Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vs CMB2

CMB2 is a developer’s toolkit for building metaboxes, custom fields, and forms for WordPress that will blow your mind. Easily manage meta for posts, terms, users, comments, or create custom option pages. CMB2 is a complete rewrite of Custom Metaboxes and Fields for WordPress. To get started, please follow the examples in the included example-functions.php file and have a look at the basic usage instructions. You can see a list of available field types here. Contribution Development occurs on Github, and all contributions welcome. Please read the CONTRIBUTING doc for more details. A complete list of all our awesome contributors found here: github.com/CMB2/CMB2/graphs/contributors Features: Create metaboxes to be used on post edit screens. Create forms to be used on an options pages. Create forms to handle user meta and display them on user profile add/edit pages. Create forms to handle term meta and display wherever your taxonomies are used. Flexible API that allows you to use CMB forms almost anywhere, even on the front-end. Several field types are included. Custom API hook that allows you to create your own field types. There are numerous hooks and filters, allowing you to modify many aspects of the library (without editing it directly). Repeatable fields for most field types are supported, as well as repeatable field groups. CMB2 is safe to bundle with any project. It will only load the newest version in the system. Translation If you are looking to provide language translation files, Please do so via WordPress Plugin Translations. Documentation CMB2 documentation can be found at the CMB2 wiki on github. Also, If you’re into reading code and inline documentation, we tried to keep all functions and methods fully inline-documented. 3rd Party Resources Custom Field Types CMB2 Field Type: CMB Attached Posts Field from coreymcollins: custom_attached_posts, for attaching posts to a page. CMB2 Field Type: Post Search Ajax by alexis-magina: post_search_ajax Attach posts to each other. Same approach as CMB2 Attached Posts Field but with Ajax request, multiple/single option, and different UI. CMB2 Field Type: Ajax Search from rubengc: 3 different fields with the same UI in AJAX to search (with query parameters) to users, post type and taxonomy terms. CMB2 Field Type: CMB2 User Search field from Mte90: user_search_text adds a user-search dialog for searching/attaching other User IDs. CMB2 Field Type: Google Maps from mustardBees: Custom field type for Google Maps. The pw_map field stores the latitude/longitude values which you can then use to display a map in your theme. CMB2 Field Type: Leaflet Maps from villeristi: Custom field type for Leaflet Maps. CMB2 Field Type: Select2 from mustardBees: Custom field types which use the Select2 script: The pw_select field acts much like the default select field. However, it adds typeahead-style search allowing you to quickly make a selection from a large list The pw_multiselect field allows you to select multiple values with typeahead-style search. The values can be dragged and dropped to reorder CMB Field Type: Slider from mattkrupnik: Adds a jQuery UI Slider field. WDS CMB2 Date Range Field from dustyf of WebDevStudios: Adds a date range field. CMB2 Remote Image Select from JayWood of WebDevStudios: Allows users to enter a URL in a text field and select a single image for use in post meta. Similar to Facebook’s featured image selector. CMB Field Type: Sorter: This plugin gives you two CMB field types based on the Sorter script. CMB Field Type: Tags: WordPress-Tags-like field type for CMB2. note: this does not set the post tags, but simply provides a unique text input CMB Field Type: Link Picker: Using the Link Picker for CMB2 control, you can choose a link from your WordPress site, or manually enter a link. You can also identify if the link should open in a new window, or not. CMB Field Type: MultidatesPicker: Creates a CMB2 field type that enables a multiple date calendar. It uses a plugin called MultiDatesPicker v1.6.3 for jQuery UI. CMB Field Type: CMB2-radio-image: Image as radio buttons. CMB2 Term Select: Special CMB2 Field that allows users to define an autocomplete text field for terms. Note: this will set the taxonomy terms, but has the option ('apply_term' => false) to disable and save the term ids as data instead (like for options pages, etc). CMB2 Related Links: Allows users to add a related links via a repeating field group. Field inputs are powered by the CMB2 Field Type: CMB2 Post Search field documented above, and so each link can be populated with existing WordPress content by clicking on the search button. Note: this is not a standard field type, but instead a function you use in combination with CMB2::add_field(). CMB2 Field Type: Order by rubengc: Allows users to define custom order of predefined options. CMB2 Field Type: Animation by rubengc: Allows users to pickup an animation from Animate.css (includes preview of chosen animation). CMB2 Field Type: Ajax Search by rubengc: Based on CMB2 Field Type: Post Search Ajax, adds the ability to attach posts/users/terms, and the ability to limit the maximum number of attached objects. CMB2 Field Type: Visual Style Editor by rubengc: Custom field for CMB2 which allows customizing style from a small set of controls. CMB2 Field Type: Content Wrap by rubengc: Custom field for CMB2 to store a content wrap values (padding, margin or border width). CMB2 Field JS Controls by rubengc: Show any field similar to WordPress publishing actions (Post/Page post_status, visibility and post_date submit box field). CMB2 Field Type: Position by rubengc: CMB2 field type to setup a jquery UI position values. CMB2 Field Type: CMB2 Roadway Segments by pixelwatt: This plugin adds a new CMB2 fieldtype for drawing roadway segments onto a map and provides a shortcode for display. CMB2 Field Type: Font Awesome by serkanalgur: This plugin adds a new CMB2 field type for selecting Font Awesome icons. CMB2 Field Type: Typography by eduplessis: This plugin adds a new CMB2 field type “Typography” and it use jQuery fontselect for the font-family selection. CMB2 Field Type: Markdown by Rekenna: This plugin adds a new CMB2 field type “CMB2 Markdown” where you can type in markdown and view a live preview of the results or convert to html with a button. CMB2 Field Type: Switch Button by themevan: This plugin adds a Custom Switch Button field type for CMB2. CMB2 Field Type: select_plus from manzoorwanijk: Select field type which acts much like the default select field. However, it adds the support for optgroup and saving of values with multiple attribute. CMB2 Field Type: Address by scottsawyer: Just a simple, repeatable address field. It’s really just the snippet from CMB2 Snippet Library converted to a plugin. CMB2 Field Type: Link by scottsawyer: Create a link field with some attributes. Very nice for styling links. CMB2 Field Type: Widget Selector by scottsawyer: Need a field that lets you ( or your editor ) select / display an existing widget instance? Then this is the plugin for you. Other Helpful Resources CMB2 WooCommerce HPOS Orders: Adds the ability to add custom fields to the new WooCommerce HPOS orders page. CMB2 Admin Extension: Adds a UI to create CMB2 meta boxes from the WordPress admin. Also on wordpress.org. WordPress Shortcode Button: Uses CMB2 fields to generate fields for shortcode input modals. WDS-Simple-Page-Builder: Uses existing template parts in the currently-active theme to build a customized page with rearrangeable elements. Built with CMB2. CMB2 Example Theme: Demonstrate how to include CMB2 in your theme, as well as some cool tips and tricks. facetwp-cmb2: FacetWP integration with CMB2. CMB2-grid from origgami: A grid system for WordPress CMB2 library that allows the creation of columns for a better layout in the admin. CMB2 Metatabs Options from rogerlos: CMO makes it easy to create options pages with multiple metaboxes–and optional WordPress admin tabs. CMB2 Conditionals from jcchavezs: Allows developers to relate fields so the display of one is conditional on the value of another. CMB2 Metabox Code Generator from willthemoor: Skip the boring bits. Use this generator to create fully functional CMB2 metaboxes easily. Now with bulk entry! Caldera Metaplate by CalderaWP: Not specific to CMB2, but allows creating templates for outputting your custom fields. Yoast CMB2 Field Analysis WP Plugin by alexis-magina: This plugin adds in a js based method of recalculating Yoast SEO’s content scores when updating page content, specifically custom meta fields added via the CMB2 library. Skeleton by awethemes: A complete framework for WordPress, uses CMB2 engine. WP Simple Iconfonts by awethemes: An icon fonts manager and provides a font icon picker for CMB2. CMB2 Nav Menus by nsrosenqvist: Lets you use CMB2 in nav menu entries.. Links Project Homepage Github project page Documentation (GitHub wiki) Snippet Library View CHANGELOG Known Issues Metabox containing WYSIWYG editor cannot be moved or used in a repeatable way at this time (this is a TinyMCE issue). Not all fields work well in a repeatable group.

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!