=== Honeypot Toolkit ===
Contributors: foomagoo
Donate link: http://www.jsterup.com/donate
Tags: honeypot, project honeypot, brute force protection, spam prevention, login monitor, 404 monitor, spamcop, ip blacklist, user enumeration
Requires at least: 4.0
Tested up to: 4.9.7
Stable tag: 3.2

== Description ==

This plugin allows you to automatically insert your Project Honeypot links into all of your pages and block IP addresses that are listed on the Http:BL list from Project Honeypot. There is an option to block IP addresses that have been blocked by Spamcop using their blacklist as well.
To prevent bots from using brute force attacks and scanning your site there is an option to block users that fail to login a set number of times or use blocked user names. You can also block IP addresses that generate a large number of 404 errors. This plugin will also prevent WordPress User Enumeration and automatically block anyone attempting it.

== Installation ==

1. Extract the downloaded Zip file.
2. Upload the 'honeypot-toolkit' directory to the `/wp-content/plugins/` directory
3. Activate the plugin through the 'Plugins' menu in WordPress
4. Use the menu item called Honeypot Toolkit to get the plugin set up.

You should set up an account on the project honeypot website at https://www.projecthoneypot.org if you want to use Project Honeypot.

== Frequently Asked Questions ==

= Where do I get the script for my honeypot? =

You must sign up for an account on https://www.projecthoneypot.org. Then go to https://www.projecthoneypot.org/manage_honey_pots.php to set up your honeypot and follow the instructions.  After the script has been placed on your site enter the url of your script on the Honeypot Toolkit settings page.

== Screenshots ==

1. Settings page
2. Blocked list page
3. Activity page
4. Whitelist page

== Changelog ==

= 3.2 =
Changed the process to hide usernames so that it processes 100 at a time. This way it doesn't fail if there is a large number of users.
Hid the option to show IP lists on individual sites from the settings page if the site is not a multisite install.

= 3.1 =
Forced user nicenames to be md5 hashed when usernames are hidden regardless of whether they match the user login or not.

= 3.0 =
Added option to change an authors user nicename to an md5 hash to hide their real username.
Changed the plugin to be a network only plugin.  Now all IP lists are managed at the network level for multisite installs.

= 2.2 =
Fixed a bug that left details of the IP list entries escaped for MySQL when displaying them on the admin page.
Fixed a bug that prevents the user from selecting Project Honeypot or Spamcop Entry when editing an entry in the blocked list.

= 2.1 =
Moved the code to sanitize server variables for use in determining the visitors IP so that it will not throw an undefined index warning.

= 2.0 =
Added search functionality to search the different IP lists and make it easier to find an entry.
Fixed a bug that stopped the loading indicator from displaying when data was submitted.

= 1.2 =
Added indicator to show sorting direction in ip lists.
Added tabs to the settings page.

= 1.1 =
Added options to paging so you can go to any page in the list and change the type of records in the lists.

= 1.0 =
Added paging to the ip list pages.

= 0.2 =
Adding sanitization to the server keys used to prevent injection from request headers.
Ensuring that the IP being checked is an IP 4 address.
Fixed typo in the spamcop check function that checked the address of the visitor and not the address on the blocked list.

= 0.1 =
Initial version.

== Upgrade Notice ==

= 3.2 =
Changed the process to hide usernames so that it processes 100 at a time. This way it doesn't fail if there is a large number of users.
Hid the option to show IP lists on individual sites from the settings page if the site is not a multisite install.