Plugin / 6Scan Security

6Scan

Installation

Installation

In order to install 6Scan Security, please follow these steps:

  1. Upload the ZIP file containing the plugin to your WordPress site, using the “Add New”->”Upload” option on the Plugins screen (or automatically find us by searching for “6Scan”).
  2. When the plugin has been installed, click to activate the plugin.
  3. Once activated, 6Scan Security will display a message informing you how to activate protection.

Please note that 6Scan Security requires read/write access to your .htaccess file, which allows us to intercept and analyze/block suspicious requests before they reach any vulnerable script. If you do not have this access, installation of the plugin may fail.

To allow 6Scan Security to constantly update its signatures and keep you protected, we require the fopen or curl library to be installed and enabled. If you have a file-monitoring extension, you may see frequent changes in the 6Scan signature files; this is normal and is an indication that your protection is working properly and up to date.

Once you register with 6Scan, we will automatically send you an email notification when our scanner detects a threat or another problem with your website. To change the notification options (or completely unsubscribe from these messages) please visit the 6Scan Settings panel. You may also elect to be notified of new threats or problems by SMS to any destination worldwide.

Once installed, 6Scan Security will add three items to your WordPress menu: Dashboard, Settings and Support.

The dashboard shows you the list of security vulnerabilities detected by our scanner. Every security issue can be clicked for more information. There is a textual description of each vulnerability and a link to a public advisory (when available) on a Bugtraq site.

The settings page allows you to configure the following Web Application Firewall security options:

  • SQL Injection – Detects and blocks database hacking attempts
  • Cross Site Scripting (XSS) – Detects and blocks identity theft attacks, which are based on stolen cookies
  • Disable Non-standard request types – Disables any non-GET/POST requests to your site
  • Remote File Inclusion protection – Disables requests that include a path to an external PHP file, which could be a major security risk
  • CSRF protection for POST requests – Detects and blocks POST requests originating from foreign domains

The support area allows you to ask questions, report bugs or consult on security-related matters. If you need to add confidential details to your support request (such as passwords), you may email us at [email protected] instead of posting on our public support forum. All tickets received at [email protected] are handled with discretion and your information will only be shared with employees on a need-to-know basis to help solve your problem.

In order to uninstall the 6Scan Security plugin:

  1. Open the Plugins menu item on your WordPress admin area
  2. Next to the 6Scan Security plugin, click Deactivate, then Delete
  3. When the plugin is deleted, any active 6Scan subscription will be automatically deactivated, along with any email or SMS notifications you have configured.

Please note that if you uninstall 6Scan Security, any fixed security vulnerabilities will lose their fixes. If 6Scan Security has fixed vulnerabilities on your site, you must keep the plugin installed to keep these fixes active.

If you encounter any problems during installation, please visit our support area or email us at [email protected].

Ratings

3.3
28 reviews

Rating breakdown

Details Information

Version

3.0.6

First Released

04 Dec, 2011

Total Downloads

82,750

Wordpress Version

3.0.0 or higher

Tested up to:

4.0.28

Require PHP Version:

-

Tags

Contributors

Languages

The plugin hasn't been transalated in any language other than English.

DIRECTORY DISCLAIMER

The information provided in this THEME/PLUGIN DIRECTORY is made available for information purposes only, and intended to serve as a resource to enable visitors to select a relevant theme or plugin. wpSocket gives no warranty of any kind, express or implied with regard to the information, including without limitation any warranty that the particular theme or plugin that you select is qualified on your situation.

The information in the individual theme or plugin displayed in the Directory is provided by the owners and contributors themselves. wpSocket gives no warranty as to the accuracy of the information and will not be liable to you for any loss or damage suffered by you as a consequence of your reliance on the information.

Links to respective sites are offered to assist in accessing additional information. The links may be outdated or broken. Connect to outside sites at your own risk. The Theme/Plugin Directory does not endorse the content or accuracy of any listing or external website.

While information is made available, no guarantee is given that the details provided are correct, complete or up-to-date.

wpSocket is not related to the theme or plugin, and also not responsible and expressly disclaims all liability for, damages of any kind, arising out of the use, reference to, or reliance on, any information or business listed throughout our site.

Keep Leading Your Followers!
Share it for them.