[{"name":"Update Unique Keys","slug":"update-unique-keys","version":"1.0.11","author":"Brian Passavanti","author_profile":"https://profiles.wordpress.org/gottaloveit/","requires":"2.6","tested":"6.0.9","requires_php":false,"requires_plugins":[],"rating":0,"ratings":{"1":0,"2":0,"3":0,"4":0,"5":0},"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"downloaded":6038,"last_updated":"2022-06-18 10:20pm GMT","added":"2010-03-09","homepage":"http://passavanti.name/wordpress-update-unique-keys","sections":{"description":"

In an effort to help make WordPress installations more secure, this plugin will use the WordPress hosted Unique Key generator to update the wp-config.php file with the following keys/salts:

AUTH_KEY
SECURE_AUTH_KEY
LOGGED_IN_KEY
NONCE_KEY
AUTH_SALT
SECURE_AUTH_SALT
LOGGED_IN_SALT
NONCE_SALT

If the wp-config.php file is not writable, then the plugin will show the key / salt values on the plugin options page so the admin can then manually update the wp-config.php file.

\n","installation":"

Note: As is the case when installing any new plugin, it’s always a good idea to backup your blog data before installing.

After downloading the Update Unique Keys plugin, unpack and upload the file to the wp-content/plugins folder on your blog. Make sure to leave the directory structure of the archive intact so that all of the Update Unique Keys files are located in ‘wp-content/plugins/updateuniquekeys/’
You will need to activate the Update Unique Keys plugin in order to update your wp-config.php file. Go to the Plugins tab and find Update Unique Keys in the list and click Activate.
After activating proceed to the plugin settings page (under Settings > Update Unique Keys) to update your keys and wp-config.php file.
You will be automatically logged out, due to the keys changing, simply re-login with the same username and password.

\n","faq":"\n

\nDoes this plugin mess up my wp-config.php file?\n\n

No, every other line does not get touched.

\nWhat if my wp-config.php file is not-writable?\n\n

The plugin will display the values for you to manually update the wp-config.php file, using FTP or whatever method is allowed by your webhost.

\nWhat if the keys are already generated and I run this plugin?\n\n

The plugin will generate a new set of keys. The only thing it does is log you out temporarily. By updating the keys on occassion, provides more security for WordPress.

\n\n","changelog":"

1.0.0.

Original Release.

1.0.1

Fix file include error

1.0.2

Correctly tagging file versions
Added more FAQ

1.0.3

Correctly tagging file versions

1.0.4

Cleaned up variables and class, make it not possible for namespace collisions with other plugins
Added security, including administrator level user check and is_admin check

1.0.5

Added localization
Cleaned up admin dash panel

1.0.6

no functional changes
changed links in admin options panel

1.0.7

no functional changes
verified works in 3.0

1.0.8

moved pulling keys from wordpress.org to update function
to prevent site timeout if wordpress.org is timing out

1.0.9

supporting up to WordPress 3.9

1.0.10

supporting up to WordPress 4.5.3

1.0.11

supporting up to WordPress 6.0
added some logic checking based on support feedback about empty keys
switched to using php curl (but checks if enabled in the code)
and more error checking

\n","screenshots":"

$\"Output$
Output when wp-config.php is not writeable.
$\"Output$
Output when successful.

"},"short_description":"This plugin will automatically set and/or update the Authenication Unique Keys in the wp-config.php file.","download_link":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.11.zip","screenshots":{"1":{"src":"https://ps.w.org/update-unique-keys/trunk/screenshot-1.jpg?rev=2744635","caption":"Output when wp-config.php is not writeable."},"2":{"src":"https://ps.w.org/update-unique-keys/trunk/screenshot-2.jpg?rev=2744635","caption":"Output when successful."}},"tags":{"authentication-unique-keys":"Authentication Unique Keys","auth_key":"AUTH_KEY","secret-keys":"secret keys","secure_auth_key":"SECURE_AUTH_KEY","wp-config":"wp-config"},"versions":{"1.0.0":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.0.zip","1.0.1":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.1.zip","1.0.10":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.10.zip","1.0.11":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.11.zip","1.0.2":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.2.zip","1.0.3":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.3.zip","1.0.4":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.4.zip","1.0.5":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.5.zip","1.0.6":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.6.zip","1.0.7":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.7.zip","1.0.8":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.8.zip","1.0.9":"https://downloads.wordpress.org/plugin/update-unique-keys.1.0.9.zip","trunk":"https://downloads.wordpress.org/plugin/update-unique-keys.zip"},"donate_link":"http://passavanti.name/donate","icons":{"default":"https://s.w.org/plugins/geopattern-icon/update-unique-keys.svg"}},{"name":"Password Vault","slug":"password-vault","version":"1.8.3","author":"Denny Cherry","author_profile":"https://profiles.wordpress.org/mrdenny/","requires":"3.0.1","tested":"4.9.26","requires_php":false,"requires_plugins":[],"rating":0,"ratings":{"1":0,"2":0,"3":0,"4":0,"5":0},"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"downloaded":2223,"last_updated":"2018-12-16 9:23pm GMT","added":"2014-05-25","homepage":"http://dcac.co/go/password-vault","sections":{"description":"

Do NOT use with PHP 7.3 or above. This plugin currently uses features which are only found in PHP 7.2 and below.

Allows for the secure saving of passwords within the WordPress Admin Interface. Access to a accounts can be given based on
\nwordpress users and/or groups. Groups are defined within the plugin directly on the settings screen. Plugin uses your sites
\nspecific SECURE_AUTH_KEY value from your wp-config.php file as your encryption key, so no two sites use the same key (a
\nwarning is shown if you are using the default value).

The plugin includes 5 user configurable fields (“Client Name” and “Account Type” in the screenshots) so you can customize
\nthem for your needs.

All viewing of passwords as well as changing of passwords is logged for auditing purposes.

Encryption keys can be changed by putting the new key in the wp-config.php file and the old key in the settings page, then
\nrunning through the key migration process.

Searching in the username field supports wildcard searching by default. By default the five user defined fields are static
\nmatching when there is a value in the field. Wildcard searching is supported on the user defined fields by using the %.

\n","installation":"

This section describes how to install the plugin and get it working.

e.g.

Upload the contents of the zip file to the /wp-content/plugins/password-vault directory
Activate the plugin through the ‘Plugins’ menu in WordPress
Set a secure password as the SECURE_AUTH_KEY value in the wp-config.php file
Configure the settings through the settings page.
Begin documenting account information through the tools page.

\n","faq":"\n

What does this plugin do?

This plugin allows you to securly store usernames and passwords online in a password protected repository.

How do I change the encryption key?

To change the encryption key, first enter the new key in the wp-config.php file. Then open the settings page,
\nand put the old key in the field at the bottom and save the settings. A new menu option at the top of the page
\nwill appear called “Complete Key Change”. Select this link, check the checkbox to verify that you have a backup
\nand click the “Complete Key Change” button. Depending on how much data you have in the main table and the audit
\ntable this process may run quickly or it may take a long time. No matter how long it takes do NOT stop the process.

Stopping the process can cause you to loose access to some or all of the data.

After the process is done, go back to the main page and remove the old encryption key and save the settings. This will
\nremove the link from the menu at the top of the page.

How many Groups can I have?

Basically as many as you want. The field is an INT(11) in MySQL so you should be able to have 2,147,483,647 groups.

Where are the users configured?

The users are simply users from WordPress.

Can a user see an account if they don’t have access to it?

Sort of. They will be able to see that the account exists, but they won’t be able to see the password. Even if they
\nfigure out the ID number and stick it in the URL field manually it still won’t show them the password.

Can someone have write permissions without read permissions?

No. If you grant write permissions to a user, they get read permissions automatically.

Can someone have owner permissions without read or write permissions?

No. If you grant owner permissions to a user, they get read and write permissions automatically.

What takes priority, group or user permissions?

Neither, they are merged.

My site is behind a load balancer, and I’ve got the “Requires SSL” setting checked, but it isn’t working.

This is because the application is using the is_ssl() function within WordPress
\nwhich isn’t correctly handle load balancers. For now it is recommended that you follow the directions in the is_ssl()
\ndocument and add the “Force SSL URL Scheme” plugin to your site so that the site forces SSL. If this doesn’t work, contact us
\nvia the forums and we’ll figure it out.

Why does auditing turn itself on every time I upgrade or activate the plugin?

This is done as a security precaution. Every time the plugin is activated it turns auditing back on if it is disabled.

\n\n","changelog":"

1.8.3

Fixed passwords being saved in autosave dropdown in the browser
Fixed another XSS potential issue

1.8.2

Fixed XSS potential issues
Tested up through 4.7.2
Changed default screen to be search page instead of just the menu

1.8.1

Tested for version 4.3
Fixed issue with users being able to see passwords from other groups
Fixed issue with permissions not being added to new records on insert correctly

1.8

Tested for version 4.1
Verified that all database calls with parameters which have user specified data are paramaterized
Sanatizing user inputs to prevent javascript attacks

1.7.1

Changed graphics to use absolute paths based on plugin folder location, so they aren’t incorrect if using non-default location.
Cleaned up some class calls.
Uploaded this update from 30k feet at 400mph, because that’s just how I roll.

1.6

Added a setting to hide the application unless the user is a member of a group within the application.
Added a setting to hide users and groups which the user doesn’t have a group relationship with.
Changed the builtin ad from showing the WordPress version number to the plugin version number.

1.5

Allows for users to see or not see accounts they have access to depending on setting.
Added validation to ensure that values are the correct length when being stored.
Added button to go from adding a new record to using that record quicker.
Added option to redirect away from page with password showing after n seconds.
Added a link to the “requires SSL” error to make it easier to get to the app via SSL.
Enabled account deletion, when deletion is enabled in the settings.
Made all custom fields wildcard searches by default.
Cleaned up buttons on the view account screen.

1.3.2

Fixing icon in custom menu, because I’m an idiot.

1.3.1

Fixing icon files which didn’t get uploaded in the initial 1.3 release

1.3

Made option to have application as it’s own menu item instead of under Options and Tools menus

1.2.4

Fixed the double back slash problem
Removed the double back slash problem from the FAQ
Made URLs in the user defined fields clickable from the search page
Fixed formatting on the Find Account page

1.2.3

Fixed formatting issues with a couple of tables.

1.2.2

Fixing upgrade code.

1.2

Made auditing optional
Logs when auditing is enabled and disabled
Tightened up the code a little
Added an additional security check to ensure user is logged in when using the application

1.1

Cleaned up buttons
Added audit viewing screen.
Add option to require SSL for plugin use. Settings page doesn’t require SSL.
Made custom labels optional or required.
Code cleanup.

1.0

User Defined Fields are added.
Group Management.
Group Membership.
Encryption for passwords everywhere they are stored.
User level permissions.
Group permissions.

\n","screenshots":"

$\"Adding$
Adding a new account.
$\"Searching$
Searching for an account.
$\"Editing$
Editing an account.
$\"Editing$
Editing permissions on an account.
$\"Main$
Main settings page.
$\"Group$
Group Management settings page.
$\"Group$
Group Membership settings page.
$\"Optional$
Optional Settings Menu

"},"short_description":"Gives you an application within the Wordpress admin screen which allows you to securely save information for accounts which you use regularly.","download_link":"https://downloads.wordpress.org/plugin/password-vault.zip","screenshots":{"1":{"src":"https://ps.w.org/password-vault/assets/screenshot-1.png?rev=920595","caption":"Adding a new account."},"2":{"src":"https://ps.w.org/password-vault/assets/screenshot-2.png?rev=920595","caption":"Searching for an account."},"3":{"src":"https://ps.w.org/password-vault/assets/screenshot-3.png?rev=932468","caption":"Editing an account."},"4":{"src":"https://ps.w.org/password-vault/assets/screenshot-4.png?rev=920595","caption":"Editing permissions on an account."},"5":{"src":"https://ps.w.org/password-vault/assets/screenshot-5.png?rev=932468","caption":"Main settings page."},"6":{"src":"https://ps.w.org/password-vault/assets/screenshot-6.png?rev=920595","caption":"Group Management settings page."},"7":{"src":"https://ps.w.org/password-vault/assets/screenshot-7.png?rev=927556","caption":"Group Membership settings page."},"8":{"src":"https://ps.w.org/password-vault/assets/screenshot-8.png?rev=932468","caption":"Optional Settings Menu"}},"tags":{"password":"password","password-locker":"password locker","password-repository":"password repository","password-vault":"password vault","passwords":"passwords"},"versions":[],"donate_link":"http://dcac.co/go/password-vault","icons":{"default":"https://s.w.org/plugins/geopattern-icon/password-vault.svg"}}]

SECURE_AUTH_KEY

Update Unique Keys

Password Vault

Get New Themes & Resources