Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vuln...
Free
3M+ installs 4.9★ (8,862)
LH HSTS
HSTS is HTTP Strict Transport Security, a means to enforce using SSL even if the user accesses the site through HTTP and not HTTPS.
The facts
- Rating
- 3.9★ from 7
- Active installs
- 600+
- Price
- Free
- Last updated
- 12 Jul 2020
- Added
- Mar 2016
- Requires WP
- 3.0
- Tested up to
- WP 5.4.21
- Downloads
- 357,884
Our analysis
AI-assistedLH HSTS is a WordPress plugin designed to enhance SSL security by sending the appropriate headers for HTTP Strict Transport Security (HSTS). It allows you to configure settings related to max-age, subdomains, preload, and redirects through filters in your theme's functions.php file.
This plugin is suitable for website owners who want to implement HSTS to improve security and ensure that browsers connect to their site over HTTPS. It is particularly useful for those with a basic understanding of PHP and WordPress theme development.
Best for: Website owners looking to implement HSTS for improved security.
What it does well
- ✓Sends proper headers for full SSL security
- ✓Allows configuration of HSTS settings via filters
- ✓Free to use from the WordPress.org directory
Where it falls short
- •Limited information on specific features
- •Requires basic PHP knowledge for configuration
- •Last updated in July 2020
Verdict
LH HSTS provides essential functionality for enhancing SSL security, though its limited updates and configuration requirements may not suit all users.
From the developer
shawfactor's own description of LH HSTS, lightly tidied.
This plugin send the proper headers for full ssl security. For more information on what this is and why it is important visit: http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
The options are preset to enable browsers to preload the HSTS directive but can be overwritten by filters which are clearly documented in the code.
Did you find this plugin helpful? Please consider writing a review.
To update the max-age settings, add the following code to your functions.php
add_filter('lh_hsts_max_age', 'modify_ls_hsts_max_age_func');
function modify_ls_hsts_max_age_func( $max_age ){
return false;
}
`
To update the subdomain settings, add the following code to your functions.php
add_filter(‘lh_hsts_subdomain’, ‘modify_ls_hsts_subdomain_func’);
function modify_ls_hsts_subdomain_func( $subdomain ){
return false;
}
`
To update the preload setting, add the following code to your functions.php
add_filter('lh_hsts_preload', 'modify_ls_hsts_preload_func');
function modify_ls_hsts_preload_func( $preload ){
return false;
}
`
To update the redirect setting, add the following code to your functions.php
add_filter(‘lh_hsts_redirect’, ‘modify_ls_hsts_redirect_func’);
function modify_ls_hsts_redirect_func( $redirect ){
return false;
}
`
Tagged as
industry
Logistics & Transport
quality
Security
Alternatives
Other plugins for securing a site.
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team....
Free
5M+ installs 4.7★ (4,983)
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...
Free
5M+ installs 4.7★ (1,186)
Loginizer
93Loginizer is a WordPress security plugin which helps you fight against bruteforce attacks.
Free
1M+ installs 4.8★ (1,030)
Safe SVG
93Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.
Free
1M+ installs 4.9★ (79)
Protect your website investment with All-In-One Security (AIOS) – a comprehensive and easy to use security plu...
Free
1M+ installs 4.7★ (1,715)