CET256 Assignment 2 Demonstration Script

Hello, this is my CET256 Assignment 2 secured WordPress website running locally on XAMPP. Apache and MySQL are running, and the website is accessed through the local WordPress administrator dashboard.

The website is titled CET256 Secure. It contains one page called About Security and one post called WordPress Security Demonstration. The homepage is configured to display the About Security page.

I installed four security plugins: Wordfence Security, UpdraftPlus, WP Activity Log and Limit Login Attempts Reloaded. Limit Login Attempts Reloaded is configured with four allowed retries, a 20-minute lockout and a 24-hour extended lockout after repeated lockouts. I tested incorrect logins locally and observed the lockout message.

Wordfence provides malware scanning, firewall protection and security monitoring. I show the completed scan result and the firewall status. Any warnings shown on the screen are reported exactly as displayed.

UpdraftPlus is used to back up the WordPress database and files. I show the completed backup result, which supports recovery after data loss or a security incident.

WP Activity Log records administrator actions. The log shows genuine events such as publishing the About Security page, publishing the WordPress Security Demonstration post and changing the homepage settings.

The About Security page explains the purpose of the website and the security protections used. The WordPress Security Demonstration post explains how the plugins reduce brute-force attacks, malware risk, unauthorised changes and data loss.

Overall, the four plugins provide layered protection. Limit Login Attempts Reloaded protects the login page, Wordfence protects against malicious activity, UpdraftPlus supports recovery, and WP Activity Log provides accountability. Together, these controls improve confidentiality, integrity and availability. This concludes my CET256 Assignment 2 demonstration.