VigilanTor
Tor is an invaluable tool for protecting free-speech, privacy, and preventing surveillance but when abused it can protect the identity of malicious users and make tracking their activities more difficult. “Hackers” might use Tor to run security scans on your website or spam websites with comments and fake registrations. The purpose of this plugin is to give you the power to block certain Tor activity from your WordPress site. Features include: Block Tor users from registering on your site Allow Tor registrations, but flag them for review Block logins from Tor (useful for preventing brute force attacks and securing your admin panel) Block Tor users from posting comments to your site Block spammy pingbacks & trackbacks from Tor IP addresses Block Tor users from your entire WordPress site Permit access after solving a CAPTCHA (requires hCaptcha for WordPress plugin) Real-time blocking using the Tor DNS exit list service Near real time blocking using a cached blocklist which can be updated every 10 minutes or more Custom blocklist support. Block IP addresses or host networks. Statistics to show how many Tor actions have been blocked by this plugin This plugin is compatible with BuddyPress, the popular Login With Ajax plugin, and hCaptcha. If there is a feature missing that you would like, request it! If you opt to use the real-time blocking, each IP address looked up is cached for 5 minutes for efficiency. The Tor IP lists that are downloaded only contain “exit node” IP addresses so it is relatively small and the list is searched using a binary search so the plugin is very fast! This plugin also adds two shortcodes which can be used to display specific content to Tor or non-Tor users. Shortcode usage: [tor_users]Hi, I see you're using Tor. I support privacy and free-speech too! Visitors not using Tor will not see this message.[/tor_users] [non_tor_users]Defend yourself against tracking and surveillance. Circumvent censorship. Visit torproject.org to learn more. Visitors already using Tor will not see this message.[/non_tor_users] Support Tor Tor is a great thing. If you agree, consider volunteering, donating to the Tor project, or expand the Tor network by sponsoring a Tor relay which will be maintained by the plugin author. Support this plugin The author of this plugin values Tor as well as the security of your website. Considerable effort went into the development of this plugin as well as the code and infrastructure that provides you with the up-to-date exit lists. You can support this plugin by installing it, rating it positively, donating to the author, or sponsoring a Tor relay which will be operated by the plugin developer in your honor.
Comment Experience by Progress Planner
Make comments management easier by applying the simple hacks Joost has gathered over the years. This plugin adds some small hacks around core WordPress comments to make them more bearable: Cleaner comment notification emails. The option to enforce a comment policy: just create a comment policy page, toggle the option on and select it, and commenters will have to accept your comment policy before being able to comment. The option to forward comments to an email address (for instance for your support team) and then trash them. The option to disallow comments below and above a certain length. The option to redirect first time commenters to a “thank you” page. An input field on the comment edit screen to change the comment parent ID. Links in the admin comments section to email individual commenters. A button in the WP toolbar to email all the commenters on a post. Adds a comment routing option. This adds a dropdown in a post’s discussion settings, allowing the routing of comment emails to another user. See the screenshots to get an even better idea of the plugins’ functionality. Have you found an issue? If you have bugs to report, please go to the plugin’s GitHub repository. For security issues, please use our vulnerability disclosure program, which is managed by PatchStack. They will assist you with verification, CVE assignment, and, of course, notify us.