paulgoodchild

<?php
/**
 * You may automatically add any WordPress site to your iControlWP account by using the "code run"
 * or "code snippets" feature in ManageWP.
 *
 * Please follow these steps:
 *
 * 1) Install and activate the iControlWP plugin on your WordPress site.
 * 2) Grab your "AUTHENTICATION_KEY" from your iControlWP account:
 *      - https://app.icontrolwp.com/profile/preferences

paulgoodchild

<?php
/**
 * WordPress (5.6+) allows the use of Application Passwords when authenticating logins.
 * However, only certain requests are considered to be requests from an "Application". Officially, these are
 * XML-RPC and REST API requests.
 *
 * However, you may customize this to ensure that authenticated requests from your service
 * (if they don't use XML-PRC/RESTAPI) are put through the appropriate authentication process.
 *
 * To achieve this, you make use of the filter: application_password_is_api_request

paulgoodchild

<?php

/**
 * The plugin badge array has 5 attributes represented by the following keys:
 * name, url, logo, protected_by, custom_css
 *
 * This filter is only available is the plugin is activated for ShieldPRO.
 *
 * You may also use your Whitelabel settings to overwrite many of the defaults:
 * See: https://icontrolwp.freshdesk.com/support/solutions/articles/3000078466

paulgoodchild

<?php

/**
 * Use this filter to change the precise location where Shield's Antibot features will be
 * output within the Woocommerce checkout form.
 */
add_filter( 'icwp-wpsf-woocommerce_checkout_hook_location', function ( $hook ) {

	/**
	 * This is the default hook location used by Shield.

paulgoodchild

<?php

/**
 * Both of these functions return a boolean (true|false) on whether the current visitor
 * IP address is whitelisted.
 *
 * Be sure to use the most appropriate, depending on your Shield version.
 */

if ( class_exists( '\FernleafSystems\Wordpress\Plugin\Shield\Controller\Controller' ) ) {

paulgoodchild

<?php

/**
 * Add this to your functions.php and then call your site URL with "get_my_server_ip" in your query.
 * e.g.  https://www.example.com/?get_my_server_ip=1
 */
if ( isset( $_GET[ 'get_my_server_ip' ] ) ) {
	add_action( 'init', function () {
		echo 'Server IPs:<br/>'.implode( '<br/>', array_unique( [
				wp_remote_get( 'https://api.ipify.org' )[ 'body' ],

paulgoodchild

<?php

/**
 * You can whitelist certain directories from the Shield malware scanner using
 * the following WordPress filter.
 *
 * All paths you provide must be relative to your ABSPATH
 * (i.e. from the directory where your wp-settings.php file resides)
 * 
 * You must always return the $paths variable at the end.

paulgoodchild

<?php

add_action( 'admin_init', function () {
	if ( function_exists( 'shield_security_get_plugin' ) ) {
		$oShield = shield_security_get_plugin();
		if ( !empty( $oShield ) ) {
			add_filter(
				$oShield->getController()->prefix( 'show_dashboard_widget' ),
				function ( $bShow ) {
                    // restrict display to administrators only (i.e. they have capability to "manage_options")

paulgoodchild

<?php

add_action( 'init', function () {
	if ( is_admin() && !( defined( 'DOING_AJAX' ) && DOING_AJAX ) && !current_user_can( 'edit_posts' ) ) {
		wp_safe_redirect( home_url() );
	}
} );

paulgoodchild

<?php

		/**
		 * You can force Shield to display in any language (assuming the translation exists)
		 * regardless of which language your site is currently configured to operate in.
		 *
		 * In this example, we are forcing English. Adjust line #10 to change preferred locale.
		 */
		add_filter( 'shield_force_locale', function () {
			return 'en_US';