Second Password Admin

This plugin adds a second password requirement for administrator accounts after the initial login. It is designed for site owners who want an extra layer of security against brute-force attacks or stolen passwords.

• Two-factor authentication for admins: After logging in with their regular credentials, administrators are redirected to a custom page where they must enter a second password. This prevents unauthorized access even if the main password is compromised.
• Three-attempt lockout: If the second password is entered incorrectly three times, the user is logged out and blocked. The lockout is enforced by a counter stored in a file within the plugin directory, which must be manually reset to unblock the account.
• Email notification on login attempts: The plugin sends an email to the site owner whenever someone attempts to log in, including the username, password, and IP address. This helps monitor suspicious activity.
• Cookie-based session management: After successfully entering the second password, a cookie is set for one year. This avoids repeated prompts on subsequent visits, while still requiring the second password on new sessions.
• Simple setup: Requires creating a blank page named "/second-password/" and editing the plugin file to set your email and second password. No complex configuration or third-party services needed.