SecuPress

https://docs.secupress.me
Admin
SecuPress is a comprehensive WordPress security plugin that provides malware scanning, vulnerability...
Tokens:17,244
Snippets:329
Trust Score:10
Update:5 months ago
Show doc for...
Tokens:
Raw
### Define SECUPRESS_MODE Constant

Source: https://docs.secupress.me/article/237-expert-mode

Use this PHP constant to globally control SecuPress features. Add keywords like 'adminbar', 'help', 'grade', or 'expert' to the string value to disable or enable features for all users. The order of keywords does not matter.

```php
define( 'SECUPRESS_MODE', 'help expert grade adminbar' );
```

--------------------------------

### MU Plugin Header with Security Check

Source: https://docs.secupress.me/article/136-how-to-create-a-mu-plugin

This snippet includes a standard plugin header and a security check to prevent direct file access. This is crucial for security.

```php
<?php 
/** 
 * Plugin Name: My first MU plugin
 * Version: 1.0 
 */  
defined( 'ABSPATH' ) or die( 'Cheatin\' uh?' );	

```

--------------------------------

### Basic MU Plugin Header

Source: https://docs.secupress.me/article/136-how-to-create-a-mu-plugin

This snippet shows the minimum required header for a WordPress MU plugin. It includes the plugin name and version.

```php
<?php 
/** 
 * Plugin Name: My first MU plugin 
 * Version: 1.0  
 */	

```

--------------------------------

### Autohide License Information with PHP Constants

Source: https://docs.secupress.me/article/154-how-to-hide-the-license-informations-key-and-email

Define both the API key and email constants in your wp-config.php or mu-plugin to automatically hide this information. Replace 'your-api-key' and 'your@email.hey' with your actual license details.

```php
define( 'SECUPRESS_API_KEY', 'your-api-key' );
define( 'SECUPRESS_API_EMAIL', 'your@email.hey' );
```

--------------------------------

### Activate White Label in wp-config.php

Source: https://docs.secupress.me/article/149-use-white-label

Add this PHP constant to your wp-config.php file to enable the white label feature.

```php
define( 'WP_SWL', true );
```

--------------------------------

### Define Constant to Allow Login Access

Source: https://docs.secupress.me/article/167-how-to-login-when-you-do-not-receive-the-login-email-passwordless

Add this line to your wp-config.php file near the top, under <?php, to temporarily allow login access. This will also disable the feature that allows you to move the login page.

```php
define( '_SECUPRESS_ALLOW_LOGIN_ACCESS_ ', true );
```

--------------------------------

### Add Custom User Agents to Block List

Source: https://docs.secupress.me/article/163-add-bad-user-agents

Use this filter to append custom user agents to the default block list. Ensure the user agents are comma-separated.

```php
add_filter('secupress.bad_user_agents.list', 'secupress_support_add_user_agents');
function secupress_support_add_user_agents($default_user_agents ) {
    return $default_user_agents . ', user_agent_1, user_agent_2';
}
```

--------------------------------

### Hide API Key with PHP Constant

Source: https://docs.secupress.me/article/154-how-to-hide-the-license-informations-key-and-email

Define this constant in your wp-config.php or mu-plugin to hide the API key. Ensure the constant is defined before it is used.

```php
define( 'SECUPRESS_HIDE_API_KEY', true );
```

--------------------------------

### Modify Passwordless Email Subject

Source: https://docs.secupress.me/article/169-personalize-emails-when-double-authentication-is-enabled

Use the 'secupress.plugin.passwordless_email_subject' filter to customize the email subject. The placeholder '###SITENAME###' can be used to dynamically insert the site's name.

```php
add_filter('secupress.plugin.passwordless_email_subject', 'modify_passwordless_email_subject'); 
function modify_passwordless_email_subject() { 
	return '[###SITENAME###] Secure Login Request'; 
}
```

--------------------------------

### Bypass 404 Blocking for Specific PHP URLs

Source: https://docs.secupress.me/article/203-disable-the-404-page-on-some-php-files

Add this filter to your child theme's functions.php or a custom plugin. It checks if the requested URL matches a specific PHP file and returns true to bypass the 404 block. This is crucial for SEO when migrating from .php URLs to permalinks.

```php
add_filter( 'secupress.plugins.ban_404.bypass', function( $result, $url ) {
	if ( ( 'https://example.com/my-great-article.php' === $url ) ) {
			return true;
		}
		return $result;
}, 10, 2 );

```

--------------------------------

### Custom SecuPress User Role Filter

Source: https://docs.secupress.me/article/137-how-to-change-minimum-user-role

Use this filter in a 'Must Use' plugin to change the minimum user role that can access SecuPress features. This code snippet modifies the capability required to 'edit_others_posts', which typically includes Editors and Administrators.

```php
<?php 
/**  
 * Plugin Name: SecuPress custom role 
 * Version: 1.0 
 */ 

defined( 'ABSPATH' ) or die( 'Cheatin\' uh?' );  
add_filter( 'secupress.user_capability', 'my_custom_role' ); 
/** 
 * Filter the user capability/role that gives access to SecuPress features. 
 * 
 * @since 1.0 
 */ 
function my_custom_role() { 
	return 'edit_others_posts'; 
}
```
Tokens:
Raw