Title: MJP Security Tools
Author: zackdesign
Published: <strong>Òkúdù 7, 2010</strong>
Last modified: Èrèlé  23, 2026

---

Ṣàwárí àwọn plugin

![](https://s.w.org/plugins/geopattern-icon/mjp-security-plugin.svg)

# MJP Security Tools

 Láti ọwọ́ [zackdesign](https://profiles.wordpress.org/zackdesign/)

[Ṣe ìgbàsílẹ̀](https://downloads.wordpress.org/plugin/mjp-security-plugin.2.0.0.zip)

 * [Àwọn àlàyé](https://yor.wordpress.org/plugins/mjp-security-plugin/#description)
 * [Àwọn àgbéyẹ̀wò](https://yor.wordpress.org/plugins/mjp-security-plugin/#reviews)
 *  [Ìgbéwọlẹ̀](https://yor.wordpress.org/plugins/mjp-security-plugin/#installation)
 * [Ìdàgbàsókè](https://yor.wordpress.org/plugins/mjp-security-plugin/#developers)

 [Ìrànlọ́wọ́](https://wordpress.org/support/plugin/mjp-security-plugin/)

## Àpèjúwe

MJP Security Tools is a focused hardening plugin that does four things well:

 * **XSS Database Scanner** — scans every table for `<script>`, `<iframe>`, `onclick`,`
   javascript:` and other injection patterns
 * **POST Request Log** — records all POST data (passwords masked) with IP, user
   agent, and URL for CSRF/audit detection
 * **Failed Login Log** — tracks every failed login attempt with username, IP, and
   timestamp
 * **File Permission Checker** — verifies WordPress root files and directories have
   safe permissions, checks for missing `index.html` files and SVN working copies

**What this plugin does NOT do** (because WordPress core already handles it):

 * SSL enforcement — use `FORCE_SSL_ADMIN` or let WordPress 5.7+ auto-redirect
 * Password strength — WordPress core enforces strong passwords since 4.3
 * Login rate limiting — use a dedicated plugin like Limit Login Attempts Reloaded
 * Version number hiding — marginal benefit, not worth the complexity

**Upgrading from v1.x:**

 * The admin page has moved from jQuery UI tabs to native WordPress nav tabs
 * SSL forcing, password enforcement, login throttling, version hiding, admin username
   changing, database prefix randomization, password reset, and .htaccess generation
   have been removed — WordPress core and dedicated security plugins handle these
   better
 * PHP sessions replaced with WP transients for flash messages
 * Log data is now stored as JSON instead of serialized PHP
 * The Javacrypt client-side crypt(3) script has been removed

## Ìgbéwọlẹ̀

 1. Upload the `mjp-security-plugin` folder to `/wp-content/plugins/`
 2. Activate through the Plugins menu
 3. Go to Tools > MJP Security Tools

## FAQ

### What happened to all the other features?

WordPress 6.x handles SSL, password strength, and many security basics natively.
Rather than duplicating core functionality, v2.0.0 focuses on the four features 
that WordPress does NOT provide out of the box: XSS scanning, POST logging, failed
login logging, and file permission checking.

### Is this a replacement for Wordfence/iThemes?

No — those are comprehensive security suites. MJP Security Tools is a lightweight
auditing companion that provides specific database scanning and logging features.

## Àwọn àgbéyẹ̀wò

Kò sí àwọn àgbéyẹ̀wò fún plugin yìí.

## Àwọn Olùkópa & Olùgbéejáde

“MJP Security Tools” jẹ́ ètò ìṣàmúlò orísun ṣíṣí sílẹ̀. Àwọn ènìyàn wọ̀nyí ti ṣe
ìkópa sí plugin yìí.

Àwọn Olùkópa

 *   [ zackdesign ](https://profiles.wordpress.org/zackdesign/)
 *   [ AliasIO ](https://profiles.wordpress.org/elbertf/)

[Túmọ̀ “MJP Security Tools” sí èdè rẹ.](https://translate.wordpress.org/projects/wp-plugins/mjp-security-plugin)

### Ṣe o nífẹ̀ẹ́ sí ìdàgbàsókè?

[Ṣàwárí koodu](https://plugins.trac.wordpress.org/browser/mjp-security-plugin/),
ṣàyẹ̀wò [ibi ìpamọ́ SVN](https://plugins.svn.wordpress.org/mjp-security-plugin/),
tàbí ṣe àgbékalẹ̀ sí [àkọsílẹ̀ ìdàgbàsókè](https://plugins.trac.wordpress.org/log/mjp-security-plugin/)
nípasẹ̀ [RSS](https://plugins.trac.wordpress.org/log/mjp-security-plugin/?limit=100&mode=stop_on_copy&format=rss).

## Àkọsílẹ̀ àwọn àyípadà

#### 2.0.0

 * Rewrite: focused on 4 core features — XSS scanner, POST log, failed login log,
   file permissions
 * Removed: SSL forcing, password enforcement, login throttling, version hiding (
   handled by WP core)
 * Removed: Admin username changer, DB prefix randomizer, password reset all users,.
   htaccess generator
 * Removed: jQuery UI 1.8.10 dependency and Javacrypt crypt(3) JavaScript (~500 
   lines)
 * Removed: PHP sessions — uses WP transients for flash messages
 * New: Native WordPress nav-tab interface (no jQuery UI)
 * New: Dedicated CSS/JS assets instead of inline styles and CDN links
 * New: Clear log buttons for POST and failed login logs
 * New: Log data stored as JSON instead of serialized PHP
 * New: File permission scan limited to 2 levels deep (prevents timeout on large
   installs)
 * Fixed: HTML parse error in admin template (missing `>` on div tag)
 * Fixed: Admin page uses dedicated slug instead of `__FILE__`
 * Changed: Requires WordPress 6.0+

#### 1.2.1

 * Fixed PHP 8.1 deprecation: get_option() returning false passed to substr()

#### 1.2.0

 * PHP 8.x compatibility fixes
 * Replaced deprecated functions and constants
 * Tested with WP 6.9.1

#### 1.1

 * Tested in WP 3.3.2

#### 1.0

 * First Release

## Àkójọpọ̀ Meta

 *  Ẹ̀yà **2.0.0**
 *  Ìgbàgbọ́hùn tó kẹ́yìn **oṣù 3 sẹ́yìn**
 *  Àwọn ìgbéwọlẹ̀ tó ṣiṣẹ́ **10+**
 *  Ẹ̀yà WordPress ** 6.0 tàbí ju bẹ́ẹ̀ lọ **
 *  Dánwò dé **6.9.4**
 *  Ẹ̀yà PHP ** 7.4 tàbí ju bẹ́ẹ̀ lọ **
 *  Èdè
 * [English (US)](https://wordpress.org/plugins/mjp-security-plugin/)
 * Àwọn àmì
 * [audit](https://yor.wordpress.org/plugins/tags/audit/)[login](https://yor.wordpress.org/plugins/tags/login/)
   [permissions](https://yor.wordpress.org/plugins/tags/permissions/)[security](https://yor.wordpress.org/plugins/tags/security/)
   [xss](https://yor.wordpress.org/plugins/tags/xss/)
 *  [Ìwòye Tó Péye](https://yor.wordpress.org/plugins/mjp-security-plugin/advanced/)

## Àwọn ìbò

Kò sí ìwádìí tí a tíì fi ránṣẹ́.

[Your review](https://wordpress.org/support/plugin/mjp-security-plugin/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/mjp-security-plugin/reviews/)

## Àwọn Olùkópa

 *   [ zackdesign ](https://profiles.wordpress.org/zackdesign/)
 *   [ AliasIO ](https://profiles.wordpress.org/elbertf/)

## Ìrànlọ́wọ́

Nǹkan wà tí o fẹ́ sọ? Ṣé o nílò ìrànlọ́wọ́?

 [Wo àpéjọ ìrànlọ́wọ́](https://wordpress.org/support/plugin/mjp-security-plugin/)

## Ṣe ìtọrẹ

Ṣé o fẹ́ ṣe àtìlẹ́yìn fún ìlọsíwájú plugin yìí?

 [ Ṣe ìtọrẹ sí plugin yìí ](https://zackdesign.biz/)