�� $ < ? \2 XC � YC D D D @ !D
bD mD vD J �D �D 7 �D E
E .E 8E ! QE sE �E �E �E �E 0 �E & �E F -F FF aF jF sF " �F � �F � cG h �G I VH T �H C �H _ 9I � �I ! (J JJ $ fJ �J �J �J " �J �J
K K ! (K JK gK �K � �K � ^L
M M M D *M ! oM �M �M P �M 6 �M 5N SN \N oN �N � �N d (O � �O L P _ iP 2 �P �P Q � Q �Q �Q ' �Q $ R - ;R $ iR �R m �R S S T cS n �S � 'T � �T O 9U 2 �U $ �U # �U V &V ? 9V k yV n �V TW T ZW ^ �W � X 4 �X Y A +Y b mY �Y � �Y � mZ H �Z E[ ~ a[ | �[ � ]\ �\ �\ K ] N] ^] e] m m] �] : �] ! '^ I^ h^ ^ � �^ (_ 4_ C_ c_ {_ �_ �_ 3 �_ ` ` % @` f` w` . �` # �` �` a a & 9a `a |a S �a �a �a 9 b Fb . Pb b ; �b � �b jc �c # �c �c �c �c
�c
d � d �d [ �d ( %e & Ne ( ue , �e �e �e f ) f Hf gf mf uf �f �f �f �f �f �f � g E �g h %h /h Mh Rh \h fh �h " �h P �h i ! i 0i 8i Wi ai ri �i P �i �i �i j j j :j Oj ej uj �j ! �j �j �j �j �j < k Qk Xk ik Z rk | �k Jl
Pl ^l # vl �l 3 �l Z �l Bm o [m " �m �m �m n -n R Fn �n I �n �n o o 4o Po jo U �o �o % �o p 6p Mp � np �p � q m �q
r + r + Br ) nr �r �r �r [ �r s 5s Ps $ js �s �s �s . �s �s t +t 2 4t gt qt ~t � �t su �u �u �u
�u � �u ? Xv b �v
�v 8 w Bw Sw � fw x 4x j >x � �x � dy � z X �z � ${ �{ �| �} �} ~ ~ ~ 4 0~ e~ 5 �~ 6 �~ F �~
: E � R 4� r H� � �� Y g� B �� � � @ ͂ � � p �� � '� ل S � , H� u u�
� �� � � $� :� R� _� t� ��
�� - �� ͆ � �
� � '� ^ >� G �� I � e /�
�� �� ! �� � �
� � � +� � �� ^�
n� " |� �� �� � Ê ��
�� ŋ � �� L � _� l� u� � � �� � j� 1� =� F� R� Y� j� ~�
�� �� �� Ҏ U � ? H� �� . �� ˏ � # � )� <� , F� j s� ސ % �� $� 5 4� ! j� ' �� �� �� ݑ �� 2 �� /� � F� �� ! �
&� 4� C K� � �� � � � �� Ȕ ה � � � � �� Y ĕ d � ��
�� ; �� $ Җ �� � Y 1� �� �� �� ė Η ޗ � 6 � 1 ;� H m� ] �� 8 � t M� M I � � Z� [ � =� 3 Z� / �� G �� N � ( U� K ~� I ʜ - � B� b� {�
�� �� J �� � �� � ,� =� ~ M� 5 ̞ � � 2� � S� m 8� � ��
B� M� Y� b� < l� �� � �� K� ]� % z� - �� � � W �� P � b� Z ~� X ٦ < 2� I o� � �� j� �� �� $ �� % � & � 3� C� [ O� �� �� 2 ǩ j �� ) e� �� �� b �� � � ( �� # ɫ $ � ! � 4� :� ?� V� e� u� 2 �� " ì � � !� =� " Z� }� �� $ �� ` έ /� P� = b� �� �� �� T Ю G %� m� 0 |� �� � �� + >� 0 j� 8 �� Ա # ݱ ( � ) *� ) T� ~� �� �� � �� �� �� P �� � # *� $ N� s� �� + �� ! ٴ # �� �
'� 5� E� X� y� �� �� �� � ϵ T� { i� � � z �� L � 8 j� g �� 6 � B� � Q� � � 5 |� o �� e "� P �� D ٻ > � ? ]� y �� 3 � \ K� F �� ' � - � + E� 1 q� � �� � 2� ; �� | �� H z� � � % b� + �� � �� I �� � �� p o� ; �� @ � � ]� R �� N I� 6 �� � �� � k� � � a �� � )� D �� � �� z �� = .� Y l� V �� : � x X� T �� ? &� f� L }� � �� q �� � +� X �� = � � G� � � ? �� D �� l (� �� � � G �� s 6� n �� d � 7 ~� �� �� ' �� � � . 1� `� z� �� � �� d 6� � �� �� �� �� d �� 5� =� Z� _� i� �� ' �� �� T �� � *� C 7� {� �� �� �� 5 �� �� �� � 0� H� `� w� �� �� � �� T O� / �� 3 �� � � J �� � '� E� Q� < k� P �� �� � � �� ) � 6 3� d j� | �� � L� � �� � �� 3 P� W �� & �� g � � k� � H� G �� I '� G q� M �� � � '� F �� � � ? �� d �� � ?� Q �� : � � X� @ �� & � , G� # t� = �� # �� > �� 8 9� 1 r� 5 �� C �� ( � G� # g� 2 �� � �� � r� 2 +� ; ^� 4 �� 6 �� 2 � [ 9� ` �� x �� < o� j �� 9 � Q� Z� 2 c� �� �� �� �� ! �� �� � � $� 0� E� X� e� % q� � �� G� N� V� @ _�
�� �� �� J �� � 7 � I�
^� l� v� ! �� �� � � � � 0 � & 3� Z� k� �� �� �� �� " � � � � �� h +� I �� T � C 3� _ w� � � ! f� �� $ �� � � � " � .�
D� R� ! f� �� �� �� � � � �� K� R� [� D h� " �� � � P � 6 =� t� �� �� �� � � � d g � � L [ _ � 2 ; ? � E % ' - $ U - z $ � � m � S N T � n � � f � � O y 2 � $ � # ! E f ? y k � n % � T � ^ � � N 4
Q
A l
b �
� � � H = � ~ � | !
� �
' 3 K C � � � m � : - ! h � � � � � i u � � � � � 3
A a % � � � . � # , F ^ & z � � S � & 8 9 M � . � � ; � � � � # � � 6
@ K � ^ � [
( f & � ( � , � % D ) _ � � � � � � � ; � L E U f p � � � � � " � P � C ! O q y � � � � P � * ? I U ] { � � � � ! � * 3 ; < U � � � Z � | �
� � # � � 3 � Z ( � o � " / @ [ n R � � I � + I ] u � � U � ! % 4! Z! w! �! � �! 6" � O" m �"
I# + W# + �# ) �# �# �# �# [ �# W$ v$ �$ $ �$ �$ �$ �$ .
% <% S% l% 2 u% �% �% �% � �% �& �& �& �&
' � ' ? �' b �'
<( 8 J( �( �( � �( V) u) j ) � �) � �* � X+ X , � e, - . / :/ D/ X/ `/ 4 q/ �/ 5 �/ 6 �/ F 40
{0 �0 � �0 u1 r �1 � �1 Y �2 B 3 � E3 @ 4 � O4 p �4 � h5 6 6 S 56 , �6 u �6
,7 :7 J7 ]7 e7 {7 �7 �7 �7 �7
�7 - �7 8 ,8 A8 N8 W8 h8 ^ 8 G �8 I &9 e p9
�9 �9 ! : ": 1:
O: ]: � l: � �: �;
�; " �; �; �; � < �<
�< = = (= 7= M S= �= �= �= �= � �= � �> s? ? �? �? �? �? �?
�? �? �? @ U 4@ ? �@ �@ . �@
A -A # GA kA ~A , �A j �A B % @B fB 5 vB ! �B ' �B �B C C 9C 2 >C qC � �C AD ! FD
hD vD C �D � �D SE � WE �E
F F )F DF � _F �F Y G d `G �G
�G ; �G $ H 9H UH Y sH �H �H �H I I I 3I 6 FI 1 }I H �I ] �I 8 VJ t �J M K I RK � �K [ #L L 3 �L / �L G M N HM ( �M K �M I N - VN �N �N �N
�N �N J �N 2O AO ]O nO O ~ �O 5 P DP [P tP � �P m zQ � �Q
�R �R �R �R < �R �R � S �S �S % �S - �S T � .U W �U P SV �W Z �W X X < tX I �X � �X �Y �Y �Y $ Z % (Z & NZ uZ �Z [ �Z �Z [ 2 [ j <[ ) �[ �[ �[ b �[ � Y\ ( �\ # ] $ /] ! T] v] |] �] �] �] �] 2 �] " ^ (^ D^ c^ ^ " �^ �^ �^ $ �^ ` _ q_ �_ = �_ �_ �_ �_ T ` G ga �a 0 �a �a � �a + �b 0 �b 8 �b c # c ( Cc ) lc ) �c �c �c �c � d �d �d P �d Me # le $ �e �e �e + �e ! f # =f af
if wf �f �f �f �f �f g � g �g { �g � )h z �h L ai 8 �i g �i 6 Oj �j � �j � 0k 5 �k o �k e fl P �l D m > bm ? �m y �m 3 [n \ �n F �n ' 3o - [o + �o 1 �o � �o � vp ; q | Aq H �q � r % �r + �r � �r I �s � "t p �t ; $u @ `u � �u R :v N �v 6 �v � w � �w � Rx a y � my D �y � ?z z �z = r{ Y �{ V
| : a| x �| T } ? j} �} L �} � ~ q �~ � o X � = M� � �� � V� ? � D '� l l� ك � Y� G 2� s z� n � d ]� 7 �� � ' 0� X� `� . u� �� �� ߇ � �� d z� � ߈ ܉ �� d � y� �� �� �� �� ̊ ' Պ �� T � X� n� C {� �� ċ � 5 �� 2� B� [� t� �� �� �� ͌ Ռ � ތ T �� / � 3 � � L� J � V� k� �� �� < �� P � =� � E� 2� ) M� 6 w� d �� | � � �� � � � � 3 �� W Ȕ & � g G� � �� � �� G #� I k� G �� M �� K� � k� G �� � E� ? ߙ d � � �� Q � : b� � �� @ $� & e� , �� # �� = ݜ # � > ?� 8 ~� 1 �� 5 � C � ( c� �� # �� 2 О � � � �� 2 p� ; �� 4 ߠ 6 � 2 K� [ ~� ` ڡ x ;� < �� j � 9 \� �� �� 2 �� ۣ � ��
� ! � 6� T� ]� i� u� �� �� �� X , ( � } � � o s � � �
x � > � � ! � x � � M M � � � � � k � � � - � J � � � � Z � � � s � � = � � � � � � � � # f B P i b � � W � � %
� � � ? � X � � : K � S " � r � } T � 4 Z ( � � � U ~ � � � ` I R � � � P � i u $ � A z � w i � � 9 � � � � � � � � � F j � & � � � � � � 3
� U &
� b p @ c N O � " y � � � Q 6 � G � � j � P a � c g � � � � S l < � F � < E O � � � \ � . � � � � ` " t ? � * � � Q � � � ) z � \ � # G � � � $ o Y � � � ) � . 3 m � � O . � { � % �
� � s Q � { � V
� � n � d � t � � ! I r � � : � n � � � D � � S � � F e M b Z � � � � � 2 1 � _ � � � C � � � � � � � 6 � � } � � � l * E � � � E Y h v � � � � � � � ! | L � � ` � [ 4 � � 7 ~ , � R � � H � � � K � � U m � � � f = � � g � � � � � d � � � ) � T � n ! y j � � , H � @ � � � � � � 5 � g K � � D � / v ; � � N � � � � < � - � � � � � 7
� � 9 � � ^ � G � � � � { e � o u N � � �
R V � � � � � � h � � � � � � _ A + � ^ 1 � � � + � $ = � � � 8 � � ; � � � � � � � � 0 ] � w * h | J � 8 / ] 5 � � 8 2 � d � W # B > ' q � C � � � q � ' � 0 � 9 T # � � � - � � � � I C / � � m � � a � > � � � + � k v 6 w [ � � [ 2 x k ; ^ � a � � % � � L r � u V � � � � � � W & 4 � � 7 � � � � � � ( � � � 5 � 1 � � J l � 3 � ] � � f � � p � � � � e � q ' � � � � A � � \ � � � � " Y � � � � X � � B � $ ~ � H y � � 0 � � � � D p _ � � � ? � � � � � � | � � : � � � � z � t � @ � L c Please note that you can always save and finish the wizard later, use our %sdocumentation%s for additional information or log a %ssupport ticket%s if you need our assistance. %s day %s hour %s hours %s is a singleton class and you cannot create a second instance. %s minutes %s month %s months %s vulnerability has been detected. %s vulnerabilities have been detected. %s week %s: %s vulnerability found %s: %s vulnerabilities found (opens in a new tab) (recommended) (unknown) .htaccess does not exist .htaccess in uploads not writable .htaccess not writable .htaccess redirect. 1 year 2 years 301 .htaccess redirect 301 .htaccess redirect (read instructions first) 301 .htaccess redirect is not enabled. 301 PHP redirect 301 SSL redirect enabled 301 redirect to https set. 48 hours 6 months 8 hours (recommended) A %s vulnerability is found in %s. A correctly configured Content Security Policy can protect your visitors from the most common web attacks. It all starts with denying and upgrading insecure requests on your website. A debug.log is publicly accessibile and has a standard location. This will change the location to a randomly named folder in /wp-content/ A definition of a site url or home url was detected in your wp-config.php, but the file is not writable. A firewall rule was enabled, but /the wp-content/ folder is not writable. A firewall rule was enabled, but the firewall does not seem to get loaded correctly. A firewall rule was enabled, but the wp-config.php is not writable. A lightweight plugin with heavyweight security features, focusing on performance and usability. A networkwide SSL activation process has been started, but has not been completed. Please go to the SSL settings page to complete the process. Able to create destination folder About Cross Origin Policies About HTTP Strict Transport Security About Hardening About Limit Login Attempts About Login Protection About Recommended Security Headers About Vulnerabilities About XML-RPC About notifications About the Content Security Policy About the Mixed Content Scan About the Permission Policy Access Control According to our information, your hosting provider does not allow any kind of SSL installation, other then their own paid certificate. For an alternative hosting provider with SSL, see this %sarticle%s. According to our information, your hosting provider supplies your account with an SSL certificate by default. Please contact your %shosting support%s if this is not the case. Action Activate Activate SSL Activate SSL per site or install a wildcard certificate to fix this. Activate networkwide to fix this. Activating plugin... Active Add additional domains which can embed your website, if needed. Comma seperated. Add the following lines of code to your wp-config.php. Add your email address below. Advanced Advanced Hardening Advanced Hardening Features Advanced Security Headers Advanced hardening features complement the basic hardening functions by protecting your site against advanced threats and attacks. After completing the installation, you can continue to the next step to complete your configuration. After completing the installation, you can let Really Simple SSL automatically configure your site for SSL by using the 'Activate SSL' button. After enabling this feature, you can submit your site to %shstspreload.org%s After this number of failed login attempts the user and IP address will be temporarily blocked. Alias domain check is not relevant for a subdomain All Allow Allow only necessary third party resources to be loaded on your website, thus preventing common attacks. Use our unique learning mode to automatically configure your Content Security Policy. Allow your domain to be embedded Allowed Allows you to enter a custom login URL. An SSL certificate has been detected An SSL certificate was detected on your site. An error occurred, please try again. An error occurred: An option that requires the .htaccess file in the uploads directory is enabled, but the file is not writable. An option that requires the .htaccess file is enabled, but the file does not exist. An option that requires the .htaccess file is enabled, but the file is not writable. Anyone can register an account on your site. Consider disabling this option in the WordPress general settings. As Really Simple SSL handles all the functionality this plugin provides, we recommend to disable this plugin to prevent unexpected behavior. As a security precaution, the username ‘admin’ has been changed on %s. From now on, you can login with '%s' or an email address. As your order will be regenerated, you'll need to update your DNS text records. Attempting to install certificate using AutoSSL... Attempting to install certificate... Attempting to set DNS txt record... Authorization not completed yet. Automated Measures Automatic certificate detection is not possible on your server. Automatic renewal of your certificate was not possible. The SSL certificate should be %srenewed%s manually. Based on your settings, Really Simple SSL will take appropriate action, or you will need to solve it manually. Basic Basic SSL configuration finished! Improve your score with %sReally Simple SSL Pro%s. Because the $_SERVER["HTTPS"] variable is not set, your website may experience redirect loops. Below you will find the instructions for different hosting environments and configurations. If you start the process with the necessary instructions and credentials the next steps will be done in no time. Black Friday sale! Get 40% Off Really Simple SSL Pro Block the username 'admin' Block user registrations when login and display name are the same Block visitors from specific countries, or continents. You can also allow only specific countries. Blocked Blocked IP addresses will be automatically unblocked after the above-configured interval. In the table below you can instantly unblock IP addresses. Blocked usernames will be automatically unblocked after the above-configured interval. In the table below you can instantly unblock usernames. Browser features are plentiful, but most are not needed on your website. Bundle not available yet... By default, WordPress shows if a username or email address exists when a login fails. This will change it to generic feedback. By enabling this feature you understand that email validation is required, and you can send email from your server reliably. By selecting your hosting provider we can tell you if your hosting provider already supports free SSL, and/or where you can activate it. CPanel host CPanel password CPanel recognized. Possibly the certificate can be installed automatically. CPanel username Cancel Captcha Captcha has not yet been verified, you need to complete the process of a Captcha to verify it's availability. Captcha provider Certificate already generated. It was renewed if required. Challenge directory not writable. Change debug.log file location Change passwords every Changed debug.log location to: Changing redirect methods should be done with caution. Please make sure you have read our instructions beforehand at the right-hand side. Check again Check manually Check out Really Simple SSL Pro Check your %slicense%s. Checking SSL certificate... Checking alias domain... Checking certs directory... Checking challenge directory reachable over http... Checking challenge directory... Checking for subdomain setup... Checking for website configuration... Checking host... Checking if CURL is available... Checking if Terms & Conditions are accepted... Checking if plugin folder exists... Checking key directory... Checking permissions... Checking server software... Choose new username to replace 'admin' Choose the max-age for HSTS Choose your provider Click the button below to confirm your email address, or copy the following URL: %s CloudWays API key CloudWays user email Code execution is allowed in the public 'Uploads' folder. Completed Complianz - Consent Management as it should be Component Components will be quarantined if the update process fails. Configure your Cookie Notice, Consent Management and Cookie Policy with our Wizard and Cookie Scan. Supports GDPR, DSGVO, TTDSG, LGPD, POPIA, RGPD, CCPA and PIPEDA. Configured for HTTP challenge Congratulations! Consent Management as it should be. Content Security Policy Content Security Policy Headers Continent Continents Continue to renew. Control browser features that could allow third parties to misuse data collected by microphone, camera, GEO Location etc, when enabled for your website. Copyright warning! Could not automatically add TXT record. Please proceed manually, following the steps below. Could not copy code execution test file. Could not create test folder and file. Could not find code execution test file. Could not reach challenge directory over %s. Could not rename folder! Could not retrieve server list Could not test certificate Could not verify TXT record for domain %s Could not verify alias domain. Count Country Creating account... Critical Critical (default) Cross Origin Embedder Policy Cross Origin Opener Policy Cross Origin Resource Policy Custom login URL Customize login attempts, intervals, and temporary lockouts according to your preferences to regulate the level of security on your website during authentication. No additional settings required DNS records were not verified yet. Please complete the previous step. DNS verification Dashboard Dashboard - Test Notification Date Debug.log Debugging Debugging with Really Simple SSL Delete Delete all data on plugin deletion Depending on your hosting provider, %1$smanual installation%2$s may be required. Description Destination folder already exists Details Detected status of your setup. Detection Direct Admin URL DirectAdmin host DirectAdmin password DirectAdmin recognized. Possibly the certificate can be installed automatically. DirectAdmin username Directive Directories Disable Disable "anyone can register" Disable HTTP methods Disable OCSP stapling Disable XML-RPC Disable application passwords Disable directory browsing Disable the built-in file editors Disable user enumeration Disabled Dismiss Dismiss all notifications Do you want to store these credentials for renewal purposes? Domain Don't show again Download Due to a recent update by WP Engine, we have changed your settings automatically to adapt. Elevate your security with our Premium Support! Our expert team ensures simple, hassle-free assistance whenever you need it. Email Email address Email address not valid Email address successfully verified Email could not be sent. Email could not be sent. No message or subject set. Email not verified yet. Verify your email address to get the most out of Really Simple SSL Email notification error Email notifications are only sent for important updates, security notices or when certain features are enabled. Email sent! Please check your mail Email validation Email validation completed Email verification Email verification error Email verification has not been completed yet. Check your email and click the link Enable Enable .htaccess only if you know how to regain access in case of issues. Enable 301 .htaccess redirect Enable 301 redirect Enable Custom login URL Enable Limit Login Attempts Enable Permissions Policy Enable Region restrictions Enable a .htaccess redirect or PHP redirect in the settings to create a 301 redirect. Enable login protection Enable open source blocklist API etc. Enable two-step verification Enabling auto renew... Enforce frequent password change Enforce secure password policies for your users by requiring strong passwords, and expiring passwords after a period of your choosing. Enforce strong passwords Enhancing the authentication process and optimizing user management makes Login Protection a foundational element in securing your website. Enter a custom login URL. This allows you to log in via this custom URL instead of /wp-admin or /wp-login.php Error code %s Error enabling auto renew for Let's Encrypt Error occurred when retrieving the webpage. Errors were reported during installation. Event Event Log Every three hours Example: If you want to change your login page from /wp-admin/ to /control/ answer: control Failed retrieving access token Failed retrieving account. Failed to activate plugin Failed to gather package information Failed to install plugin Feature Feedback in plugin overview File missing. Please retry the previous steps. File permissions check Files not created yet... Firewall For more information, please read this %sarticle%s Force on: Force update Free plugins From now on, the debug.log won’t be publicly accessible whenever wp-debugging is enabled. The debug log will be stored in a randomly named folder in /wp-content/. This prevents possible leakage of sensitive debugging information. GDPR/CCPA Privacy Suite General General Settings Generating SSL certificate... Generation Get detailed insights into visitors' behaviour with Burst Statistics, the privacy-friendly analytics dashboard from Really Simple Plugins. Get more information from the Really Simple SSL dashboard on %s Get notified of important changes, updates and settings. Recommended when using security features. Get notified! Get two-factor authentication with Really Simple SSL Pro Go to activation Go to installation HSTS forces browsers always to load a website via HTTPS. It prevents unnecessary redirects and prevents manipulation of data originating from communication with your website. HTTP Strict Transport Security Hardening Hardening features limit the possibility of potential weaknesses and vulnerabilities which can be misused. Heavyweight security features, in a lightweight performant plugin from Really Simple Plugins. Get started with below features and get the latest and greatest updates for a peace of mind! Here you can add IP addresses that should never be blocked by region restrictions. We will automatically add the IP address of the administrator that enabled Region Restrictions. Here you can configure vulnerability detection, notifications and measures. To learn more about the features displayed, please use the instructions linked in the top-right corner. Here you can see which users have enabled two-step login, or change the status per user. Here you control the users that are automatically, and temporarily blocked. You can also add or remove users manually. We recommend blocking ‘admin’ as username as a start. Hi, Really Simple SSL has kept your site secure for a month now, awesome! If you have a moment, please consider leaving a review on WordPress.org to spread the word. We greatly appreciate it! If you have any questions or feedback, leave us a %1$smessage%2$s. Hi, Really Simple SSL has kept your site secure for some time now, awesome! If you have a moment, please consider leaving a review on WordPress.org to spread the word. We greatly appreciate it! If you have any questions or feedback, leave us a %1$smessage%2$s. Hide your WordPress version High-risk High-risk (default) Hosting Hosting provider HttpOnly Secure cookies have been set automatically! HttpOnly Secure cookies not set. I agree to the Terms & Conditions from Let's Encrypt. I don't know, or not listed, proceed with installation I have read and understood the risks to intervene with these measures. IP Address IP Addresses IP Addresses can be allowed, blocked or will show up when your settings add them to a temporary blocklist. If you want to add your IP to the allowlist, please read the article provided at the right-hand side for instructions. IP address overview If the number of failed login attempts is exceeded within this timeframe, the IP address and user will be blocked. If the username 'admin' currently exists, you can rename it here. Please note that you can no longer use this username, and should use the new username or an email address If there's a vulnerability, you will also get feedback on the themes and plugin overview. If this is not the case, don't add this alias to your certificate. If this option is set to true, the mixed content fixer will fire on the init hook instead of the template_redirect hook. Only use this option when you experience problems with the mixed content fixer. If you entered your DNS records before, they need to be changed. If your hosting provider auto-renews your certificate, no action is required. Alternatively, you have the option to generate an SSL certificate with Really Simple SSL. If your hosting provider is not listed, and there's an SSL activation/installation link, please let us %sknow%s. If your site is only intended for users to login from specific geographical regions, you can entirely prevent logins from certain continents or countries. Import and insert file Improve security - Upgrade Improve security by requiring strong passwords and forced periodic password changes Improve security with Really Simple SSL Pro. Improve the default WordPress password strength check. You can also enforce frequent password changes for user roles. Include alias Include preload Include subdomains Install Install %sManually%s. Install SSL certificate Installation Installation failed. Installation finished Installed Installing Installing SSL certificate using PLESK API... Installing SSL certificate... Installing plugin... Instructions Interval Invalid license. Invalid login details. It is currently possible to create an administrator user with the same login and display name. It is not possible to install Let's Encrypt on a localhost environment. It is not possible to install Let's Encrypt on a subfolder configuration. It is not possible to install Let's Encrypt on a subsite. Please go to the main site of your website. Learn more Learn more about our features! Learn more about security headers Leave a review Let login cookie expire after Let's Encrypt Let's Encrypt. Letʼs Encrypt is a free, automated and open certificate authority brought to you by the nonprofit Internet Security Research Group (ISRG). Leveraging your SSL certificate with HSTS is a staple for every website. Force your website over SSL, mitigating risks of malicious counterfeit websites in your name. License invalid License valid Lightweight SSL & Hardening Plugin Limit Attempts Limit Login Attempts Limit Login Attempts protects your site from login attempts by unauthorized users. When you enable Limit Login Attempts, all login attempts are logged and repeated attempts to login with invalid credentials will be blocked automatically. Location Locked-out Lockout duration Login Protection Login attempts Login credentials incorrect Login credentials incorrect. Please check your login credentials for cPanel. Login status Low-risk Low-risk Low-risk (default) Maintain peace of mind with our simple, but effective automated measures when vulnerabilities are discovered. When needed Really Simple Security will force update or quarantaine vulnerable components, on your terms! Many vulnerabilities are exploited by injecting a user with administrator capabilities outside of the native WordPress creation process. Under advanced hardening you can prevent this from happening. Maybe later Measures Medium-risk Method Missing license. Mixed Content Fixer Mixed Content Scan Mixed content Mixed content fixer Mixed content fixer - back-end Mixed content fixer - init hook Mixed content fixer not enabled. Enable the option to fix mixed content on your site. Mixed content fixer was successfully detected on the front-end. Mixed content in %s Mixed content in CSS/JS file from other domain Mixed content in PHP file in %s Mixed content in post: %s Mixed content in the postmeta table Mixed content scan More info Multiple %s vulnerabilities have been found. No 301 redirect is set. Enable the WordPress 301 redirect in the settings to get a 301 permanent redirect. No 301 redirect to SSL enabled. No SSL certificate has been detected. No SSL detected No SSL detected. Use the retry button to check again. No known vulnerabilities detected No recommended redirect rules detected. No redirect No subdomain setup detected. No valid list of domains. None Not all recommended security headers are installed Not recognized server. Not sure if you're using XML-RPC, or want to restrict unauthorized use of XML-RPC? With learning mode you can see exactly which sources use XML-RPC, and you can revoke where necessary. Note Notification by Really Simple SSL Notifications Notifications by email OCSP not supported, the certificate will be generated without OCSP. OCSP stapling is configured as enabled by default. You can disable this option if this is not supported by your hosting provider. Off On Apache you can use a .htaccess redirect, which is usually faster, but may cause issues on some configurations. Read the instructions in the sidebar first. Once every 5 minutes Once every day Once every week One click SSL optimization One day (for testing only) One of the most powerful features, and therefore the most complex are the Cross-Origin headers that can isolate your website so any data leaks are minimized. One year Only enable if the default mixed content fixer does not fix your front-end mixed content. Only enable this if you experience mixed content in the admin environment of your WordPress website. Open Optional for: Or set your wp-config.php to writable and reload this page. Order ID mismatch, regenerate order. Order successfully created. Order successfully retrieved. Our vulnerability reporting is in beta. Signup for the beta to discover the new features! Overview Package information retrieved Password security Passwords Permanent block Permission denied. Permissions Policy Please activate it manually on your hosting dashboard. Please activate it on your dashboard %smanually%s Please add the following lines to your .htaccess, or set it to writable: Please adjust the CAA records via your DNS provider to allow Let’s Encrypt SSL certificates Please change your email address %shere%s and try again. Please check if the advanced-headers.php file is included in the wp-config.php, and exists in the wp-content folder. Please check if the non www version of your site also points to this website. Please check if the www version of your site also points to this website. Please check if your REST API is loading correctly. Your site currently is using the slower Ajax fallback method to load the settings. Please check the vulnerabilities overview for more information and take appropriate action. Please complete %smanually%s Please complete manually in your hosting dashboard. Please complete the following step(s) first: %s Please configure your %sCaptcha settings%s before enabling this setting Please create a folder 'rsssl' in the uploads directory, with 644 permissions. Please double check your DNS txt record. Please refresh the SSL status if a certificate has been installed recently. Please set the wp-config.php to writable until the rule has been written. Please set the wp-content folder to writable: Please take appropriate action. Please verify your email Plesk admin URL Plesk host Plesk password Plesk recognized. Possibly the certificate can be installed automatically. Plesk username Plesk username and password Plugin activated Plugin installed Premium Support Prevent clickjacking and other malicious attacks by restricting sources that are permitted to embed content from your website. Prevent code execution in the public 'Uploads' folder Prevent login feedback Prevent user enumeration Privacy-friendly analytics tool. Protect your site against brute force login attacks by limiting the number of login attempts. Enabling this feature will temporary lock-out a username and the IP address that tries to login, after the set number of false logins. Protect your website against brute-force attacks with a captcha. Choose between Google reCAPTCHA or hCaptcha. Protecting your website visitors from malicious attacks and data breaches should be your #1 priority, start with the essentials with Really Simple Security Quarantine Quarantined Re-check Read more Read more about security concerns with debug display enabled Really Simple Plugins Really Simple Plugins is also the author of the below privacy-focused plugins, including consent management, legal documents and analytics! Really Simple SSL Really Simple SSL & Security Really Simple SSL - Notification Test Really Simple SSL - Verify your email address Really Simple SSL and Really Simple SSL add-ons do not process any personal identifiable information, so the GDPR does not apply to these plugins or usage of these plugins on your website. You can find our privacy policy <a href="%s" rel="noopener noreferrer" target="_blank">here</a>. Really Simple SSL automatically detects your settings and configures your website to run over HTTPS. To keep it lightweight, we kept the options to a minimum. Your website will move to SSL with one click. Really Simple SSL can trigger a Captcha to limit access to your site or the login form. Really Simple SSL collects information about plugins, themes, and core vulnerabilities from our database powered by WPVulnerability. Anonymized data about these vulnerable components will be sent to Really Simple SSL for statistical analysis to improve open-source contributions. For more information, please read our privacy statement. Really Simple SSL dashboard Really Simple SSL detected an SSL certificate, but has not been configured to enforce SSL. Really Simple SSL has a new feature! Introducing Vulnerability Detection, enable it now. Really Simple SSL has received no response from the webpage. Really Simple SSL is installed, but no valid SSL certificate is detected. Really Simple SSL will scan for insecure file and folder permissions on a weekly basis. You will receive an email report and Dashboard notice if insecure permissions are found. Really Simple Security Pro Recommended Hardening Features Recommended Security Headers Recommended by Really Simple Plugins Recommended security headers enabled. Recommended security headers installed Redirect method Redirection Redirects your site to https with a SEO friendly 301 redirect if it is requested over http. Region restrictions Regions Remove from public location with Really Simple SSL Rename admin user enabled: Please choose a new username of at least 3 characters, which is not in use yet. Rename and randomize your database prefix Renew certificate Renew installation Restrict access from specific countries or continents. You can also allow only specific countries. Restrict access to your site based on user location. By default, all regions are allowed. You can also block countries from a continent. Restrict creation of administrator roles Retrieving Cloudways server data... Retrieving DNS verification token... Retrieving package information... Retry Risk Run System Health Scan SSL & Security SSL Status Test SSL activation in progress SSL certificate should be generated and installed. SSL certificate will expire on %s. SSL configuration finished! SSL is activated on your site. SSL is enabled networkwide. SSL is enabled on your site. SSL is not enabled on your network SSL is not enabled yet. SSL is not enabled. SSL is not yet enabled on this site. SSL is now activated. Follow the three steps in this article to check if your website is secure. SSL successfully installed on %s Save and continue Searching for link to SSL installation page on your server... Security Security Headers Security Headers Test Security through obscurity. Your site is no longer using the default wp_ prefix for database tables. The process has been designed to only complete and replace the tables after all wp_ tables are successfully renamed. In the unlikely event that this does lead to database issues on your site, please navigate to our troubleshooting article. See which recommended security headers are not present on your website. Self (Default) Self-hosted and privacy-friendly analytics tool. Send Send an email code during login. You can force user roles to use two-step verification, or leave the choose with your users, if so desired. Serve encrypted and authenticated responses Set permissions to 644 to enable SSL generation. Set your wp-config.php to writable and reload this page. Settings Settings update: .htaccess redirect Settings update: Database prefix changed Settings update: Debug.log file relocated Settings update: Username 'admin' renamed Site wide - Test Notification Site-wide, admin notification Source Start login protection by adding an additional layer during authentication. This will leave authentication less dependent on just a single password. Want to force strong passwords? Check out Password Security. Status Stop editing the .htaccess file Store for renewal purposes. If not stored, renewal may need to be done manually. Successfully added TXT record. Successfully generated certificate. Successfully installed Let's Encrypt Successfully installed SSL Successfully retrieved account Successfully retrieved server id and app id Successfully verified DNS records Successfully verified alias domain. Support System status Temporary block Terms & Conditions Terms & Conditions are accepted. Terms and Conditions Test not found. Test notification email error Test notifications Test notifications can be used to test email delivery and shows how vulnerabilities will be reported on your WordPress installation. Thanks for updating! The 'force-deactivate.php' file has to be renamed to .txt. Otherwise your ssl can be deactivated by anyone on the internet. The .htaccess redirect has been enabled on your site. If the server configuration is non-standard, this might cause issues. Please check if all pages on your site are functioning properly. The .htaccess redirect rules selected by this plugin failed in the test. Set manually or dismiss to leave on PHP redirect. The 301 .htaccess redirect is the fastest and most reliable redirect option. The 301 redirect with .htaccess to HTTPS is now enabled. The DISALLOW_FILE_EDIT constant is defined and set to false. You can remove it from your wp-config.php. The DNS response for %s was %s, while it should be %s. The Essentials The Event Log shows all relevant events related to limit login attempts. You can filter the log using the dropdown on the top-right to only show warnings. The Hosting Panel software was not recognized. Depending on your hosting provider, the generated certificate may need to be installed manually. The PHP function CURL has successfully been detected. The PHP function CURL is not available on your server, which is required. Please contact your hosting provider. The SSL certificate has been renewed, and requires manual %sinstallation%s in your hosting dashboard. The Terms & Conditions were not accepted. Please accept in the general settings. The URL you use to access your DirectAdmin dashboard. Ends on :2222. The URL you use to access your Plesk dashboard. Ends on :8443. The URL you use to access your cPanel dashboard. Ends on :2083. The automatic installation of your certificate has failed. Please check your credentials, and retry the %sinstallation%s. The built-in file editors are accessible to others. The certificate generation was rate limited for 10 minutes because the authorization failed. The certificate installation was rate limited. Please try again later. The certs directory is not created yet. The certs directory was successfully created. The challenge directory is not created yet. The challenge directory was successfully created. The code to block code execution in the uploads folder cannot be added automatically on nginx. Add the following code to your nginx.conf file: The content security policy has many options, so we always recommend starting in ‘learning mode’ to see what files and scripts are loaded. The email address was not set. Please set the email address The extensive mixed content scan will list all current and future issues and provide a fix, or instructions to fix manually. The following directories do not have the necessary writing permissions. The following information is attached when you send this form: license key, scan results, your domain, .htaccess file, debug log and a list of active plugins. The key directory is not created yet. The key directory was successfully created. The mixed content fixer could not be detected due to a cURL error: %s. cURL errors are often caused by an outdated version of PHP or cURL and don't affect the front-end of your site. Contact your hosting provider for a fix. The mixed content fixer is active, but was not detected on the frontpage. The non-www version of your site does not point to this website. This is recommended, as it will allow you to add it to the certificate as well. The order is invalid, possibly due to too many failed authorization attempts. Please start at the previous step. The recommended security headers are detected on your site. The required directories have the necessary writing permissions. The settings below determine how strict your site will be protected. You can leave these settings on their default values, unless you experience issues. The system is not ready for the DNS verification yet. Please run the wizard again. The system is not ready for the installation yet. Please run the wizard again. The used domain for your email address is not allowed. The user and IP address will be temporarily unable to login for the specified duration. You can block IP addresses indefinitely via the IP addresses block. The value, WP_DEBUG_DISPLAY, has either been enabled by WP_DEBUG or added to your configuration file. This will make errors display on the front end of your site. The value, WP_DEBUG_LOG, has been added to this website’s configuration file. This means any errors on the site will be written to a file which is potentially available to all users. The wp-config.php file is not writable, and needs to be edited. Please set this file to writable. The www version of your site does not point to this website. This is recommended, as it will allow you to add it to the certificate as well. These are some of our new features, and weʼre just getting started. These notifications are set to the minimum risk level that triggers a notification. For example, the default site-wide notification triggers on high-risk and critical vulnerabilities. These security headers are the fundamental security measures to protect your website visitors while visiting your website. These user roles are forced to enter the authentication code. They might be misused if you don’t actively tell the browser to disable these features. This adds extra requirements for strong passwords for new users and updated passwords. This appears to be an invalid license key for this plugin. This email address is used to create a Let's Encrypt account. This is also where you will receive renewal notifications. This email is confirmation that any security notices are likely to reach your inbox. This email is part of the Really Simple SSL Notification System This email was sent to This feature allows you to block visitors from your website based on country This feature depends on multiple standard background processes. If a process fails or is unavailable on your system, detection might not work. We run frequent tests for this purpose. We will notify you accordingly if there are any issues. This is a multisite configuration with subdomains. You should generate a wildcard certificate on the root domain. This is a security feature implemented by web browsers to control how web pages from different origins can interact with each other. This is a test notification from Really Simple SSL. You can safely dismiss this message. This is a vulnerability alert from Really Simple SSL for %s. This is the vulnerability overview. Here you will find current known vulnerabilities on your system. You can find more information and helpful, actionable insights for every vulnerability under details. This leads to issues when activating SSL networkwide since subdomains will be forced over SSL as well while they don't have a valid certificate. This setting will block attempts to assign administrator roles outside the native user creation process by WordPress. This might include other plugins that create, edit or assign roles to users. If you need to create an administrator in a third-party plugin, temporarily disable this setting while you make the changes. This will include both the www. and non-www. version of your domain. This will limit or fully disable HTTP requests that are not needed, but could be used with malicious intent. This will permanently change your database prefixes and you can NOT rollback this feature. Please make sure you have a back-up. This will send emails about vulnerabilities directly from your server. Make sure you can receive emails by the testing a preview below. If this feature is disabled, please enable notifications under general settings. To ensure all traffic passes through SSL, please enable a 301 redirect. To safely enable SSL on your server configuration, you should add the following line of code to your wp-config.php. To set the httponly secure cookie settings, your wp-config.php has to be edited, but the file is not writable. To use certain features in Really Simple SSL we need to confirm emails are delivered without issues. Token not generated. Please complete the previous step. Token not received yet. Token successfully retrieved. Trigger captcha on failed login attempt Trusted Trusted IP addresses Trying to create directory in root of website. Two Factor Authentication Two years (required for preload) Two-step verification Two-step verification is the first feature we regard as login protection. Want to know more about this feature, and what is to come? Two-step verification will be optional for these user roles, and they can disable it on first login. Two-step verification will enhance the authentication process by adding an additional layer. Selected users will be required to enter their correct credentials first, and then they must provide a one-time code sent to their email as an extra step. Type Unable to connect to cPanel Unauthorized administrators Update Really Simple SSL Pro: the plugin needs to be updated to the latest version to be compatible. Upgrade Uploads folder not writable. User User role User roles for password change Username Username 'admin' has been changed to %s Users Users trying to enter via /wp-admin or /wp-login.php will be redirected to this URL. Validating license... Verify email Verify your email address to get the most out of Really Simple SSL. View View settings page View vulnerabilities Visit Dashboard Visit the plugins overview or %srenew your license%s. Vulnerabilities Vulnerabilities Overview Vulnerabilities detected Vulnerability Alert: %s Vulnerability Detection Vulnerability Measures Vulnerability: %s Warning Warnings We have added many new features to our plugin, now bearing the name Really Simple SSL & Security. But we start like we did almost 10 years ago. Optimising your Encryption with SSL. We have detected administrator roles where the login and display names are the same. We have detected the %s plugin on your website. We have not detected any known hosting limitations. We have tried to make our Wizard as simple and fast as possible. Although these questions are all necessary, if there’s any way you think we can improve the plugin, please let us %sknow%s! We use email notification to explain important updates in plugin settings. Why Premium Support? Why did I receive this email? Widget area Widget with mixed content Will run a frequent update process on vulnerable components. WordPress 301 redirect enabled. We recommend to enable a 301 .htaccess redirect. XML-RPC XML-RPC is a mechanism originally implemented into WordPress to publish content without the need to actually login to the backend. It is also used to login to WordPress from devices other than desktop, or the regular wp-admin interface. XML-RPC with Learning Mode You already have a valid SSL certificate. You already have free SSL on your hosting environment. You are using the Really Simple SSL Shell Exec add on, but your current version needs to be updated. You can add any non-existing username to this table, to instantly block IP addresses that try common usernames like "admin". You can also let the automatic scan of the pro version handle this for you, and get premium support, increased security with HSTS and more! You can choose to automate the most common actions for a vulnerability. Each action is set to a minimum risk level, similar to the notifications. Please read the instructions to learn more about the process. You can easily block countries, or entire continents. You can act on the event log below and see which countries are suspicious, or exclude all countries but your own. You can find your Plesk username and password in %s You can find your api key %shere%s (make sure you're logged in with your main account). You can follow these %sinstructions%s. You can indefinitely block known abusive IP addresses, to completely prevent them from trying to login. You can prevent IP addresses from being temporarily blocked by adding them to this list. This can be convenient if you share an IP address with other site users. Usernames that trigger false logins will still be blocked. You can prevent usernames from being temporarily blocked by adding them to this list. The IP address that triggers false logins will still be blocked. You have %s critical vulnerability You have %s critical vulnerabilities You have %s high-risk vulnerability You have %s high-risk vulnerabilities You have %s low-risk vulnerability You have %s low-risk vulnerabilities You have %s medium-risk vulnerability You have %s medium-risk vulnerabilities You have changed your login URL You have enabled a feature on %s. We think it's important to let you know a little bit more about this feature so you can use it without worries. You have set a 301 redirect to SSL. This is important for SEO purposes You have the Really Simple SSL Let's Encrypt beta add-on activated. This functionality has now been integrated in core, so you can deactivate the add-on. You may need to login in again, have your credentials prepared. You run a Multisite installation with subdomains, but your site doesn't have a wildcard certificate. You run a Multisite installation with subfolders, which prevents this plugin from fixing your missing server variable in the wp-config.php. You should have the www domain pointed to the same website as the non-www domain. You still have %s task open. You still have %s tasks open. You're using a feature where email is an essential part of the functionality. Please validate that you can send emails on your server. Your Key and Certificate directories are not properly protected. Your SSL certificate will expire soon. Your WordPress version is visible to others. Your certificate is valid until: %s Your certificate will be renewed and installed automatically. Your certificate will expire on %s. Your certificate will expire on %s. You can renew it %shere%s. Your database prefix is renamed and randomized. Awesome! Your database prefix is set to the default 'wp_'. Your domain meets the requirements for Let's Encrypt. Your hosting environment does not allow automatic SSL installation. Your license is not active for this URL. Your license key expired on %s. Your license key has been disabled. Your license key has reached its activation limit. Your login URL has changed to {login_url} to prevent common bot attacks on standard login URLs. Learn more about this feature, common questions and measures to prevent any issues. Your server provides shell functionality, which offers additional methods to install SSL. If installing SSL using the default methods is not possible, you can install the shell add on. Your site is set to display errors on your website Your site is set to log errors to a potentially public file Your site is vulnerable to user enumeration attacks. Your site logs information to a public debugging file. Your site registered a user with the name 'admin'. Your site uses Divi. This can require some additional steps before getting the secure lock. Your site uses Elementor. This can require some additional steps before getting the secure lock. Your site uses plain permalinks, which causes issues with the REST API. Please use a different permalinks configuration. Your website does not send all recommended security headers. Your website's ip address is blocked. Please add your domain's ip address to the security policy in CPanel Your wp-config.php has to be edited, but is not writable. attempts critical forbidden - number in author name not allowed = %s hCaptcha hCaptcha secret key hCaptcha site key high-risk https://really-simple-plugins.com https://really-simple-ssl.com low-risk medium-risk no response reCaptcha secret key reCaptcha site key reCaptcha v2 recommended PO-Revision-Date: 2024-05-16 14:44:55+0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Plural-Forms: nplurals=2; plural=n != 1;
X-Generator: GlotPress/4.0.1
Language: en_CA
Project-Id-Version: Plugins - Really Simple SSL - Stable (latest release)
Please note that you can always save and finish the wizard later, use our %sdocumentation%s for additional information or log a %ssupport ticket%s if you need our assistance. %s day %s hour %s hours %s is a singleton class and you cannot create a second instance. %s minutes %s month %s months %s vulnerability has been detected. %s vulnerabilities have been detected. %s week %s: %s vulnerability found %s: %s vulnerabilities found (opens in a new tab) (recommended) (unknown) .htaccess does not exist .htaccess in uploads not writable .htaccess not writable .htaccess redirect. 1 year 2 years 301 .htaccess redirect 301 .htaccess redirect (read instructions first) 301 .htaccess redirect is not enabled. 301 PHP redirect 301 SSL redirect enabled 301 redirect to https set. 48 hours 6 months 8 hours (recommended) A %s vulnerability is found in %s. A correctly configured Content Security Policy can protect your visitors from the most common web attacks. It all starts with denying and upgrading insecure requests on your website. A debug.log is publicly accessibile and has a standard location. This will change the location to a randomly named folder in /wp-content/ A definition of a site url or home url was detected in your wp-config.php, but the file is not writable. A firewall rule was enabled, but /the wp-content/ folder is not writable. A firewall rule was enabled, but the firewall does not seem to get loaded correctly. A firewall rule was enabled, but the wp-config.php is not writable. A lightweight plugin with heavyweight security features, focusing on performance and usability. A networkwide SSL activation process has been started, but has not been completed. Please go to the SSL settings page to complete the process. Able to create destination folder About Cross Origin Policies About HTTP Strict Transport Security About Hardening About Limit Login Attempts About Login Protection About Recommended Security Headers About Vulnerabilities About XML-RPC About notifications About the Content Security Policy About the Mixed Content Scan About the Permission Policy Access Control According to our information, your hosting provider does not allow any kind of SSL installation, other then their own paid certificate. For an alternative hosting provider with SSL, see this %sarticle%s. According to our information, your hosting provider supplies your account with an SSL certificate by default. Please contact your %shosting support%s if this is not the case. Action Activate Activate SSL Activate SSL per site or install a wildcard certificate to fix this. Activate network-wide to fix this. Activating plugin... Active Add additional domains which can embed your website, if needed. Comma separated. Add the following lines of code to your wp-config.php. Add your email address below. Advanced Advanced Hardening Advanced Hardening Features Advanced Security Headers Advanced hardening features complement the basic hardening functions by protecting your site against advanced threats and attacks. After completing the installation, you can continue to the next step to complete your configuration. After completing the installation, you can let Really Simple SSL automatically configure your site for SSL by using the 'Activate SSL' button. After enabling this feature, you can submit your site to %shstspreload.org%s After this number of failed login attempts the user and IP address will be temporarily blocked. Alias domain check is not relevant for a subdomain All Allow Allow only necessary third party resources to be loaded on your website, thus preventing common attacks. Use our unique learning mode to automatically configure your Content Security Policy. Allow your domain to be embedded Allowed Allows you to enter a custom login URL. An SSL certificate has been detected An SSL certificate was detected on your site. An error occurred, please try again. An error occurred: An option that requires the .htaccess file in the uploads directory is enabled, but the file is not writable. An option that requires the .htaccess file is enabled, but the file does not exist. An option that requires the .htaccess file is enabled, but the file is not writable. Anyone can register an account on your site. Consider disabling this option in the WordPress general settings. As Really Simple SSL handles all the functionality this plugin provides, we recommend to disable this plugin to prevent unexpected behaviour. As a security precaution, the username ‘admin’ has been changed on %s. From now on, you can login with '%s' or an email address. As your order will be regenerated, you'll need to update your DNS text records. Attempting to install certificate using AutoSSL... Attempting to install certificate... Attempting to set DNS txt record... Authorisation not completed yet. Automated Measures Automatic certificate detection is not possible on your server. Automatic renewal of your certificate was not possible. The SSL certificate should be %srenewed%s manually. Based on your settings, Really Simple SSL will take appropriate action, or you will need to solve it manually. Basic Basic SSL configuration finished! Improve your score with %sReally Simple SSL Pro%s. Because the $_SERVER["HTTPS"] variable is not set, your website may experience redirect loops. Below you will find the instructions for different hosting environments and configurations. If you start the process with the necessary instructions and credentials, the next steps will be done in no time. Black Friday sale! Get 40% Off Really Simple SSL Pro Block the username 'admin' Block user registrations when login and display name are the same Block visitors from specific countries, or continents. You can also allow only specific countries. Blocked Blocked IP addresses will be automatically unblocked after the above-configured interval. In the table below you can instantly unblock IP addresses. Blocked usernames will be automatically unblocked after the above-configured interval. In the table below you can instantly unblock usernames. Browser features are plentiful, but most are not needed on your website. Bundle not available yet... By default, WordPress shows if a username or email address exists when a login fails. This will change it to generic feedback. By enabling this feature you understand that email validation is required, and you can send email from your server reliably. By selecting your hosting provider we can tell you if your hosting provider already supports free SSL, and/or where you can activate it. cPanel host cPanel password cPanel recognised. Possibly the certificate can be installed automatically. cPanel username Cancel Captcha Captcha has not yet been verified, you need to complete the process of a Captcha to verify it's availability. Captcha provider Certificate already generated. It was renewed if required. Challenge directory not writable. Change debug.log file location Change passwords every Changed debug.log location to: Changing redirect methods should be done with caution. Please make sure you have read our instructions beforehand at the right-hand side. Check again Check manually Check out Really Simple SSL Pro Check your %slicence%s. Checking SSL certificate... Checking alias domain... Checking certs directory... Checking challenge directory reachable over http... Checking challenge directory... Checking for subdomain setup... Checking for website configuration... Checking host... Checking if cURL is available... Checking if Terms & Conditions are accepted... Checking if plugin folder exists... Checking key directory... Checking permissions... Checking server software... Choose new username to replace 'admin' Choose the max-age for HSTS Choose your provider Click the button below to confirm your email address, or copy the following URL: %s CloudWays API key CloudWays user email Code execution is allowed in the public 'Uploads' folder. Completed Complianz - Consent Management as it should be Component Components will be quarantined if the update process fails. Configure your Cookie Notice, Consent Management and Cookie Policy with our Wizard and Cookie Scan. Supports GDPR, DSGVO, TTDSG, LGPD, POPIA, RGPD, CCPA and PIPEDA. Configured for HTTP challenge Congratulations! Consent management as it should be. Content Security Policy Content Security Policy Headers Continent Continents Continue to renew. Control browser features that could allow third parties to misuse data collected by microphone, camera, GEO Location etc, when enabled for your website. Copyright warning! Could not automatically add TXT record. Please proceed manually, following the steps below. Could not copy code execution test file. Could not create test folder and file. Could not find code execution test file. Could not reach challenge directory over %s. Could not rename folder! Could not retrieve server list Could not test certificate Could not verify TXT record for domain %s Could not verify alias domain. Count Country Creating account... Critical Critical (default) Cross Origin Embedder Policy Cross Origin Opener Policy Cross Origin Resource Policy Custom login URL Customize login attempts, intervals, and temporary lockouts according to your preferences to regulate the level of security on your website during authentication. No additional settings required DNS records were not verified yet. Please complete the previous step. DNS verification Dashboard Dashboard - Test Notification Date Debug.log Debugging Debugging with Really Simple SSL Delete Delete all data on plugin deletion Depending on your hosting provider, %1$smanual installation%2$s may be required. Description Destination folder already exists Details Detected status of your setup. Detection Direct Admin URL DirectAdmin host DirectAdmin password DirectAdmin recognised. Possibly the certificate can be installed automatically. DirectAdmin username Directive Directories Disable Disable "anyone can register" Disable HTTP methods Disable OCSP stapling Disable XML-RPC Disable application passwords Disable directory browsing Disable the built-in file editors Disable user enumeration Disabled Dismiss Dismiss all notifications Do you want to store these credentials for renewal purposes? Domain Don't show again Download Due to a recent update by WP Engine, we have changed your settings automatically to adapt. Elevate your security with our Premium Support! Our expert team ensures simple, hassle-free assistance whenever you need it. Email Email address Email address not valid Email address successfully verified Email could not be sent. Email could not be sent. No message or subject set. Email not verified yet. Verify your email address to get the most out of Really Simple SSL Email notification error Email notifications are only sent for important updates, security notices or when certain features are enabled. Email sent! Please check your mail Email validation Email validation completed Email verification Email verification error Email verification has not been completed yet. Check your email and click the link Enable Enable .htaccess only if you know how to regain access in case of issues. Enable 301 .htaccess redirect Enable 301 redirect Enable Custom login URL Enable Limit Login Attempts Enable Permissions Policy Enable Region restrictions Enable a .htaccess redirect or PHP redirect in the settings to create a 301 redirect. Enable login protection Enable open source blocklist API etc. Enable two-step verification Enabling auto renew... Enforce frequent password change Enforce secure password policies for your users by requiring strong passwords, and expiring passwords after a period of your choosing. Enforce strong passwords Enhancing the authentication process and optimizing user management makes Login Protection a foundational element in securing your website. Enter a custom login URL. This allows you to log in via this custom URL instead of /wp-admin or /wp-login.php Error code %s Error enabling auto renew for Let's Encrypt Error occurred when retrieving the webpage. Errors were reported during installation. Event Event Log Every three hours Example: If you want to change your login page from /wp-admin/ to /control/ answer: control Failed retrieving access token Failed retrieving account. Failed to activate plugin Failed to gather package information Failed to install plugin Feature Feedback in plugin overview File missing. Please retry the previous steps. File permissions check Files not created yet... Firewall For more information, please read this %sarticle%s Force on: Force update Free plugins From now on, the debug.log won’t be publicly accessible whenever wp-debugging is enabled. The debug log will be stored in a randomly named folder in /wp-content/. This prevents possible leakage of sensitive debugging information. GDPR/CCPA Privacy Suite General General Settings Generating SSL certificate... Generation Get detailed insights into visitors' behaviour with Burst Statistics, the privacy-friendly analytics dashboard from Really Simple Plugins. Get more information from the Really Simple SSL dashboard on %s Get notified of important changes, updates and settings. Recommended when using security features. Get notified! Get two-factor authentication with Really Simple SSL Pro Go to activation Go to installation HSTS forces browsers always to load a website via HTTPS. It prevents unnecessary redirects and prevents manipulation of data originating from communication with your website. HTTP Strict Transport Security Hardening Hardening features limit the possibility of potential weaknesses and vulnerabilities which can be misused. Heavyweight security features, in a lightweight performant plugin from Really Simple Plugins. Get started with below features and get the latest and greatest updates for a peace of mind! Here you can add IP addresses that should never be blocked by region restrictions. We will automatically add the IP address of the administrator that enabled Region Restrictions. Here you can configure vulnerability detection, notifications and measures. To learn more about the features displayed, please use the instructions linked in the top-right corner. Here you can see which users have enabled two-step login, or change the status per user. Here you control the users that are automatically, and temporarily blocked. You can also add or remove users manually. We recommend blocking ‘admin’ as username as a start. Hi, Really Simple SSL has kept your site secure for a month now, awesome! If you have a moment, please consider leaving a review on WordPress.org to spread the word. We greatly appreciate it! If you have any questions or feedback, leave us a %1$smessage%2$s. Hi, Really Simple SSL has kept your site secure for some time now, awesome! If you have a moment, please consider leaving a review on WordPress.org to spread the word. We greatly appreciate it! If you have any questions or feedback, leave us a %1$smessage%2$s. Hide your WordPress version High-risk High-risk (default) Hosting Hosting provider HttpOnly Secure cookies have been set automatically! HttpOnly Secure cookies not set. I agree to the Terms & Conditions from Let's Encrypt. I don't know, or not listed, proceed with installation I have read and understood the risks to intervene with these measures. IP Address IP Addresses IP Addresses can be allowed, blocked or will show up when your settings add them to a temporary blocklist. If you want to add your IP to the allowlist, please read the article provided at the right-hand side for instructions. IP address overview If the number of failed login attempts is exceeded within this timeframe, the IP address and user will be blocked. If the username 'admin' currently exists, you can rename it here. Please note that you can no longer use this username, and should use the new username or an email address If there's a vulnerability, you will also get feedback on the themes and plugin overview. If this is not the case, don't add this alias to your certificate. If this option is set to true, the mixed content fixer will fire on the init hook instead of the template_redirect hook. Only use this option when you experience problems with the mixed content fixer. If you entered your DNS records before, they need to be changed. If your hosting provider auto-renews your certificate, no action is required. Alternatively, you have the option to generate an SSL certificate with Really Simple SSL. If your hosting provider is not listed, and there's an SSL activation/installation link, please let us %sknow%s. If your site is only intended for users to login from specific geographical regions, you can entirely prevent logins from certain continents or countries. Import and insert file Improve security - Upgrade Improve security by requiring strong passwords and forced periodic password changes Improve security with Really Simple SSL Pro. Improve the default WordPress password strength check. You can also enforce frequent password changes for user roles. Include alias Include preload Include subdomains Install Install %sManually%s. Install SSL certificate Installation Installation failed. Installation finished Installed Installing Installing SSL certificate using PLESK API... Installing SSL certificate... Installing plugin... Instructions Interval Invalid licence. Invalid login details. It is currently possible to create an administrator user with the same login and display name. It is not possible to install Let's Encrypt on a localhost environment. It is not possible to install Let's Encrypt on a subfolder configuration. It is not possible to install Let's Encrypt on a subsite. Please go to the main site of your website. Learn more Learn more about our features! Learn more about security headers Leave a review Let login cookie expire after Let's Encrypt Let's Encrypt. Letʼs Encrypt is a free, automated and open certificate authority brought to you by the nonprofit Internet Security Research Group (ISRG). Leveraging your SSL certificate with HSTS is a staple for every website. Force your website over SSL, mitigating risks of malicious counterfeit websites in your name. Licence invalid Licence valid Lightweight SSL & Hardening Plugin Limit Attempts Limit Login Attempts Limit Login Attempts protects your site from login attempts by unauthorised users. When you enable Limit Login Attempts, all login attempts are logged and repeated attempts to login with invalid credentials will be blocked automatically. Location Locked-out Lockout duration Login Protection Login attempts Login credentials incorrect Login credentials incorrect. Please check your log-in credentials for cPanel. Login status Low-risk Low-risk Low-risk (default) Maintain peace of mind with our simple, but effective automated measures when vulnerabilities are discovered. When needed Really Simple Security will force update or quarantaine vulnerable components, on your terms! Many vulnerabilities are exploited by injecting a user with administrator capabilities outside of the native WordPress creation process. Under advanced hardening you can prevent this from happening. Maybe later Measures Medium-risk Method Missing licence. Mixed Content Fixer Mixed Content Scan Mixed content Mixed content fixer Mixed content fixer - back end Mixed content fixer - init hook Mixed content fixer not enabled. Enable the option to fix mixed content on your site. Mixed content fixer was successfully detected on the front-end. Mixed content in %s Mixed content in CSS/JS file from other domain Mixed content in PHP file in %s Mixed content in post: %s Mixed content in the postmeta table Mixed content scan More info Multiple %s vulnerabilities have been found. No 301 redirect is set. Enable the WordPress 301 redirect in the settings to get a 301 permanent redirect. No 301 redirect to SSL enabled. No SSL certificate has been detected. No SSL detected No SSL detected. Use the retry button to check again. No known vulnerabilities detected No recommended redirect rules detected. No redirect No subdomain setup detected. No valid list of domains. None Not all recommended security headers are installed Not recognised server. Not sure if you're using XML-RPC, or want to restrict unauthorised use of XML-RPC? With learning mode you can see exactly which sources use XML-RPC, and you can revoke where necessary. Note Notification by Really Simple SSL Notifications Notifications by email OCSP not supported, the certificate will be generated without OCSP. OCSP stapling is configured as enabled by default. You can disable this option if this is not supported by your hosting provider. Off On Apache you can use a .htaccess redirect, which is usually faster, but may cause issues on some configurations. Read the instructions in the sidebar first. Once every 5 minutes Once every day Once every week One click SSL optimisation One day (for testing only) One of the most powerful features, and therefore the most complex are the Cross-Origin headers that can isolate your website so any data leaks are minimised. One year Only enable if the default mixed content fixer does not fix your front-end mixed content. Only enable this if you experience mixed content in the admin environment of your WordPress website. Open Optional for: Or set your wp-config.php to writable and reload this page. Order ID mismatch, regenerate order. Order successfully created. Order successfully retrieved. Our vulnerability reporting is in beta. Signup for the beta to discover the new features! Overview Package information retrieved Password security Passwords Permanent block Permission denied. Permissions Policy Please activate it manually on your hosting dashboard. Please activate it on your dashboard %smanually%s Please add the following lines to your .htaccess, or set it to writable: Please adjust the CAA records via your DNS provider to allow Let’s Encrypt SSL certificates Please change your email address %shere%s and try again. Please check if the advanced-headers.php file is included in the wp-config.php, and exists in the wp-content folder. Please check if the non www version of your site also points to this website. Please check if the www version of your site also points to this website. Please check if your REST API is loading correctly. Your site currently is using the slower Ajax fallback method to load the settings. Please check the vulnerabilities overview for more information and take appropriate action. Please complete %smanually%s Please complete manually in your hosting dashboard. Please complete the following step(s) first: %s Please configure your %sCaptcha settings%s before enabling this setting Please create a folder 'rsssl' in the uploads directory, with 644 permissions. Please double check your DNS txt record. Please refresh the SSL status if a certificate has been installed recently. Please set the wp-config.php to writable until the rule has been written. Please set the wp-content folder to writable: Please take appropriate action. Please verify your email Plesk admin URL Plesk host Plesk password Plesk recognised. Possibly the certificate can be installed automatically. Plesk username Plesk username and password Plugin activated Plugin installed Premium Support Prevent clickjacking and other malicious attacks by restricting sources that are permitted to embed content from your website. Prevent code execution in the public 'Uploads' folder Prevent login feedback Prevent user enumeration Privacy-friendly analytics tool. Protect your site against brute force login attacks by limiting the number of login attempts. Enabling this feature will temporary lock-out a username and the IP address that tries to login, after the set number of false logins. Protect your website against brute-force attacks with a captcha. Choose between Google reCAPTCHA or hCaptcha. Protecting your website visitors from malicious attacks and data breaches should be your #1 priority, start with the essentials with Really Simple Security Quarantine Quarantined Re-check Read more Read more about security concerns with debug display enabled Really Simple Plugins Really Simple Plugins is also the author of the below privacy-focused plugins, including consent management, legal documents and analytics! Really Simple SSL Really Simple SSL & Security Really Simple SSL - Notification Test Really Simple SSL - Verify your email address Really Simple SSL and Really Simple SSL add-ons do not process any personal identifiable information, so the GDPR does not apply to these plugins or usage of these plugins on your website. You can find our privacy policy <a href="%s" rel="noopener noreferrer" target="_blank">here</a>. Really Simple SSL automatically detects your settings and configures your website to run over HTTPS. To keep it lightweight, we kept the options to a minimum. Your website will move to SSL with one click. Really Simple SSL can trigger a Captcha to limit access to your site or the login form. Really Simple SSL collects information about plugins, themes, and core vulnerabilities from our database powered by WPVulnerability. Anonymized data about these vulnerable components will be sent to Really Simple SSL for statistical analysis to improve open-source contributions. For more information, please read our privacy statement. Really Simple SSL dashboard Really Simple SSL detected an SSL certificate, but has not been configured to enforce SSL. Really Simple SSL has a new feature! Introducing Vulnerability Detection, enable it now. Really Simple SSL has received no response from the webpage. Really Simple SSL is installed, but no valid SSL certificate is detected. Really Simple SSL will scan for insecure file and folder permissions on a weekly basis. You will receive an email report and Dashboard notice if insecure permissions are found. Really Simple Security Pro Recommended Hardening Features Recommended Security Headers Recommended by Really Simple Plugins Recommended security headers enabled. Recommended security headers installed Redirect method Redirection Redirects your site to https with a SEO friendly 301 redirect if it is requested over http. Region restrictions Regions Remove from public location with Really Simple SSL Rename admin user enabled: Please choose a new username of at least 3 characters, which is not in use yet. Rename and randomise your database prefix Renew certificate Renew installation Restrict access from specific countries or continents. You can also allow only specific countries. Restrict access to your site based on user location. By default, all regions are allowed. You can also block countries from a continent. Restrict creation of administrator roles Retrieving Cloudways server data... Retrieving DNS verification token... Retrieving package information... Retry Risk Run System Health Scan SSL & Security SSL Status Test SSL activation in progress SSL certificate should be generated and installed. SSL certificate will expire on %s. SSL configuration finished! SSL is activated on your site. SSL is enabled networkwide. SSL is enabled on your site. SSL is not enabled on your network SSL is not enabled yet. SSL is not enabled. SSL is not yet enabled on this site. SSL is now activated. Follow the three steps in this article to check if your website is secure. SSL successfully installed on %s Save and continue Searching for link to SSL installation page on your server... Security Security Headers Security Headers Test Security through obscurity. Your site is no longer using the default wp_ prefix for database tables. The process has been designed to only complete and replace the tables after all wp_ tables are successfully renamed. In the unlikely event that this does lead to database issues on your site, please navigate to our troubleshooting article. See which recommended security headers are not present on your website. Self (Default) Self-hosted and privacy-friendly analytics tool. Send Send an email code during login. You can force user roles to use two-step verification, or leave the choose with your users, if so desired. Serve encrypted and authenticated responses Set permissions to 644 to enable SSL generation. Set your wp-config.php to writable and reload this page. Settings Settings update: .htaccess redirect Settings update: Database prefix changed Settings update: Debug.log file relocated Settings update: Username 'admin' renamed Site wide - Test Notification Site-wide, admin notification Source Start login protection by adding an additional layer during authentication. This will leave authentication less dependent on just a single password. Want to force strong passwords? Check out Password Security. Status Stop editing the .htaccess file Store for renewal purposes. If not stored, renewal may need to be done manually. Successfully added TXT record. Successfully generated certificate. Successfully installed Let's Encrypt Successfully installed SSL Successfully retrieved account Successfully retrieved server ID and app ID Successfully verified DNS records Successfully verified alias domain. Support System status Temporary block Terms and conditions Terms & Conditions are accepted. Terms and Conditions Test not found. Test notification email error Test notifications Test notifications can be used to test email delivery and shows how vulnerabilities will be reported on your WordPress installation. Thanks for updating! The 'force-deactivate.php' file has to be renamed to .txt. Otherwise your SSL can be deactivated by anyone on the internet. The .htaccess redirect has been enabled on your site. If the server configuration is non-standard, this might cause issues. Please check if all pages on your site are functioning properly. The .htaccess redirect rules selected by this plugin failed in the test. Set manually or dismiss to leave on PHP redirect. The 301 .htaccess redirect is the fastest and most reliable redirect option. The 301 redirect with .htaccess to HTTPS is now enabled. The DISALLOW_FILE_EDIT constant is defined and set to false. You can remove it from your wp-config.php. The DNS response for %s was %s, while it should be %s. The Essentials The Event Log shows all relevant events related to limit login attempts. You can filter the log using the dropdown on the top-right to only show warnings. The Hosting Panel software was not recognised. Depending on your hosting provider, the generated certificate may need to be installed manually. The PHP function cURL has successfully been detected. The PHP function cURL is not available on your server, which is required. Please contact your hosting provider. The SSL certificate has been renewed, and requires manual %sinstallation%s in your hosting dashboard. The Terms & Conditions were not accepted. Please accept in the general settings. The URL you use to access your DirectAdmin dashboard. Ends on :2222. The URL you use to access your Plesk dashboard. Ends on :8443. The URL you use to access your cPanel dashboard. Ends on :2083. The automatic installation of your certificate has failed. Please check your credentials, and retry the %sinstallation%s. The built-in file editors are accessible to others. The certificate generation was rate limited for 10 minutes because the authorisation failed. The certificate installation was rate limited. Please try again later. The certs directory is not created yet. The certs directory was successfully created. The challenge directory is not created yet. The challenge directory was successfully created. The code to block code execution in the uploads folder cannot be added automatically on NGINX. Add the following code to your nginx.conf file: The content security policy has many options, so we always recommend starting in ‘learning mode’ to see what files and scripts are loaded. The email address was not set. Please set the email address The extensive mixed content scan will list all current and future issues and provide a fix, or instructions to fix manually. The following directories do not have the necessary writing permissions. The following information is attached when you send this form: licence key, scan results, your domain, .htaccess file, debug log and a list of active plugins. The key directory is not created yet. The key directory was successfully created. The mixed content fixer could not be detected due to a cURL error: %s. cURL errors are often caused by an outdated version of PHP or cURL and don't affect the front-end of your site. Contact your hosting provider for a fix. The mixed content fixer is active, but was not detected on the frontpage. The non-www version of your site does not point to this website. This is recommended, as it will allow you to add it to the certificate as well. The order is invalid, possibly due to too many failed authorisation attempts. Please start at the previous step. The recommended security headers are detected on your site. The required directories have the necessary writing permissions. The settings below determine how strict your site will be protected. You can leave these settings on their default values, unless you experience issues. The system is not ready for the DNS verification yet. Please run the wizard again. The system is not ready for the installation yet. Please run the wizard again. The used domain for your email address is not allowed. The user and IP address will be temporarily unable to login for the specified duration. You can block IP addresses indefinitely via the IP addresses block. The value, WP_DEBUG_DISPLAY, has either been enabled by WP_DEBUG or added to your configuration file. This will make errors display on the front end of your site. The value, WP_DEBUG_LOG, has been added to this website’s configuration file. This means any errors on the site will be written to a file which is potentially available to all users. The wp-config.php file is not writable, and needs to be edited. Please set this file to writable. The www version of your site does not point to this website. This is recommended, as it will allow you to add it to the certificate as well. These are some of our new features, and weʼre just getting started. These notifications are set to the minimum risk level that triggers a notification. For example, the default site-wide notification triggers on high-risk and critical vulnerabilities. These security headers are the fundamental security measures to protect your website visitors while visiting your website. These user roles are forced to enter the authentication code. They might be misused if you don’t actively tell the browser to disable these features. This adds extra requirements for strong passwords for new users and updated passwords. This appears to be an invalid licence key for this plugin. This email address is used to create a Let's Encrypt account. This is also where you will receive renewal notifications. This email is confirmation that any security notices are likely to reach your inbox. This email is part of the Really Simple SSL Notification System This email was sent to This feature allows you to block visitors from your website based on country This feature depends on multiple standard background processes. If a process fails or is unavailable on your system, detection might not work. We run frequent tests for this purpose. We will notify you accordingly if there are any issues. This is a multisite configuration with subdomains. You should generate a wildcard certificate on the root domain. This is a security feature implemented by web browsers to control how web pages from different origins can interact with each other. This is a test notification from Really Simple SSL. You can safely dismiss this message. This is a vulnerability alert from Really Simple SSL for %s. This is the vulnerability overview. Here you will find current known vulnerabilities on your system. You can find more information and helpful, actionable insights for every vulnerability under details. This leads to issues when activating SSL networkwide since subdomains will be forced over SSL as well while they don't have a valid certificate. This setting will block attempts to assign administrator roles outside the native user creation process by WordPress. This might include other plugins that create, edit or assign roles to users. If you need to create an administrator in a third-party plugin, temporarily disable this setting while you make the changes. This will include both the www. and non-www. version of your domain. This will limit or fully disable HTTP requests that are not needed, but could be used with malicious intent. This will permanently change your database prefixes and you can NOT rollback this feature. Please make sure you have a back-up. This will send emails about vulnerabilities directly from your server. Make sure you can receive emails by the testing a preview below. If this feature is disabled, please enable notifications under general settings. To ensure all traffic passes through SSL, please enable a 301 redirect. To safely enable SSL on your server configuration, you should add the following line of code to your wp-config.php. To set the httponly secure cookie settings, your wp-config.php has to be edited, but the file is not writable. To use certain features in Really Simple SSL we need to confirm emails are delivered without issues. Token not generated. Please complete the previous step. Token not received yet. Token successfully retrieved. Trigger captcha on failed login attempt Trusted Trusted IP addresses Trying to create directory in root of website. Two Factor Authentication Two years (required for preload) Two-step verification Two-step verification is the first feature we regard as login protection. Want to know more about this feature, and what is to come? Two-step verification will be optional for these user roles, and they can disable it on first login. Two-step verification will enhance the authentication process by adding an additional layer. Selected users will be required to enter their correct credentials first, and then they must provide a one-time code sent to their email as an extra step. Type Unable to connect to cPanel Unauthorised administrators Update Really Simple SSL Pro: the plugin needs to be updated to the latest version to be compatible. Upgrade Uploads folder not writable. User User role User roles for password change Username Username 'admin' has been changed to %s Users Users trying to enter via /wp-admin or /wp-login.php will be redirected to this URL. Validating licence... Verify email Verify your email address to get the most out of Really Simple SSL. View View settings page View vulnerabilities Visit Dashboard Visit the plugins overview or %srenew your licence%s. Vulnerabilities Vulnerabilities Overview Vulnerabilities detected Vulnerability Alert: %s Vulnerability Detection Vulnerability Measures Vulnerability: %s Warning Warnings We have added many new features to our plugin, now bearing the name Really Simple SSL & Security. But we start like we did almost 10 years ago. Optimising your Encryption with SSL. We have detected administrator roles where the login and display names are the same. We have detected the %s plugin on your website. We have not detected any known hosting limitations. We have tried to make our Wizard as simple and fast as possible. Although these questions are all necessary, if there’s any way you think we can improve the plugin, please let us %sknow%s! We use email notification to explain important updates in plugin settings. Why Premium Support? Why did I receive this email? Widget area Widget with mixed content Will run a frequent update process on vulnerable components. WordPress 301 redirect enabled. We recommend to enable a 301 .htaccess redirect. XML-RPC XML-RPC is a mechanism originally implemented into WordPress to publish content without the need to actually login to the backend. It is also used to login to WordPress from devices other than desktop, or the regular wp-admin interface. XML-RPC with Learning Mode You already have a valid SSL certificate. You already have free SSL on your hosting environment. You are using the Really Simple SSL Shell Exec add-on, but your current version needs to be updated. You can add any non-existing username to this table, to instantly block IP addresses that try common usernames like "admin". You can also let the automatic scan of the pro version handle this for you, and get premium support, increased security with HSTS and more! You can choose to automate the most common actions for a vulnerability. Each action is set to a minimum risk level, similar to the notifications. Please read the instructions to learn more about the process. You can easily block countries, or entire continents. You can act on the event log below and see which countries are suspicious, or exclude all countries but your own. You can find your Plesk username and password in %s You can find your api key %shere%s (make sure you're logged in with your main account). You can follow these %sinstructions%s. You can indefinitely block known abusive IP addresses, to completely prevent them from trying to login. You can prevent IP addresses from being temporarily blocked by adding them to this list. This can be convenient if you share an IP address with other site users. Usernames that trigger false logins will still be blocked. You can prevent usernames from being temporarily blocked by adding them to this list. The IP address that triggers false logins will still be blocked. You have %s critical vulnerability You have %s critical vulnerabilities You have %s high-risk vulnerability You have %s high-risk vulnerabilities You have %s low-risk vulnerability You have %s low-risk vulnerabilities You have %s medium-risk vulnerability You have %s medium-risk vulnerabilities You have changed your login URL You have enabled a feature on %s. We think it's important to let you know a little bit more about this feature so you can use it without worries. You have set a 301 redirect to SSL. This is important for SEO purposes. You have the Really Simple SSL Let's Encrypt beta add-on activated. This functionality has now been integrated in core, so you can deactivate the add-on. You may need to login in again, have your credentials prepared. You run a Multisite installation with subdomains, but your site doesn't have a wildcard certificate. You run a multisite installation with subfolders, which prevents this plugin from fixing your missing server variable in the wp-config.php. You should have the www domain pointed to the same website as the non-www domain. You still have %s task open. You still have %s tasks open. You're using a feature where email is an essential part of the functionality. Please validate that you can send emails on your server. Your Key and Certificate directories are not properly protected. Your SSL certificate will expire soon. Your WordPress version is visible to others. Your certificate is valid until: %s Your certificate will be renewed and installed automatically. Your certificate will expire on %s. Your certificate will expire on %s. You can renew it %shere%s. Your database prefix is renamed and randomised. Awesome! Your database prefix is set to the default 'wp_'. Your domain meets the requirements for Let's Encrypt. Your hosting environment does not allow automatic SSL installation. Your licence is not active for this URL. Your licence key expired on %s. Your licence key has been disabled. Your licence key has reached its activation limit. Your login URL has changed to {login_url} to prevent common bot attacks on standard login URLs. Learn more about this feature, common questions and measures to prevent any issues. Your server provides shell functionality, which offers additional methods to install SSL. If installing SSL using the default methods is not possible, you can install the shell add-on. Your site is set to display errors on your website Your site is set to log errors to a potentially public file Your site is vulnerable to user enumeration attacks. Your site logs information to a public debugging file. Your site registered a user with the name 'admin'. Your site uses Divi. This can require some additional steps before getting the secure lock. Your site uses Elementor. This can require some additional steps before getting the secure lock. Your site uses plain permalinks, which causes issues with the REST API. Please use a different permalinks configuration. Your website does not send all recommended security headers. Your website's IP address is blocked. Please add your domain's IP address to the security policy in cPanel Your wp-config.php has to be edited, but is not writable. attempts critical forbidden - number in author name not allowed = %s hCaptcha hCaptcha secret key hCaptcha site key high-risk https://really-simple-plugins.com https://really-simple-ssl.com low-risk medium-risk no response reCaptcha secret key reCaptcha site key reCaptcha v2 recommended