Skip to content

Instantly share code, notes, and snippets.

View paulgoodchild's full-sized avatar

Paul Goodchild paulgoodchild

View GitHub Profile
@paulgoodchild
paulgoodchild / functions.php
Created November 3, 2020 14:14
Customise the contents and styles of Shield Security Plugin Badge
<?php
/**
* The plugin badge array has 5 attributes represented by the following keys:
* name, url, logo, protected_by, custom_css
*
* This filter is only available is the plugin is activated for ShieldPRO.
*
* You may also use your Whitelabel settings to overwrite many of the defaults:
* See: https://icontrolwp.freshdesk.com/support/solutions/articles/3000078466
@paulgoodchild
paulgoodchild / functions.php
Created September 23, 2020 11:26
Customise the hook/location where Shield's Antibot feature will output any content
<?php
/**
* Use this filter to change the precise location where Shield's Antibot features will be
* output within the Woocommerce checkout form.
*/
add_filter( 'icwp-wpsf-woocommerce_checkout_hook_location', function ( $hook ) {
/**
* This is the default hook location used by Shield.
@paulgoodchild
paulgoodchild / functions.php
Last active December 10, 2021 15:29
Add custom user roles to enforce 2FA by email using Shield Security plugin for WordPress
<?php
/**
* Adding custom roles is a case of using the filter provided, adding your
* roles to the array of roles that has 2FA by email forced upon them.
*
* The role you add will be the 'slug' of the role, not the name of the role.
* For example, WordPress comes with built-in roles such as Administrator.
* The slug for this role is 'administrator', not 'Administrator'.
*/
@paulgoodchild
paulgoodchild / functions.php
Last active July 31, 2020 10:26
Check Is The Current Visitor IP WhiteListed?
<?php
/**
* Both of these functions return a boolean (true|false) on whether the current visitor
* IP address is whitelisted.
*
* Be sure to use the most appropriate, depending on your Shield version.
*/
if ( class_exists( '\FernleafSystems\Wordpress\Plugin\Shield\Controller\Controller' ) ) {
@paulgoodchild
paulgoodchild / functions.php
Last active February 19, 2021 12:40
Increase Shield Security's 2FA timeout
<?php
/**
* Shield Security's 2FA timeout defaults to 5 minutes. This means that a user must
* supply their 2FA code(s) within this time or they'll need to start again (re-login).
*
* Some email providers can be a bit slow at times with their email delivery, and
* 5 minutes isn't long enough. To provide a bit more time, you can use a filter to
* extend the timeout to as many minutes as you need.
*
* Reference: https://support.getshieldsecurity.com/support/solutions/articles/3000101220
@paulgoodchild
paulgoodchild / functions.php
Created April 21, 2020 09:37
Find your outgoing server IP addresses.
<?php
/**
* Add this to your functions.php and then call your site URL with "get_my_server_ip" in your query.
* e.g. https://www.example.com/?get_my_server_ip=1
*/
if ( isset( $_GET[ 'get_my_server_ip' ] ) ) {
add_action( 'init', function () {
echo 'Server IPs:<br/>'.implode( '<br/>', array_unique( [
wp_remote_get( 'https://api.ipify.org' )[ 'body' ],
<?php
/**
* You can whitelist certain directories from the Shield malware scanner using
* the following WordPress filter.
*
* All paths you provide must be relative to your ABSPATH
* (i.e. from the directory where your wp-settings.php file resides)
*
* You must always return the $paths variable at the end.
@paulgoodchild
paulgoodchild / functions.php
Created February 17, 2020 11:32
Show Shield Dashboard Widget to admins only
<?php
add_action( 'admin_init', function () {
if ( function_exists( 'shield_security_get_plugin' ) ) {
$oShield = shield_security_get_plugin();
if ( !empty( $oShield ) ) {
add_filter(
$oShield->getController()->prefix( 'show_dashboard_widget' ),
function ( $bShow ) {
// restrict display to administrators only (i.e. they have capability to "manage_options")
@paulgoodchild
paulgoodchild / restrict_subscribers.php
Created September 18, 2019 09:45
Restrict WP Admin Dashboard Access From Subscribers
<?php
add_action( 'init', function () {
if ( is_admin() && !( defined( 'DOING_AJAX' ) && DOING_AJAX ) && !current_user_can( 'edit_posts' ) ) {
wp_safe_redirect( home_url() );
}
} );
@paulgoodchild
paulgoodchild / functions.php
Created August 29, 2019 08:42
Shield Security - force English display in international sites
<?php
/**
* You can force Shield to display in any language (assuming the translation exists)
* regardless of which language your site is currently configured to operate in.
*
* In this example, we are forcing English. Adjust line #10 to change preferred locale.
*/
add_filter( 'shield_force_locale', function () {
return 'en_US';