[WordPress] 外掛分享： 007AJ Security Scanner & Firewall

內容簡介

007AJ Security Scanner & Firewall 是一款輕量級的安全外掛，專為 WordPress 設計，提供多種安全功能以保護網站。所有功能預設為關閉，使用者可根據需求啟用，確保網站的安全性與完整性。

【主要功能】
• 登入鎖定：限制失敗登入次數，防止暴力破解
• 防火牆：檢查並阻擋明顯的攻擊行為
• 完整性掃描：比對核心檔案的完整性
• 硬化開關：關閉主題與外掛編輯器
• 活動日誌：記錄登入、鎖定及設置變更

外掛標籤

開發者團隊

原文外掛簡介

007AJ Security Scanner & Firewall is a lightweight security plugin by 007AJ. It runs on your own server, and every feature is off until you turn it on.
Login lockout

Counts failed logins per IP address. After a set number of failures (default 5 in 15 minutes) the address is locked out for a set time (default 30 minutes).
Applies to every login that goes through WordPress: the login form, XML-RPC and application passwords. A locked-out address cannot log in even with the right password.
The login form shows how long the lockout lasts. A successful login resets the counter.
Locked-out addresses are listed on the Dashboard with an Unlock button.
Optional email to the site admin when a lockout happens (at most one email every 15 minutes).

Firewall (lite)

Checks the page address, the query string (names and values) and the names of submitted form fields for obvious attack probes: SQL injection (for example UNION SELECT, ' OR '1'='1, SLEEP(), script injection (