Àpèjúwe
With this plugin you can make passwords a thing of the past. All you need is your trusty smartphone with a QR Code reading app.
(Coming soon, iOS companion app that will negate your need for a separate QR Code reading app!)
Disclaimer: A website is only as secure as the least secure component on it. This plugin aims to be more secure than using the default login page.
Àwọn àwòrán ìbòjú
Ìgbéwọlẹ̀
- Upload plugin to the
/wp-content/plugins/directory - Activate the plugin through the ‘Plugins’ menu in WordPress
- ThatÌtumọ̀ Yorùbá: ’s it
Usage
- Scan QR code on login screen of your site. (Coming soon, iOS companion app!)
- Open link scanned in your mobile browser.
- ThatÌtumọ̀ Yorùbá: ’s it! (If you donÌtumọ̀ Yorùbá: ’t have a cookie on your mobile browser recognizing you, the first time you try this youÌtumọ̀ Yorùbá: ’ll have to log in on your phone. After that you should be home free)
FAQ
- Why do I need to log in on my phone?
-
You wouldnÌtumọ̀ Yorùbá: ’t want just ANYONE being able to access your site. Verification is still necessary.
- So whatÌtumọ̀ Yorùbá: ’s this plugin good for?
-
Once you log in once, you wonÌtumọ̀ Yorùbá: ’t have to again until your phone cookie runs out (every two weeks or so). That should save you SOME hassle.
- What about foo bar?
-
I have no answer to foo bar dilemma.
Àwọn àgbéyẹ̀wò
Àwọn Olùkópa & Olùgbéejáde
“Unlock Digital (No Passwords)” jẹ́ ètò ìṣàmúlò orísun ṣíṣí sílẹ̀. Àwọn ènìyàn wọ̀nyí ti ṣe ìkópa sí plugin yìí.
Àwọn Olùkópa
Túmọ̀ “Unlock Digital (No Passwords)” sí èdè rẹ.
Ṣe o nífẹ̀ẹ́ sí ìdàgbàsókè?
Ṣàwárí koodu, ṣàyẹ̀wò ibi ìpamọ́ SVN, tàbí ṣe àgbékalẹ̀ sí àkọsílẹ̀ ìdàgbàsókè nípasẹ̀ RSS.
Àkọsílẹ̀ àwọn àyípadà
1.4.3
- removed [] array for better compatibility. Some QR codes weren’t loading due to forced SSL.
1.4.2
- Made homeurl variable scheme relative
1.4.1
- Created ajax homeurl variable for more accurate QR creation.
1.4
- Enabled ability for administrator to disconnect app via site dashboard.
- Added better logs.
- When hash expires login page no longer reloads.
- Fixed issue where page stopped working after being open for a while.
1.3.5
- Bugfix.
1.3.4
- Removed extra function.
1.3.3
- Now works with WordPress installed in subfolders.
1.3.2
- Mcrypt implemented in encrypting the TOTP hash.
1.3.1
- TOTP lengthened to 8 length and 60 seconds.
1.3
- Updated to be used with soon to arrive companion app.
- QR code generation happens on your server, not via a google api.
- Code refactored, restructured.
1.2.1
- Fixed querystring bug
1.2
- Updated code to work with WordPress 4.1
1.1
- All POST/GET variables have been properly sanitized against XSS attacks. Special thanks to Julio from Boiteaweb.fr for his security analysis and recommendations
1.0
- Out of Beta.
- IP confirmation fixed.
0.6
- XSS fix. Special thanks to Julio from Boiteaweb.fr for his security analysis and recommendations
0.5
- Delay added to prevent dDos attack
0.4
- CSRF fix. Special thanks to Julio from Boiteaweb.fr for his security analysis and recommendations
- AJAX, Cron jobs optimized
0.3
- $wpdb->prepare added to db queries. Special thanks to scribu
0.2
- nonce added.
- get_userdatabylogin updated to get_user_by. Special thanks to ericktedeschi
0.1.1
- Fixed to work in subdirectory installs of wp. Special thanks to hlcws.
0.1
- First attempt