Free Plugin by DrGlenn

Stop Stealing

Disable feeds, deploy a rotating trap URL, auto-block scraper IPs, and add smart bot rules to robots.txt and .htaccess—from a simple dashboard.

What it does (quickly)

  • Disables RSS/Atom feeds and removes feed links to slow basic scrapers.
  • Plants a rotating “trap” URL in the footer (hidden). Scrapers that crawl everything will hit it.
  • Auto-blocks the scraper’s IP as soon as the trap URL is requested (403).
  • Regenerates a fresh trap URL right after a hit; removes the old one.
  • Updates robots.txt (disallow trap path + optional “bad bot” user-agents).
  • Adds a protective .htaccess rule forcing the trap path to 404 if hit directly.
  • Clean Dashboard to toggle, rotate, validate, and manage bot rules.
Lightweight and safe defaults. Works on most shared and managed hosts.

Quick Facts

Free Anti-Scraping IP Blocking robots.txt .htaccess

  • Admin Menu: Stop-Stealing
  • Trap storage: trap_url.txt
  • Bad bots list: bad_bots_list.txt
  • Bad bot toggle: bad_bots_state.txt
  • Blocked IPs: option blocked_ips
Feeds: This plugin intentionally disables all feed endpoints.

Features (from the code)

Content & Feed Protection

  • Disable feeds via do_feed* hooks with a friendly message.
  • Remove feed links from wp_head (feed_links, feed_links_extra).
  • Hidden footer link added on wp_footer when trap is active.
add_action('do_feed','disable_rss_feeds',1);
remove_action('wp_head','feed_links',2);

Trap URL & IP Blocking

  • Rotating trap URL stored in trap_url.txt.
  • On hit, visitor IP is added to blocked_ips and blocked (403).
  • Template redirect guard checks the request path.
add_action('template_redirect','auto_block_scraper_ip');
add_action('init','block_ip_addresses');

robots.txt & .htaccess

  • Disallow the trap path via robots.txt output.
  • Optional bad-bot rules per user-agent.
  • .htaccess rewrite returns 404 for the trap path.
# robots.txt entries are added programmatically
# (specific filter line omitted here)

Admin Dashboard

  • Toggle trap (Activate/Deactivate) and rotate URL.
  • Enable/disable bad-bot protection and edit list.
  • Preview robots.txt and validate hidden link.

Installation

  1. Download: stop-stealing.zip
  2. In WordPress go to Plugins → Add NewUpload Plugin → select the zip → Install.
  3. Click Activate.
  4. Open Stop-Stealing in the admin sidebar.
If your host locks .htaccess or robots.txt, set writable perms or apply suggested rules manually.

Recommended Setup

  1. Activate the Hacker Trap.
  2. Enable Bad-Bot Protection (optional) and review bad_bots_list.txt.
  3. Validate the hidden link using the built-in checker.
  4. Confirm the trap path appears as Disallow in robots.txt.

Good Practices

Safety & Compatibility

  • Stage changes if you rely on feeds elsewhere.
  • Keep regular backups before adjusting security.
  • No external services or emails required.

When a Scraper Hits

  • IP added to blocked_ips and blocked (403).
  • Trap URL rotates; old file removed.
  • robots.txt/.htaccess keep shielding the evolving path.
Note: No anti-scraping method is perfect. This plugin targets common bots and aggressive crawlers to raise the cost of scraping.

FAQ

Q: Can I re-enable RSS feeds?
A: Not while the plugin is active—disabling feeds is central to the strategy.

Q: Where do I edit the bad-bot list?
A: bad_bots_list.txt in the plugin folder. Toggle in settings.

Q: How do I force a new trap URL?
A: Use “Change Trap URL” on the settings page.

Q: How are blocked IPs stored?
A: Option blocked_ips in your database.

Download

Protect your content now.

© 2024–2025 DrGlenn. All Rights Reserved.
Disclaimer: This plugin is provided for free without warranty or claims of fitness. Use with a comprehensive security program.