No need to click Update Permalinks anymore for Maintenance Mode - RewriteRule override added 

= .45.2 =
* New Apache Directives for PHP5 added to the .htaccess master files
* Maintenance mode master .htaccess code modified - RewriteCond to load new background png
* Maintenance Mode log in / log out issue fixed - Log in / out of your Dashboard in Maintenance Mode
* Website Under Maintenance coding modifcations and visual design enhancements
* Background Graphic for Website Under Maintenance page created and added in the installation
* Minor cosmetic nicks nacks fixed here and there
* Help files and hover tool tips help info updated
* Tested on WordPress 3.1-alpha - no issues or problems

= .45.1 =
* Bug fix for version check of BPS .htaccess master file
* Bug fix for wp-config.php check based on BPS .htaccess version
* Fix - BPS plugin uninstall issue fixed
* Fix - BPS Widget configuration issue fixed
* Completely recoded with WordPress 3.0 coding enhancements and improvements
* Completely new sophisticated visual design and look
* jQuery UI Tabbed Menu with CSS Hover Menu Buttons - see screenshot
* New Messaging Display System added
* ,htaccess code added to master files to .htaccess protect wp-config.php
* WordPress DB error on / off checking and verification status display
* WordPress version is not displayed - remove_action('wp_head', 'wp_generator');
* WP generator meta tag removed - remove_action('wp_head', 'wp_generator');
* Administrator username “admin” check
* System information page displays PHP, MySQL, Server Info, etc. - see screenshot
* Security Status page added - see screenshot
* Help & FAQ page added
* BPS Pro Modules page added - BPS Pro Modules are installed separately
* New BPS .45.1 Guide created @ AIT-pro.com

= .45 =
* Completely recoded with WordPress 3.0 coding enhancements and improvements
* Completely new sophisticated visual design and look
* jQuery UI Tabbed Menu with CSS Hover Menu Buttons - see screenshot
* New Messaging Display System added
* ,htaccess code added to master files to .htaccess protect wp-config.php
* WordPress DB error on / off checking and verification status display
* WordPress version is not displayed - remove_action('wp_head', 'wp_generator');
* WP generator meta tag removed - remove_action('wp_head', 'wp_generator');
* Administrator username “admin” check
* System information page displays PHP, MySQL, Server Info, etc. - see screenshot
* Security Status page added - see screenshot
* Help & FAQ page added
* BPS Pro Modules page added - BPS Pro Modules are installed separately
* New BPS .45.1 Guide created @ AIT-pro.com

= .44.1 =
* If you are upgrading from .44 to .44.1 download the /htaccess folder first
* before upgrading and upload it back to the back to the BulletProof plugin folder
* after you have upgraded to .44.1.
* Added Backup form function - backs up users original existing htaccess files
* Added Restore form function - restores users original existing htaccess files
* Backup folder added for backed up original htaccess files
* Removed links from all ToolTips except for the top Read Me! hover ToolTip

= .44 =
* First version release of BulletProof Security
* Extensive Read Me! help hover ToolTips added to the BulletProof plugin page
* Visual and coding Enhancements made to the BulletProof Maintenance page
* Function check_perm redeclare conflict fixed

== Upgrade Notice ==

* !!!CRITICAL UPDATE!!!
* New SQL Injection hacking method blocked - New code added to master .htaccess files
* BPS was finally successfully hacked after 7 months and thousands of hacking attempts
* This update prevents this latest new SQL Injection hacking method
* Installing BPS does not activate the new BPS .45.6 .htaccess files
* After installation please activate the BPS .45.6 BulletProof modes
* Please download your current htaccess files first before activating BPS .45.6 Security Modes