John Darrel (@johndarrel) – WordPress user profile

Bio

With over 15 years of experience in IT, specializing in the development of SaaS and WordPress security plugins, I have dedicated my career to enhancing online security.

My latest creation, the Hide My WP Ghost plugin, is designed to protect against brute force attacks and SQL/script injections, ensuring robust security for WordPress sites.

You can explore and download the Hide My WP Ghost plugin from https://wordpress.org/plugins/hide-my-wp/ or https://wpghost.com

I am passionate about coding and always eager to assist with security challenges.

Badges

CODE

1 badge

Plugin Developer

POLYGLOTS

1 badge

Translation Contributor '18

Current Job

CTO

Present

MINBO QRE SRL

Recent impact

Score weights high-impact work (commits, releases, approved translations, props) at 3x routine activity.

Last 30 days

10contributions

high10

medium0

score30

Last 90 days

23contributions

high23

medium0

score69

Last 12 months

107contributions

high106

medium1

score319

Contributions

Type

July 2026

Jul 20 Mon · 11:52

Plugins high

Committed [3614686] to Plugins SVN:
create version tag 7.0.07

Jul 20 Mon · 11:44

Plugins high

Committed [3614668] to Plugins SVN:
Security - Magic Login links now require the same permissions as the screen they are offered from

Jul 15 Wed · 21:00

Plugins high

Committed [3609416] to Plugins SVN:
Create version tag 7.0.06

Jul 15 Wed · 20:58

Plugins high

Committed [3609415] to Plugins SVN:
Fix - Settings page navigation menu no longer loses its layout on sites where another plugin or theme restricts the allowed HTML tags

Jul 13 Mon · 16:59

Plugins high

Committed [3606468] to Plugins SVN:
hide-my-wp/tags/7.0.05/controllers/Settings.phpNew - Force 2FA Setup: require selected user roles to set up Two-Factor Authentication before they can access the dashboard, with a guided setup screen shown right after login

Jul 08 Wed · 05:36

Plugins high

Committed [3599785] to Plugins SVN:
Create version tag 7.0.05 with the last changes

Jul 08 Wed · 05:29

Plugins high

Committed [3599781] to Plugins SVN:
hide-my-wp/trunk/classes/Tools.phpNew - Force 2FA Setup: require selected user roles to set up Two-Factor Authentication before they can access the dashboard, with a guided setup screen shown right after login

Jul 08 Wed · 03:50

Plugins high

Committed [3599733] to Plugins SVN:
Fix - WP-CLI commands no longer emit a PHP 8.5 "Undefined array key hostname" warning

June 2026

Jun 29 Mon · 13:40

Plugins high

Committed [3590186] to Plugins SVN:
Improvement - Redesigned the Frontend Check results into clear, uniform rows that stay readable with long URLs

Jun 23 Tue · 16:08

Plugins high

Committed [3583511] to Plugins SVN:
hide-my-wp/tags/7.0.03/models/Rules.phpSecurity - Fixed IP spoofing via forwarded-IP headers (CF-Connecting-IP, X-Real-IP, X-Middleton-IP): these are now trusted only when the request actually originates from a verified proxy (Cloudflare ranges, a same-host reverse proxy, or an explicitly configured trusted header)