Remove Dashboard Access vs NewStatPress

NewStatPress is a new version of StatPress that was the first real-time plugin dedicated to the management of statistics about blog visits. It collects information about visitors, spiders, search keywords, feeds, browsers etc. Once the plugin NewStatPress has been activated it immediately starts to collect statistics information. Using NewStatPress you could spy your visitors while they are surfing your blog or check which are the preferred pages, posts and categories. In the Dashboard menu you will find the NewStatPress page where you could look up the statistics (overview or detailed). NewStatPress also includes a widget one can possibly add to a sidebar (or easy PHP code if you can’t use widgets!). With the new ajax/javascript usage for variables in widget, the plugin is faster for a user being visit your site even with 1GB or more of database to use! (requires the External API be enabled in NewStatPress>Options>API) IMPORTANT: all previous versions from 1.0.4 are subject to XSS and SQL injection from an old Statpress routine. You have to use at least version 1.0.6 to avoid security issue. PLEASE UPDATE always to the latest version available. Support Check at http://newstatpress.altervista.org What’s new? Simple adding index to database and changes some data fields for better database storing (from here http://www.poundbangwhack.com/2010/07/03/improve-the-performance-of-the-wordpress-plugin-statpress-and-your-blog/ where some modification comes from) Ban IP You could ban IP list from stats editing def/banips.dat file. DB Table maintenance NewStatPress can automatically delete older records to allow the insertion of newer records when limited space is present. This features is left as original StatPress but it will be replaced by the history data instead. External API External API are a way to gives the collected informations as a web service using a POST call. With it you can use (for example) your collected data of WordPress inside a Drupal site. The API must be enables by check a flag into the option (by default is disabled) and a private KEY must be entered (you can generate a random one). This KEY is for authenticate the called as a valid allowed client. Even if the API is for external usage, it will be used internally for speed up page generation using AJAX, so at some point you will need to activate it to continue to see overview and Details pages. Actually those are the available commands: Command | Parameters | Description version gives the Newstatpress version in use dashboard gives the Newstatpress dashboard overview table External API is actually used by Multi-NewStatPress (a software than manages data from multiple installation of NewStatPress in different servers). If you want to use the API you need to pass to POST those values: VAR the variable for the query (like ‘Version’) KEY the MD5 of date at minute level plus the key you enter into option (e.g in PHP: md5(gmdate(‘m-d-y H i’).key) ) PAR the parameter associated with the VAR TYP the type of result: JSON (default) of HTML into those url: your_site+”/wp-content/plugins/newstatpress/includes/api/external.php” NewStatPress Widget / NewStatPress_Print function Widget is customizable. These are the available variables: %thistotalvisits% – this page, total visits %alltotalvisits% – all page, total visits %totalpageviews% – total pages view %monthtotalpageviews% – total pages view in the month %todaytotalpageviews% – total pages view today %since% – Date of the first hit %visits% – Today visits %yvisits% – Yesterday visits %mvisits% – Month visits %wvisits% – Week visits %totalvisits% – Total visits %os% – Operative system %browser% – Browser %ip% – IP address %visitorsonline% – Counts all online visitors %usersonline% – Counts logged online visitors %toppost% – The most viewed Post %topbrowser% – The most used Browser %topos% – The most used O.S. %topsearch% – The most used search terms In widget, those are special html contropart: %br% => %ul% => * %/ul% => %li% => %/li% => Now you could add these values everywhere! NewStatPress offers a new PHP function newstatpress_print(). * i.e. newstatpress_print(“%totalvisits% total visits.”); New experimental functions: place this command [NewStatPress: xxx] every were in your WordPress blog pages and you will have the graph about the xxx function. Available functions are: * [NewStatPress: Overview] * [NewStatPress: Top days] * [NewStatPress: O.S.] * [NewStatPress: Browser] * [NewStatPress: Feeds] * [NewStatPress: Search Engine] * [NewStatPress: Search terms] * [NewStatPress: Top referrer] * [NewStatPress: Languages] * [NewStatPress: Spider] * [NewStatPress: Top Pages] * [NewStatPress: Top Days – Unique visitors] * [NewStatPress: Top Days – Pageviews] * [NewStatPress: Top IPs – Pageviews] License GPLv2 or later License URI https://www.gnu.org/licenses/gpl-2.0.html

The easiest and safest way to restrict access to your WordPress site’s Dashboard and administrative menus. Remove Dashboard Access is a lightweight plugin that automatically redirects users who shouldn’t have access to the Dashboard to a custom URL of your choosing. Redirects can also be configured on a per-role/per-capability basis, allowing you to keep certain users out of the Dashboard, while retaining access for others. Limit Dashboard access to user roles: Admins only Admins + editors Admins, editors, and authors or restrict by specific user capability Choose your own redirect URL Optionally allow users to edit their profiles Display a message on the login screen so users know why they’re being redirected Allow specific admin pages through the redirect — paste a list of URLs your customers should still be able to reach (with wildcard support for grouping related pages) Optionally extend the block to admin-ajax.php requests for stricter lockdown Blocking access to the Dashboard is a great way to prevent clients from breaking their sites, prevent users from seeing things they shouldn’t, and to keep your site’s backend more secure. Allow only users with roles or capabilities: You can restrict Dashboard access to Admins only, Editors or above, Authors or above, or by selecting a specific user capability. Grant access to user profiles: Optionally allow all users the ability to edit their profiles in the Dashboard. Users lacking the chosen capability won’t be able to access any other sections of the Dashboard. Show a custom login message: Supply a message to display on the login screen. Leaving this blank disables the message. Allow specific admin pages through the redirect: Sometimes you want to lock down the Dashboard but still let your customers reach one or two specific admin pages — a payment confirmation, a TrustedLogin secret-share screen, a custom report. Paste those URLs into the Allowed URLs box (one per line, relative or absolute), and matching requests will skip the redirect. Use * as a wildcard inside a query value to match a whole group of pages at once. For example, ?page=tl-* allows tl-secrets, tl-config, and any other page whose slug starts with tl-. Optionally block AJAX requests too: By default this plugin doesn’t touch requests to admin-ajax.php — most WordPress sites rely on those for legitimate frontend AJAX. If you’d rather the dashboard restriction apply there as well, turn on the “Also block AJAX” checkbox in the Advanced section of the settings page.