WPThumbs
Themes Plugins By purpose By industry Best-of lists Fix it guides
Free Plugin by Fahad Mahmood v1.3.1

Injection Guard

This plugin blocks all unauthorized and irrelevant requests through query strings and provides extended session tracking and capability audit.

Injection Guard

The facts

Rating
5★ from 5
Active installs
1k+
Price
Free
Last updated
2 Jul 2026
Added
Feb 2014
Requires WP
3.0
Tested up to
WP 7.0.4
Requires PHP
7.0
Downloads
36,209

Our analysis

AI-assisted

Injection Guard is a WordPress plugin that aims to enhance the security of your site by blocking malicious query string attacks and suspicious URL parameters. It logs all incoming attempts and provides features like user session tracking and capability audits to help you monitor and manage user activity effectively.

The plugin is suitable for WordPress users looking to improve their site's security against automated bots and manual attacks. It supports multiple languages and follows WordPress coding standards, making it accessible for a wide range of users.

Best for: This plugin is best for WordPress site owners seeking to enhance their site's security.

What it does well

  • Blocks malicious query parameters
  • Logs unique query strings attempting to access the site
  • Tracks user sessions and provides capability audit reports
  • Supports multiple languages
  • Follows WordPress coding standards

Where it falls short

  • Limited information on specific configuration options
  • No details on potential conflicts with other plugins

Verdict

Injection Guard provides useful features for monitoring and blocking security threats, although more detailed information on configuration would be beneficial.

From the developer

Fahad Mahmood's own description of Injection Guard, lightly tidied.

Author: Fahad Mahmood
Project URI: https://www.androidbubbles.com/extends/wordpress/plugins/injection-guard
License: GPL v3

Injection Guard is a WordPress plugin designed to block malicious query string attacks and suspicious URL parameters. It logs all incoming attempts, blocks harmful parameters, and adds extra security intelligence to your WordPress admin—like user session tracking and capability audit.

The plugin uses the ig_ prefix for database keys and functions, follows WordPress coding standards, and supports multiple languages. It’s compatible with pretty permalinks and helps in securing your site from automated bots and manual attacks.

Method A (Admin Panel)

  1. Login to WordPress Admin > Plugins > Add New > Upload Plugin
  2. Upload the ZIP file and activate the plugin
  3. Go to Settings > IG Settings and click “Save Settings”

Method B (Manual Upload)

  1. Download and unzip the plugin package
  2. Upload the folder to /wp-content/plugins/injection-guard/
  3. Activate the plugin from the WordPress Dashboard
  4. Visit Settings > IG Settings to configure

Features

  • Logs all unique query strings attempting to penetrate your website
  • Blocks malicious or unknown query parameters
  • Tracks login, logout, session start and duration per user
  • Capability audit report for all WordPress users
  • Multi-language support (FR, DE, ES)
  • Bootstrap-based admin UI and dashboard

License

This plugin is free software licensed under the GNU GPL v2 or later.

You should have received a copy of the GNU General Public License along with this plugin. If not, see http://www.gnu.org/licenses/gpl-2.0.html.

Read the full description on the official page →

Tagged as

Alternatives

Other plugins for measuring traffic.

Under Construction

Easy to use Under Construction Page & Coming Soon Page. Enable Under Construction Mode in seconds & sh...

Free 600k+ installs 4.8★ (1,285)
Ad Inserter

Manage Google AdSense ads, banners, ad rotation, sticky widgets, AMP ads, ads.txt, tracking, header and footer...

Free 300k+ installs 4.9★ (2,428)
MonsterInsights

The best free Google Analytics plugin for WordPress. See how visitors find and use your website so you can gro...

Free 2M+ installs 4.5★ (3,148)
Maintenance

Great looking maintenance, coming soon & under construction pages. Put your site under maintenance in minu...

Free 1M+ installs 4.4★ (860)
Header Footer Code Manager

Easily add tracking code snippets, conversion pixels, or other scripts required by third party services for an...

Free 600k+ installs 4.9★ (309)
GA Google Analytics

Adds Google Analytics tracking code to your WordPress site. Supports many tracking features.

Free 400k+ installs 4.9★ (158)