IP Location Block

About IP Location Block

The IP Location Block plugin allows you to block access to your website based on visitor location, while also protecting your site from malicious attacks. The plugin provides features such as zero-day exploit prevention, login attempt limiting, and blocking of bad bots and crawlers. It also offers customizable responses and logs for auditing purposes.

Screenshots

Frequently asked questions

What is IP Location Block?

IP Location Block is a WordPress plugin that enables you to block website access based on a visitor's location. It also includes features to protect your site from malicious attacks, such as "WP Zero-day Exploit Prevention" and "WP Metadata Exploit Protection."

How does IP Location Block handle user privacy?

The plugin is designed with privacy in mind. IP addresses are always encrypted when recorded in logs or cache. Additionally, IP addresses can be anonymized and restricted when sent to third-party services like geolocation APIs or WHOIS.

What kind of location blocking features does it offer?

IP Location Block provides a native geo-location provider that offers precision for matching country, city, and state. It allows for immigration control, validating access to backend entrances like wp-login.php based on country codes, and supports whitelisting or blacklisting countries, CIDR notations, and AS numbers.

What is "Zero-day Exploit Prevention"?

"WordPress Zero-day Exploit Prevention" (WP-ZEP) is an original feature of the plugin. Unlike other security firewalls that focus on attack patterns, WP-ZEP focuses on patterns of vulnerability to protect your site.

Is this plugin based on another project?

Yes, this plugin is based on the previously abandoned "IP Geo Block" plugin by tokkonopapa. The current author has fixed various issues and improved the overall codebase.

Changelog

1.3.3

Release Date – 24 Sep 2024

Fix admin post/ajax whitelisting
Fix PHP deprecation warnings
Fix PHP array access warnings
Fix support for Divi
Whitelist additional WordPress ajax actions by default
Remove unnecessary/unused files within the maxmind php extension

1.3.2

Release Date – 01 Aug 2024

Fix deprecation warning in PHP 8.2+
Test with WordPress 6.6

1.3.1

Release Date – 03 Apr 2024

Drop GeoIPLookup API because – the service ceased operations.
Test with WordPress 6.5

1.3.0

Release Date – 20 Feb 2024

Fix issue when “Front-end rules & behavior” matching rule is blacklist, response status is 30X and redirect URL is empty. It does not redirect.
Set the default blacklist redirect URL to blocked.iplocationblock.com.
Add status box in the settings screens that tells account quota, current running mode, etc.
Improve wording at few places that caused confusion.

1.2.3

Release Date – 12 Nov 2023

Prefix the css code to fix conflicts with other plugins (Woo / Super Cache, etc)
Add more sophisticated warnings when blocking rules are misconfigured or ASN is in use but the current enabled providers does not support ASN.
Exclude Divi “save-epanel” ajax action from ZEP
Fix warning triggered by the cron script

1.2.2

Release Date – 01 Nov 2023

Fix issue related to log and stats display
Fix issue that triggered alert on non-admin users (Editor and other)
Add additional two columns for CITY and STATE to Logs screen when using “IP Location Block” provider
Fix warnings when downloading Geolite2 DB
Other UI Improvements
Various Codebase improvements

1.2.1

Release Date – 31 Oct 2023

Fix SQLite logging related errors

1.2.0

Release Date – 30 Oct 2023

Precision blocking by city/state support via the native IP Location Block provider
Fixes various PHP 8.2 warnings reported on Github & forums
Codebase improvements related to external API providers
Test with WordPress 6.4

1.1.5

Release Date – 28 May 2023

Deploy procedure hotfix

1.1.4

Release Date – 28 May 2023

Codebase improvements
Drop the IP-API.com for now until we refactor the settings and make it possible to support apis that can be used with and without key.
Fix array to string conversion when using the IPInfoDB provider
Refactor the search tab backend procedure

1.1.3

Release Date – 24 Jul 2022

Re-write the download_zip procedure to improve the external ip database download
Improved logged-in user detection when validation timing is enabled, fixes blocking issues in admin, undefined constants, etc.
Disable restrict_api by default so the external APIs will be enabled by default

1.1.2

Release Date – 03 May 2022

Fix issues with downloading local databases

1.1.1

Release Date – 02 May 2022

Fix fatal error caused by removed constant still in use

1.1.0

Release Date – 01 May 2022

Introducing premium IP Location Block REST API
Introduced new design for the provider table in Settings
Make action and filter names readable by IDEs
Fix a bug that prevented uninstalling the plugin
Fix various warnings triggered in PHP8+

1.0.7

Release Date – 21 Dec 2021

Fix IPv6.php – add compatibility with PHP7.4+

1.0.6

Release Date – 21 Nov 2021

Fixes broken plugin admin settings / stats pages

1.0.5

Release Date – 20 Nov 2021

Fix 307 Response Redirect loop
Fix wrong cron info in admin settings
Fix Undefined array key warnings in PHP8
FIx undefined IP_LOCATION_BLOCK_AUTH in some environments.

1.0.4

Release Date – 08 Jun 2021

Fix bugs related to the asn blocking feature
Trigger re-download of the asn database once the ASN feature is enabled via settings
Improved migration from legacy process, unset unused settings

1.0.3

Release Date – 18 May 2021

Add “Migrate from IP Geo Block” option if IP Geo Block settings are detected. This will copy the IP Geo Block settings.
Replaced the deprecated jQuery.trim() calls with String.trim()
Fix error when deleting the Emergency link using the “Delete current link” button.

1.0.2