PrecisionWP / Play · Hardening

Which hardening switches did you never turn on?

Fight your way through your own login page. The patrol log at the end lists everything you left off.
Arcade · Run and gun · 3 levels · No signup · Works on a phone

How to play

You run and jump. The gun fires by itself.

The rules

01

Three levels, one site

Your login page, then your uploads folder, then your admin. Each level ends at a boss, and each one is put together from different pieces every run, so you cannot learn it by heart.
02

A to D to move, space to jump

W aims up, S crouches, and the firing happens on its own. You only ever decide where to stand. Three lives, six hearts, and a level restarts from the beginning when you go down.
03

One weapon at a time

Every weapon crate replaces the one you are holding, so there is no loadout to build. Each weapon hurts everything, and does far more to the attacker it was built to stop.

The switches you leave on

Some crates are not guns

Hide WordPress Version. Disable Emojis. Disallow File Mods. Pick one up and it stays on for the rest of the run, quietly making you better at everything.

They add up

Most can be picked up two or three times: more damage, faster shots, more speed, an extra heart, a longer moment of mercy after a hit. The HUD counts them for you.

They decide the boss

Nothing stops you walking into a boss with the starting rifle and not one switch on. It is just a much longer fight, and the log at the end says so.

Why this game exists

Every attacker in this game is a request your site already gets.

GET /?author=1 asks your site to list its usernames. GET /wp-json/wp/v2/users asks the same thing a different way. POST /xmlrpc.php tries a few hundred passwords in one go. GET /wp-config.php is just checking. None of it is personal. It arrives at every WordPress site, all day, whether anyone is watching or not.

AdminEase is a page of switches that close those doors. It is also boring, which is why nobody ever turns them on. So we made them crates you pick up while something is shooting at you.

You can finish the game with none of them on. We tested it. It is not fun.

What AdminEase does about it

The crates in the game are checkboxes in the plugin.

In the game Switch crates

One page of switches

Hide your WordPress and PHP version, stop file edits from the dashboard, turn off pingbacks, block directory browsing. Ten minutes once, and then never again.
In the game Weapon crates

A block for each request

Author scans, REST user listing, XML-RPC, registration spam, named bots, whole countries. Every weapon in the game is one of these, and each one matches a line in your access log.
In the game The screen-clearing bomb

Maintenance mode

Nothing stops you walking into a boss with the starting rifle and not one switch on. It is just a much longer fight, and the log at the end says so.

More games

One game per plugin.

AdminEase

Hardening

Fight your way through your own login page. The patrol log at the end lists everything you left off.
Arcade · 3 levels
Live
BackupEase

Forty-Two Percent

Two minutes of arcade. Claim the disk before the timeouts catch your trail. Leave the database behind and the whole backup is worthless.
Arcade · 2 Min
Live
Discount Master

Black Friday

Survive one sale weekend. The receipt at the end names every rule that never fired, and the one rule that ate them.
Arcade · 3 min
Live