=== Plugin Name ===
Contributors: evilsocket
Donate link: http://www.evilsocket.net/
Tags: security,hack,ids,ips,exploit,protection,guard
Requires at least: 2.0.2
Tested up to: 2.1
Stable tag: 1.0

A wordpress security system plugin which will check every HTTP request against a given set of rules to filter out malicious requests.

== Description ==

WP-Sentienl, part of the discontinued evilsentinel (R.I.P.), is a plugin for the WordPress platform which will increase the security of your blog against attacks
from crackers, lamers, black hats, h4x0rs, etc .
The plugin will be loaded by wordpress before every other installed plugin and will execute some security checks upon incoming http requests and, when one of more
requests turn on the system alarm, they will be blocked, the sentinel then will show a warning message to the user and send a notification email to the blog
administrator with the whole attack details .

This plugin is able to block those kind of attacks :

	* Cross Site Scriptings (http://en.wikipedia.org/wiki/Cross-site_scripting)
	* Remote File Inclusions (http://en.wikipedia.org/wiki/Remote_File_Inclusion) 
	* Local File Inclusions (http://up2share.net/3370227.pd)
	* SQL Injections (http://en.wikipedia.org/wiki/SQL_injection)
	* Cross Site Request Forgery (http://en.wikipedia.org/wiki/Cross-site_request_forgery)

WP-Sentinel will NOT check requests from the user logged in as administrator, so if you want to check the installation you have to log out first.

== Installation ==

1. Upload `wp-sentinel` folder to the `/wp-content/plugins/` directory.
2. Make sure that `/wp-content/plugins/wp-sentinel/log` is writable.
3. Activate the plugin through the 'Plugins' menu in WordPress.
4. Configure the plugin through the settings panel.

== Frequently Asked Questions ==

= How can i check if the plugin is installed and working properly? =

If you are logged in as administrator, perform a logout, go to the index of your blog and open an url such as :

http://your-blog-url/?s=../../this/is/just/a/test

To activate the local file inclusion block.

= Some bot is launching an high number of attacks to my blog, will the plugin be flooded with logs? =

No, the plugin has an anti-flood mechanism that can be configured through the settings menu.

== Changelog ==

= 1.0 =
* First implementation of anti-flood mechanism.
* Layout manager.

== Upgrade Notice ==

= 1.0 =
Well, this is just the first release :)