Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!
Sync orders with Xero from WooCommerce – Xelation
Xelation seamlessly synchronizes your WooCommerce orders with Xero in real-time. Automatically sync invoices with Xero with your preferred account mappings for sales, shipping, payments & transaction fees across multiple stores, currencies & tax jurisdictions. Features Core features: sync WooCommerce invoices with Xero as either Draft, Submitted, Authorised or Paid map shipping costs to corresponding revenue account map payments to corresponding bank account set payments to automatically reconcile with the bank statement map Stripe/PayPal transaction fees to preferred cost accounts (rendered as a separate purchase bill) map tax rate to corresponding Xero tax rate across all tax jurisdictions configure order status that triggers sync with Xero e.g. pending, processing, completed or combination thereof Further features: automatically sync incoming order items with Xero products & services sync WooCommerce inventory with Xero inventory sync customers details to Xero contacts generate WooCommerce order note alongside order with deep link back to invoice in Xero in the case of ‘pay later’ invoices; apply payments to pre-existing invoice in Xero sync past orders; just let us know how far back you would like to go map preferred tracking category to line item map preferred branding theme template to invoice append custom prefix to invoice number …and much more! The Pitch! Free 14 day trial! Start synching invoices in less than a minute! Simply connect to Xero and configure your mappings …then watch your invoices sail into Xero! Typical Business Scenario A typical client scenario is where: a WooCommerce order needs to be rendered as a sales invoice in Xero with its line items and shipping costs mapped to the corresponding revenue accounts and tax rate in Xero the transaction fee needs to be rendered as a purchase bill in the costs account e.g. COGS the captured payment needs to be mapped to the corresponding bank account in Xero the payment needs to be reconciled with the bank statement feed You can also: determine when WooCommerce orders are pushed to Xero i.e. Processing, Completed or Pending status determine the status of Xero invoices i.e. Draft, Submitted, Authorised or Paid set your preferred invoice prefix e.g. Web004567 deep link between your WooCommerce Order Notes and the generated Xero invoice in either direction allowing you to quickly toggle between the two platforms enable the stock control feature which will automatically synchronize your WooCommerce inventory with the quantity to hand set in Xero Use of 3rd Parties Please note this plugin requires the use of 3rd party services: Xero Xelation By allowing access to Xero, you agree to the transfer of your data between Xero and Xelation in accordance with Xero’s terms of use and Xelation’s terms of use and privacy policy. You can disconnect Xero from the live Xelation service at any time by clicking the Disconnect from Xero button. You can fully disconnect the Xelation app from Xero at any time under the Connected apps section of your Xero settings. Requirements WooCommerce plugin Xero instance De-activate Plugin To de-activate the plugin: Click the Disconnect from WooCoomerce button De-activate the plugin Uninstall To completely uninstall the plugin: Click the Disconnect from WooCoomerce button De-activate the plugin Manually remove Xelation webhooks under: WooCoomerce > Settings > Advanced > Webhooks Manually remove Xelation API keys under: WooCoomerce > Settings > Advanced > REST API Support Please email us at info@xelation.org if you have any questions or need help.
