=== WP-Sentinel ===
Contributors: evilsocket
Author: evilsocket
Donate link: http://www.evilsocket.net/
Plugin URI: http://www.evilsocket.net/
Tags: security,hack,ids,ips,exploit,protection,guard
Requires at least: 2.0.2
Tested up to: 2.1
Stable tag: 1.0.2

A wordpress security system plugin which will check every HTTP request against a given set of rules to filter out malicious requests.

== Description ==

WP-Sentienl, part of the discontinued evilsentinel (R.I.P.), is a plugin for the WordPress platform which will increase the security of your blog against attacks
from crackers, lamers, black hats, h4x0rs, etc .
The plugin will be loaded by wordpress before every other installed plugin and will execute some security checks upon incoming http requests and, when one of more
requests turn on the system alarm, they will be blocked, the sentinel then will show a warning message to the user and send a notification email to the blog
administrator with the whole attack details .

This plugin is able to block those kind of attacks :

* Cross Site Scriptings
* HTML Injections
* Remote File Inclusions
* Local File Inclusions
* SQL Injections 
* Cross Site Request Forgery 

WP-Sentinel will NOT check requests from the user logged in as administrator, so if you want to check the installation you have to log out first.

== Installation ==

1. Upload `wp-sentinel` folder to the `/wp-content/plugins/` directory.
2. Make sure that `/wp-content/plugins/wp-sentinel/log` is writable.
3. Activate the plugin through the 'Plugins' menu in WordPress.
4. Configure the plugin through the settings panel.

== Frequently Asked Questions ==

= How can i check if the plugin is installed and working properly? =

If you are logged in as administrator, perform a logout, go to the index of your blog and open an url such as :

http://your-blog-url/?s=../../this/is/just/a/test

To activate the local file inclusion block.

= Some bot is launching an high number of attacks to my blog, will the plugin be flooded with logs? =

No, the plugin has an anti-flood mechanism that can be configured through the settings menu.

== Screenshots ==

1. The alarm that an attacker will see upon cross site scripting or html injection attack.
2. Daily report of the attacks.
3. Layout manager.
4. Plugin settings.

== Changelog ==

= 1.0.2 =
* Implemented log downloading and wipeing.

= 1.0.1 =
* Better default alarm layout in english language.
* Fixed initialization hook with a better wp action.
* Added file permission checking on admin panel.

= 1.0 =
* First implementation of anti-flood mechanism.
* Layout manager.

== Upgrade Notice ==

= 1.0.1 =
See changelog.

= 1.0 =
Well, this is just the first release :)