Will I have to change all existing iframes on my site?

Any pre-existing HTML elements (i.e. , , ) will still function as it did before providing the domain name is trusted. If you at some point you need to edit these pages/posts you should use this plugin's embed dialog form to re-embed using shortcode instead of the original HTML element. Convert any existing , or elements to [lgrriw_div][lgrriw_iframe] shortcode via the dialog form. Failure to convert iframe tags to shorcode after editing an existing post/page containing an iframe will result in a blockage to public view after updating any changes to the page/post if your role has unfiltered_html capability disabled.

by lgrapplications 1 (0 reviews)

Responsive Iframe Watchdog

Name: Responsive Iframe Watchdog
Author: lgrapplications

Many WordPress administrators disable the ability to insert unfiltered_html for Editors and Authors roles to avoid being hacked via iframe or other ht …

Responsive Iframe Watchdog ranks #63,618 among WordPress.org plugins with 1+ active installations, is #4,427 of 6,322 in the Media category, a 1/5 rating from 0 reviews, and was last updated Dec 7, 2017. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 4.9 (Current: 7.1)

v1.2.1 Current Version v1.2.1

Updated 8 years ago Last Update on 07 Dec, 2017

Refreshed 6 hours ago Last Refreshed on

#4,427 of 6,322 in Media No update in over a year

View on WordPress.org

Rank

#63,618

+3140 this week

Active Installs

-50%

KW Avg Position

N/A

— No change

Downloads

1.4K

+1 today

Support Resolved

— No change

Rating

20%

Review 1 out of 5

1 (0 reviews)

Next Milestone 10

Total Progress 10%

0+ 10+

52,754

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 9 more installs to reach 10+

Rank Changes

Current #63,618

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

1.0

0 reviews

Overall 20%

0 (0%)

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.2.1
Last Updated: Dec 07, 2017
Requires WP: 4.5.0+
Tested Up To: 4.9
PHP Version: N/A
Author: lgrapplications

Support & Rating

Rating: ★ ☆ ☆ ☆ ☆ 1
Reviews: 0
Support Threads: 0
Resolved: 0%

Keywords

embed iframe security trusted video

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,754

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,007

Jetpack – WP Security, Backup, Speed, & Growth

3M+ installs

#18

Advanced Custom Fields (ACF®)

2M+ installs

#28

Image Optimization – Compress Images and Convert to WebP or AVIF

Regenerate Thumbnails

1M+ installs

#64

Smush – Image Optimization, Compression, Lazy Load, WebP & CDN

1M+ installs

#65

Imagify Image Optimization: Optimize Images | Compress & Convert to WebP/AVIF

View all Media plugins

Frequently Asked Questions

Common questions about Responsive Iframe Watchdog

By far the biggest security risk is someone getting your WordPress Administrator user name and password. Taking second place is someone getting an Editor or Author Role's user name and password. Given a user name and password to login to your WordPress site allows a hacker to edit the content of the "src attribute" of an iframe tag or embed shortcode. One thing a hacker might do is to point the URL to hackersite.com/copyofyourpage.html. This page could be a copy of your embedded page with a hidden div that when clicked will install without you knowing malicious software on your customers computer. Another way is the hacker will inject malicious JavaScript code into a hidden iframe that will execute even if you don't click on anything. Watch this video demonstrating a Drive By Attack: Javascript Injection

There are many ways for example someone standing behind you as you log in is watching. The scariest method is a malicious web site has install spyware on your computer for example watch the video below which complains about Microsoft's .net framework which allows a programmer to record keystrokes to capture everything you type on your keyboard! Recording Keystrokes to get your password

The hacker's domain will not be in the list of trusted domains which can only be changed by Administrators. As long as the hacker did not capture the username and password of an Administrator Role for your WordPress Site you should be safe. Responsive Iframe Watchdog will block the hacker's URL from Public View (domain not trusted) if the hacker logged in as a role other than Administrator (i.e. Editor, Author...). If the the hacker has a login for an Administrator Role you are in big trouble anyway so try to limit the number of Administrator Roles on your site.

You may have already disabled iframes from your WordPress site so that only an Administrator can embed. This is a good idea! Responsive Iframe Watchdog will allow your Editors and Authors to embed with iframes (unfiltered_html) disabled.

Refer to the documentation on remove_cap. You should be experienced in executing php code within WordPress to run the following code and the code should only execute one time. To remove capability for Editor Roles: try{ $editor_role = get_role( 'editor' ); if( $editor_role ){ $editor_role ->remove_cap( 'unfiltered_html' ); } } catch(Exception $e){ continue; } To remove capability for Author Roles: try{ $author_role = get_role( 'author' ); if( $author_role ){ $author_role ->remove_cap( 'unfiltered_html' ); } } catch(Exception $e){ continue; }

Any pre-existing HTML elements (i.e. <iframe>, <embed>, <video><source>) will still function as it did before providing the domain name is trusted. If you at some point you need to edit these pages/posts you should use this plugin's embed dialog form to re-embed using shortcode instead of the original HTML element. Convert any existing <iframe>, <embed> or <video><source> elements to [lgrriw_div][lgrriw_iframe] shortcode via the dialog form. Failure to convert iframe tags to shorcode after editing an existing post/page containing an iframe will result in a blockage to public view after updating any changes to the page/post if your role has unfiltered_html capability disabled.

Have you ever noticed that when you shrink your browser width and/or height, an embedded video doesn't always shrink with it? Or that the same video doesn't scale quite right on a mobile phone or tablet?. When one says that a video is responsive that means that it will look perfect in any browser or on any device at any size and it will not have any black borders around the video as the container is resized. Note: The WordPress embed shortcode is not responsive and can not be made responsive.

Yes playlists are supported for YouTube and Dailymotion (Reoccurring Event) just the a URI into the URL textbox and the app will do the rest. Vimeo and Brightcove individual videos are supported but playlists are not supported.

Just about all of the parameters are supported for all players (see screenshots).

Yes just select the border thickness from the drop-down and enter a color or color number (i.e. red, blue, #c19925).