Changeset 3790067

Timestamp:

11/07/2026 06:09:33 PM (2 days ago)

Author:

teoleonard

Message:

Update the plugin description for 2.0.0

Location:

diamond-sierra-site-defense

Files:

• tags/2.0.0/readme.txt (modified) (4 diffs)
• trunk/readme.txt (modified) (4 diffs)

diamond-sierra-site-defense/tags/2.0.0/readme.txt

@@ -23 +23 @@
 * Detects injected remote `import()` calls in files and on the live homepage.
 * Fetches your homepage like a visitor coming from Google, and again as Googlebot, to catch injections and SEO spam that hide from logged-in users.
-* Tracks new and changed PHP files between scans.
+* Tracks new and changed PHP files between scans, and shows on the dashboard what changed since the previous scan.
+* Checks accounts for what they can do, not what their role is called, and lists plugins that aren't from WordPress.org, flagging the ones that show signs of malware.
+* Catches malware that reinstalls itself: watchdog files, the settings and scheduled tasks it keeps in the database, and hostile .htaccess files.
+* Reports copies of wp-config.php, database dumps, site backups, error logs, .env and .git left in the website folder, and whether anyone can download them.
 * Risky plugin alerts with no setup and no API key: plugins removed from WordPress.org for a security issue, security updates waiting (found in the plugin's changelog) and plugins abandoned for over two years.
 * Optional: checks whether Google Safe Browsing is warning visitors away from the site (off until you turn it on).
@@ -30 +33 @@
 **Fixes**
 
-* Restore a modified core, plugin or theme file with the verified original from WordPress.org.
-* Quarantine suspicious files – restorable from the Quarantine tab.
+* Delete file: removes a file that isn't part of WordPress, a plugin or a theme, and keeps a copy for 30 days on the Quarantine tab in case something needed it.
+* Repair: puts back the verified copy of a changed core, plugin or theme file from WordPress.org. View differences shows what was changed.
+* View file shows the code with the matched lines marked, before you decide.
+* Remove tasks and Delete settings for self-restoring malware, and Remove admin rights or Delete account for fake administrators.
 * A verification scan runs automatically after a fix to confirm the malware is really gone.
+
+**Tasks & hidden code**
+
+* Every scheduled task WordPress will run, with the plugin or theme behind it. Tasks of known malware families are flagged.
+* Every must-use plugin and drop-in, which run on every page without showing on the Plugins screen, with what the scan found in each.
 
 **Firewall**
@@ -50 +60 @@
 * AI training crawlers (optional): GPTBot, ClaudeBot, CCBot, Bytespider and others are told in robots.txt and turned away if they ignore it, while AI assistants fetching a page for a user still get in. The Firewall tab shows which AI bots visit and how often.
 * Log-only mode: see what would be blocked before anything is. New installs log for their first week, then start blocking on their own.
+* Early firewall (one click): the firewall runs before WordPress and your other plugins load, so an attack on a vulnerable plugin is stopped before its code starts. Site Defense sets it up itself in .user.ini, .htaccess or wp-config.php, and works next to another firewall that already runs this way, such as Wordfence's.
+* A private unblock link for your password manager: if your own address gets blocked, opening it removes the block and trusts that address for an hour.
 
 **Login protection**
@@ -92 +104 @@
 **Diamond Sierra Site Defense Pro**
 
-An optional add-on for people who clean hacked sites or look after many: one-click database cleanup, "Fix automatically", the post-hack recovery kit, protection against stolen login cookies, supply-chain watches, WooCommerce card-testing and checkout protection, CVE matching, an alert centre with Slack/Discord, an activity log and white-labelling. Everything listed above stays free. Details at [diamondsierra.com](https://diamondsierra.com/diamond-sierra-site-defense-pro/)
+An optional add-on for people who clean hacked sites or look after many: bulk actions, one-click database cleanup, "Recover from a hack", an emergency lockdown, country blocking, live traffic, an AI security advisor, protection against stolen login cookies, supply-chain watches, WooCommerce card-testing and checkout protection, CVE matching, an alert centre with Slack/Discord, an activity log and white-labelling. Everything listed above stays free. Details at [diamondsierra.com](https://diamondsierra.com/diamond-sierra-site-defense-pro/), and how to use every feature in the [documentation](https://diamondsierra.com/diamond-sierra-site-defense/documentation/).
 
 == Installation ==

diamond-sierra-site-defense/trunk/readme.txt

@@ -23 +23 @@
 * Detects injected remote `import()` calls in files and on the live homepage.
 * Fetches your homepage like a visitor coming from Google, and again as Googlebot, to catch injections and SEO spam that hide from logged-in users.
-* Tracks new and changed PHP files between scans.
+* Tracks new and changed PHP files between scans, and shows on the dashboard what changed since the previous scan.
+* Checks accounts for what they can do, not what their role is called, and lists plugins that aren't from WordPress.org, flagging the ones that show signs of malware.
+* Catches malware that reinstalls itself: watchdog files, the settings and scheduled tasks it keeps in the database, and hostile .htaccess files.
+* Reports copies of wp-config.php, database dumps, site backups, error logs, .env and .git left in the website folder, and whether anyone can download them.
 * Risky plugin alerts with no setup and no API key: plugins removed from WordPress.org for a security issue, security updates waiting (found in the plugin's changelog) and plugins abandoned for over two years.
 * Optional: checks whether Google Safe Browsing is warning visitors away from the site (off until you turn it on).
@@ -30 +33 @@
 **Fixes**
 
-* Restore a modified core, plugin or theme file with the verified original from WordPress.org.
-* Quarantine suspicious files – restorable from the Quarantine tab.
+* Delete file: removes a file that isn't part of WordPress, a plugin or a theme, and keeps a copy for 30 days on the Quarantine tab in case something needed it.
+* Repair: puts back the verified copy of a changed core, plugin or theme file from WordPress.org. View differences shows what was changed.
+* View file shows the code with the matched lines marked, before you decide.
+* Remove tasks and Delete settings for self-restoring malware, and Remove admin rights or Delete account for fake administrators.
 * A verification scan runs automatically after a fix to confirm the malware is really gone.
+
+**Tasks & hidden code**
+
+* Every scheduled task WordPress will run, with the plugin or theme behind it. Tasks of known malware families are flagged.
+* Every must-use plugin and drop-in, which run on every page without showing on the Plugins screen, with what the scan found in each.
 
 **Firewall**
@@ -50 +60 @@
 * AI training crawlers (optional): GPTBot, ClaudeBot, CCBot, Bytespider and others are told in robots.txt and turned away if they ignore it, while AI assistants fetching a page for a user still get in. The Firewall tab shows which AI bots visit and how often.
 * Log-only mode: see what would be blocked before anything is. New installs log for their first week, then start blocking on their own.
+* Early firewall (one click): the firewall runs before WordPress and your other plugins load, so an attack on a vulnerable plugin is stopped before its code starts. Site Defense sets it up itself in .user.ini, .htaccess or wp-config.php, and works next to another firewall that already runs this way, such as Wordfence's.
+* A private unblock link for your password manager: if your own address gets blocked, opening it removes the block and trusts that address for an hour.
 
 **Login protection**
@@ -92 +104 @@
 **Diamond Sierra Site Defense Pro**
 
-An optional add-on for people who clean hacked sites or look after many: one-click database cleanup, "Fix automatically", the post-hack recovery kit, protection against stolen login cookies, supply-chain watches, WooCommerce card-testing and checkout protection, CVE matching, an alert centre with Slack/Discord, an activity log and white-labelling. Everything listed above stays free. Details at [diamondsierra.com](https://diamondsierra.com/diamond-sierra-site-defense-pro/)
+An optional add-on for people who clean hacked sites or look after many: bulk actions, one-click database cleanup, "Recover from a hack", an emergency lockdown, country blocking, live traffic, an AI security advisor, protection against stolen login cookies, supply-chain watches, WooCommerce card-testing and checkout protection, CVE matching, an alert centre with Slack/Discord, an activity log and white-labelling. Everything listed above stays free. Details at [diamondsierra.com](https://diamondsierra.com/diamond-sierra-site-defense-pro/), and how to use every feature in the [documentation](https://diamondsierra.com/diamond-sierra-site-defense/documentation/).
 
 == Installation ==