by lgrapplications
0 (0 reviews)
Responsive Iframe Watchdog
Many WordPress administrators disable the ability to insert unfiltered_html for Editors and Authors roles to avoid being hacked via iframe or other ht …
Tested up to WP 4.9.29 (Current: 6.9.4)
v1.2.1
Current Version v1.2.1
Updated 8 years ago
Last Update on 07 Dec, 2017
Refreshed 6 hours ago
Last Refreshed on
Rank
#50,812
—
No change
Active Installs
0+
-100%
KW Avg Position
N/A
—
No change
Downloads
1.4K
+1 today
Support Resolved
0%
—
No change
Rating
0%
Review 0 out of 5
0
(0 reviews)
Next Milestone 10
0+
10+
18,686
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 8 more installs to reach 10+
Rank Changes
Current
#50,812
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
0.0
0 reviews
Overall
0%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Tracked Keywords
Showing 0 of 0| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| No keyword data available yet. | ||||
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.2.1
- Last Updated
- Dec 07, 2017
- Requires WP
- 4.5.0+
- Tested Up To
- 4.9.29
- PHP Version
- N/A
- Author
- lgrapplications
Support & Rating
- Rating
- ☆ ☆ ☆ ☆ ☆ 0
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
7K+ installs
#2,704
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
30K+ installs
#954
Firelight Lightbox
200K+ installs
#257
Performance Lab
200K+ installs
#279
Photo Gallery by 10Web - Mobile-Friendly Image Gallery
200K+ installs
#280
Frequently Asked Questions
Common questions about Responsive Iframe Watchdog
By far the biggest security risk is someone getting your WordPress Administrator user name and password. Taking second place is someone getting an Editor or Author Role's user name and password.
Given a user name and password to login to your WordPress site allows a hacker to edit the content of the "src attribute" of an iframe tag or embed shortcode. One thing a hacker might do is to point the URL to hackersite.com/copyofyourpage.html. This page could be a copy of your embedded page with a hidden div that when clicked will install without you knowing malicious software on your customers computer.
Another way is the hacker will inject malicious JavaScript code into a hidden iframe that will execute even if you don't click on anything. Watch this video demonstrating a Drive By Attack:
Javascript Injection
Given a user name and password to login to your WordPress site allows a hacker to edit the content of the "src attribute" of an iframe tag or embed shortcode. One thing a hacker might do is to point the URL to hackersite.com/copyofyourpage.html. This page could be a copy of your embedded page with a hidden div that when clicked will install without you knowing malicious software on your customers computer.
Another way is the hacker will inject malicious JavaScript code into a hidden iframe that will execute even if you don't click on anything. Watch this video demonstrating a Drive By Attack:
Javascript Injection
There are many ways for example someone standing behind you as you log in is watching. The scariest method is a malicious web site has install spyware on your computer for example watch the video below which complains about Microsoft's .net framework which allows a programmer to record keystrokes to capture everything you type on your keyboard!
Recording Keystrokes to get your password
Recording Keystrokes to get your password
The hacker's domain will not be in the list of trusted domains which can only be changed by Administrators. As long as the hacker did not capture the username and password of an Administrator Role for your WordPress Site you should be safe. Responsive Iframe Watchdog will block the hacker's URL from Public View (domain not trusted) if the hacker logged in as a role other than Administrator (i.e. Editor, Author...).
If the the hacker has a login for an Administrator Role you are in big trouble anyway so try to limit the number of Administrator Roles on your site.
If the the hacker has a login for an Administrator Role you are in big trouble anyway so try to limit the number of Administrator Roles on your site.
You may have already disabled iframes from your WordPress site so that only an Administrator can embed. This is a good idea! Responsive Iframe Watchdog will allow your Editors and Authors to embed with iframes (unfiltered_html) disabled.
Refer to the documentation on remove_cap. You should be experienced in executing php code within WordPress to run the following code and the code should only execute one time.
To remove capability for Editor Roles:
try{
$editor_role = get_role( 'editor' );
if( $editor_role ){
$editor_role ->remove_cap( 'unfiltered_html' );
}
}
catch(Exception $e){
continue;
}
To remove capability for Author Roles:
try{
$author_role = get_role( 'author' );
if( $author_role ){
$author_role ->remove_cap( 'unfiltered_html' );
}
}
catch(Exception $e){
continue;
}
To remove capability for Editor Roles:
try{
$editor_role = get_role( 'editor' );
if( $editor_role ){
$editor_role ->remove_cap( 'unfiltered_html' );
}
}
catch(Exception $e){
continue;
}
To remove capability for Author Roles:
try{
$author_role = get_role( 'author' );
if( $author_role ){
$author_role ->remove_cap( 'unfiltered_html' );
}
}
catch(Exception $e){
continue;
}
Any pre-existing HTML elements (i.e. <iframe>, <embed>, <video><source>) will still function as it did before providing the domain name is trusted. If you at some point you need to edit these pages/posts you should use this plugin's embed dialog form to re-embed using shortcode instead of the original HTML element. Convert any existing <iframe>, <embed> or <video><source> elements to [lgrriw_div][lgrriw_iframe] shortcode via the dialog form. Failure to convert iframe tags to shorcode after editing an existing post/page containing an iframe will result in a blockage to public view after updating any changes to the page/post if your role has unfiltered_html capability disabled.
Have you ever noticed that when you shrink your browser width and/or height, an embedded video doesn't always shrink with it? Or that the same video doesn't scale quite right on a mobile phone or tablet?. When one says that a video is responsive that means that it will look perfect in any browser or on any device at any size and it will not have any black borders around the video as the container is resized. Note: The WordPress embed shortcode is not responsive and can not be made responsive.
Yes playlists are supported for YouTube and Dailymotion (Reoccurring Event) just the a URI into the URL textbox and the app will do the rest. Vimeo and Brightcove individual videos are supported but playlists are not supported.
Just about all of the parameters are supported for all players (see screenshots).
Yes just select the border thickness from the drop-down and enter a color or color number (i.e. red, blue, #c19925).