General security question

Without writing a marathon document (did you see how I did that? :), I’ll tell you this. My Private Site is secure enough, but if you’re doing serious security protection, you need to go beyond this sort of plugin.

This will guard sites from outside visitors poking around, but I would not expect it to keep out determined pentesters. If you have users you need to protect, you’ll want to look for a more hardened solution than what’s essentially a login redirect system.

–David

Thanx David.
Yes, I see what you did there ??

A real catch 22 this. Finding out weaknesses on a system without letting the ones you are trying to keep out know about them ??
thanx though.
j

Well, look at it this way. If you’re building a site where you’d rather not have folks mucking about, this plugin will do. I have a few sites I protect behind My Private Site just because I don’t want them world-readable. They contain some test sites, but nothing that will cause major distress if they “fall into the wrong hands.”

But if you have real responsibility for identity safety and security, then just throwing a plugin at the problem is not enough. You need to engineer in real security, which may well go beyond WordPress itself and should involve people with strong expertise in protecting sensitive content online.

You need to know where that line is.

Thanx for taking the time to discuss this.
We are on a limited budget and need to reverse-engineer it a bit. Meaning decide what can be on there. More a case of being able to answer this question to people on there.
Thanx again!
J