Gexiro Content Protection

Gexiro Content Protection by Gexiro protects your WordPress articles, guides, and media against casual copying with no external JavaScript dependencies and cross-platform keyboard and clipboard handling across Windows, macOS (Cmd key), iOS, and Android.

Core Features (Included in Free)

• Right-Click Context Menu Shield: Blocks right-click context menu access across protected frontend pages and posts.
• Smart Text Selection Shield: Prevents unauthorized text highlighting while automatically preserving interactive <input>, <textarea>, and contenteditable form fields (comments, search bars, and checkout forms remain usable).
• Cross-Platform Copy, Cut & Select-All Shield: Intercepts Ctrl+C, Ctrl+X, Ctrl+A (Windows/Linux) and Cmd+C, Cmd+X, Cmd+A (macOS) as well as DOM copy and cut events.
• Image Drag & Save Shield: Prevents visitors from dragging images and SVG illustrations directly out of the browser window.
• Privacy-First Local Statistics: Logs blocked protection events locally in WordPress with automatic IP anonymization (wp_privacy_anonymize_ip) and automatic 90-day retention pruning.
• Administrator Bypass & Clean Uninstall: Allows logged-in administrators to inspect and copy content normally, yields cleanly if Content Guardian Pro is activated, and provides an opt-in clean-uninstall toggle.

Engineering Architecture (Included in Free)

• Zero External Requests: All frontend scripts and styles are registered and enqueued locally via standard WordPress APIs (wp_add_inline_style and wp_add_inline_script).
• Form-Aware DOM Event Filtering: Inspects event targets before blocking keyboard shortcuts or selection so standard visitor workflows (login forms, WooCommerce checkout, comments, and search fields) continue to function normally.
• Prepared SQL & Capability Guards: Uses WordPress 6.2+ %i identifier placeholders for database queries and enforces manage_options and nonce verification on all admin actions.

Privacy & Data Storage

Gexiro Content Protection Free makes zero external HTTP requests and sends no visitor data to third-party servers. Protection event counts (right-click, copy, and drag attempts) are stored exclusively in your local WordPress database ({prefix}_content_guardian_statistics) with visitor IP addresses automatically anonymized via WordPress core wp_privacy_anonymize_ip() and automatically pruned after 90 days.

Optional Enterprise Capabilities (Content Guardian Pro)

For publishers requiring server-side anti-scraping and provenance tooling beyond browser-layer deterrents, Content Guardian Pro adds:

• Headless REST API, RSS, oEmbed & XML-RPC Shield: Replaces full-text JSON/RSS scraping endpoints (/wp-json/wp/v2/posts and /feed/) with teasers for unauthenticated clients while preserving Gutenberg block editor compatibility.
• W3C TDM-Reservation & /llms.txt Policy Signals: Emits machine-readable TDM-Reservation: 1 and X-Robots-Tag: noai, noimageai headers plus a virtual /llms.txt policy endpoint to express publisher opt-out preferences to automated crawlers.
• Opt-In Forensic Zero-Width Canary Watermarking: Embeds an HMAC-SHA256 signed zero-width watermark into protected post paragraphs with an admin leak-attribution decoder.
• Shadow-DOM Content Vault ([guardian_vault]): Renders sensitive paragraphs inside a closed Shadow DOM container and replaces selected images with pixel-watermarked HTML5 <canvas> elements.
• Automated Scraper Rate-Limiting & Cloudflare Edge Integration: Challenges or rate-limits high-velocity scraping IP addresses locally and optionally synchronizes challenge rules with Cloudflare WAF.