=== WPHH SECURE – AIO WordPress Security With File Locking & WP Hide Login === Contributors: wp-hacked-help Tags: WordPress security, file locking, hide login URL, brute force protection, wp filesystem Requires at least: 5.0 Tested up to: 6.8.1 Requires PHP: 7.2+ Stable tag: 1.1.3 License: GPLv2 or later License URI: https://www.gnu.org/licenses/gpl-2.0.html Secure your WordPress site with one-click file locking, login path hiding, role-based access, and smart dashboard visibility. Built for speed, security, and control. == Full Description == **WPHH SECURE** by [WP Hacked Help](https://secure.wphackedhelp.com) is a comprehensive WordPress security plugin that integrates advanced file protection and login URL obfuscation. It blocks brute-force attacks, unauthorized access, and file tampering by allowing you to easily lock or unlock your WordPress files and folders with a single click. The plugin comes with a user-friendly interface and real-time feedback, ensuring secure operations without any technical knowledge required. WPHH SECURE is built to work seamlessly with the native WordPress functions, ensuring compatibility and safety for all sites, including blogs, business sites, and WooCommerce stores. With automatic exclusions for sensitive folders and the ability to manage folder exceptions, WPHH SECURE ensures that critical areas like uploads, cache, and backups are not locked accidentally. It also features login URL hiding to prevent unauthorized access to your site’s backend. **Key Features:** ✅ **One-Click Lock/Unlock** – Lock or unlock all WordPress files and folders with a single click. ✅ **Smart Dashboard** – Access real-time status updates and track lock activities in the dashboard. ✅ **Role-Based Access** – Configure permissions to restrict access to the lock/unlock feature based on user roles. ✅ **Login URL Hiding** – Prevent brute-force login attempts by hiding or changing your default WordPress login URL. ✅ **Safe File Handling** – Built on WP_Filesystem for secure file handling using AJAX for smooth background execution. ✅ **Auto Exclusions** – Automatically exclude high-priority folders (e.g., uploads, cache, backups) from being locked. ✅ **Visual Progress Feedback** – Watch real-time updates with progress bars and completion messages. ✅ **Folder Exclusion Manager** – Easily add or remove folders from the exclusion list to keep them safe. == Installation == There are three ways to install the WPHH SECURE plugin: 1. **WordPress Admin Method** A. Go to your WordPress dashboard. B. Navigate to Plugins > Add New. C. Search for **WPHH SECURE**. D. Click **Install** and then **Activate**. 2. **Manual Installation (via .zip file)** A. Download the plugin ZIP file from WordPress.org. B. In your WordPress dashboard, go to Plugins > Add New. C. Click **Upload Plugin** and select the ZIP file. D. Click **Install Now**, then **Activate**. 3. **FTP Method** A. Download and extract the plugin ZIP on your computer. B. Upload the extracted `WPHH SECURE` folder to `/wp-content/plugins/` using FTP. C. Go to Plugins > Installed Plugins in WordPress and click **Activate**. == Frequently Asked Questions == Q: **Will this affect website speed?** A: No, the plugin is lightweight and uses background processing methods native to WordPress, so there’s no noticeable impact on speed. Q: **Can I restore the original login URL later?** A: Yes, you can revert to the default settings at any time via the plugin settings. Q: **Are my media or backup folders safe?** A: Yes, these folders are auto-excluded by default from the locking process to ensure they remain accessible. Q: **Is WPHH SECURE compatible with cache and backup plugins?** A: Yes, the plugin works perfectly with cache and backup plugins without interfering with their processes. Q: **Can I exclude specific folders or files from being locked?** A: Yes, you can easily add folders or files to the exclusion list from the plugin’s settings page. == Screenshots == 1. Dashboard page showing services and quick status. 2. Full-page UI to lock or unlock the website with a single click. 3. Permission settings to control who can lock/unlock the website. 4. Processing message after clicking the lock/unlock button. 5. Locking process status with progress and confirmation. 6. Excluded folders settings to manage folder exclusions (view, add, or remove). 7. WP Hide URL settings page to change login URL and other hide options. == Changelog == = 1.1.2 = * Added AJAX functionality to fetch real-time results during lock/unlock operations. * Added “Hide WP Login URL” feature to block default login page access. * Minor interface improvements. = 1.1.1 = * WordPress.org compliance updates. * Minor bug fixes. = 1.1.0 = * Major security and performance improvements. * Improved compatibility with the latest WordPress version. == Upgrade Notice == = 1.1.2 = This update includes AJAX-based background task handling and a new feature to hide the default WordPress login URL, improving security. Highly recommended for all users.