KolorWeb Access Admin Notification: extreme rescue for unauthorized admin logins

June 29, 2024

KolorWeb Access Admin Notification: extreme rescue for unauthorized admin logins Plugin

Extreme rescue for unauthorized admin logins.

Every day I receive many emails of attempted access to the sites I manage. So I asked myself: “And if suddenly one attempt among the millions of those executed were to be successful, how could I know if not when it is already too late?”

I thought the only way to know is to track admin account logins.

If the login is successful, an email is sent containing the account data and the IP of origin. So as soon as you log in through the email and two links inside it, I can immediately disconnect the sessions of the compromised account, and also reset the password for that account, which will be notified by email with a second sending.

In short, a solution that could save the life of your site because it allows you to become aware that there is some backdoor on the site that allows unauthorized access.

This plugin sends an email notification for every access that is made by the website administrators. When a login is detected by a site administrator, the login time is stored and a notification is sent containing the details of the account that is logged in. If access is not authorized, through a link it is possible to disconnect the account from all devices, or disconnect the account from all devices that have logged in and at the same time reset the access password for that account. In this second case, a new notification is sent containing the new password.

Installation

From your WordPress Dashboard

✅ Click on “Plugins > Add New” in the sidebar
✅ Search for “KolorWeb Access Admin Notification”
✅ Activate KolorWeb Access Admin Notification from the Plugins page

From wordpress.org

✅ Search for “KolorWeb Access Admin Notification”
✅ Download the Plugin to your local computer
✅ Upload the kolorweb-access-admin-notification directory to your “/wp-content/plugins/” directory using your favorite ftp/sftp/scp program
✅ Activate KolorWeb Access Admin Notification from the Plugins page

Once Activated

The plugin will start sending emails for each admin account access. I recommend: Keep your eyes open.

Requirements

✅ PHP 7.2 or greater
✅ WordPress 5.2 or above

Screenshots

Notification Example

FAQ

❓ How to I access the plugin?

✅ Once activated, the plugin will start automatically sending emails for each admin account access.

❓ Is this plugin enough on its own to make my site secure?

✅ Believe me, I wish I could say yes, but we all know that security depends on a lot of factors, and that it absolutely cannot depend solely on software protections.

This plugin is not a security system, but only a possibility to limit the damage when you realize that unauthorized access has occurred.

So, once you have ascertained that there was something that did not work and that allowed access to an attacker, you must be quick to understand what could have opened the door of your site, before it is too late.

This plugin could be a valid help used perhaps in conjunction with other plugins that detect failed access attempts, so already in those cases we have notifications of attempted accesses and a notification of an access performed would only be proof that we need to take action, and quickly.

❓ I received an unauthorized access email. What I do?

✅ If you have found that access is actually not attributable to you, the only thing you absolutely must do is click on the link received in the email to reset the password and force the logout of that account from all devices.

❓ I have reset my password but I do not receive the email, what do I do?

✅ Follow this guide to learn how to reset your password in several ways: https://wordpress.org/support/article/resetting-your-password/

❓ I receive too many emails, how can I extend the sending times between one login notification and another?

✅ Notifications are sent per account, so each user will have their own notification counter. For each login, the time between one notification and another is set at 15 minutes. This means that if the same account logs in 5 in less than 15 minutes, you will only receive one notification. And the next one only after 15 minutes have elapsed starting from the first one relating to the first access.

I have made available a filter that allows you to change the time that must pass between one notification login and another.

To change this time frame to 30 minutes, for example, you can use this snippet of code that you can paste at the end of the currently active theme’s functions.php file:

add_filter( ‘kolorweb_notify_interval’, function( $interval ) { return 30; } );

If you want receive notifications for every single admin access, set $interval value to -1

add_filter( ‘kolorweb_notify_interval’, function( $interval ) { return -1; } );

❓ Where can I report bugs?

✅ Report bugs and suggest ideas at: https://wordpress.org/support/plugin/kolorweb-access-admin-notification/

Changelog

1.0.1

✅ First Code Refactoring
Feature:
- ✅ Added new control that sends notification if logged in from an administrator account while another session is already active for the same user.
Feature:
- ✅ Introduction of geolocation information of the IP used by the user during login.
- ✅ Among the available information we have Continent, Region, Country, City.

1.0.0

Release date: 2022-05-27