[WordPress] 外掛分享： Brightery File Lockdown

首頁 › 外掛目錄 › Brightery File Lockdown
WordPress 外掛 Brightery File Lockdown 的封面圖片
全新外掛
安裝啟用
—
尚無評分
8 天前
最後更新
—
問題解決
WordPress 6.2+ PHP 7.4+ v1.0.9 上架：2026-09-05

內容簡介

Brightery File Lockdown 外掛旨在降低 WordPress 管理員帳號遭到入侵的影響，透過限制高風險的程式碼和上傳功能，增強網站安全性。

【主要功能】
• 禁用佈景主題和外掛的原始碼編輯功能
• 阻止從 wp-admin 安裝新外掛和佈景主題
• 限制上傳的檔案類型至明確的允許清單
• 拒絕可執行檔案和可疑的雙重副檔名
• 記錄最新 100 個被阻擋的安全事件

外掛標籤

開發者團隊

⬇ 下載最新版 (v1.0.9) 或搜尋安裝

① 下載 ZIP → 後台「外掛 › 安裝外掛 › 上傳外掛」
② 後台搜尋「Brightery File Lockdown」→ 直接安裝（推薦）
📦 歷史版本下載

原文外掛簡介

Brightery File Lockdown reduces the impact of a compromised WordPress administrator account by restricting high-risk code and upload capabilities.
In standard plugin mode it:

Disables theme and plugin source-editing capabilities.
Blocks installation of new plugins and themes from wp-admin.
Blocks plugin and theme ZIP uploads.
Blocks plugin and theme deletion from wp-admin.
Keeps core, plugin, and theme updates configurable.
Restricts uploads to an explicit image, audio, and video allowlist.
Rejects executable, script, archive, and configuration-file extensions.
Rejects suspicious double extensions such as example.php.jpg.
Uses WordPress file-type validation plus server-side MIME detection when available.
Applies the same upload checks to normal uploads and sideloaded uploads.
Keeps a bounded local record of the latest 100 blocked security events in the WordPress database.

The plugin does not contact Brightery or any external service, does not send telemetry, and does not collect IP addresses or WordPress user IDs.
Admin-resistant Must-Use mode
A normal WordPress plugin can always be deactivated by an administrator. If your security goal is to remain active after a WordPress administrator account is compromised, use the optional Must-Use loader included in the mu directory.
For WordPress.org transparency and normal plugin lifecycle behavior, Brightery File Lockdown does not copy or install itself into wp-content/mu-plugins automatically.
A trusted server administrator may manually deploy the Must-Use mode using two files from this package:

Copy mu/brightery-file-lockdown-mu-loader.php to wp-content/mu-plugins/brightery-file-lockdown.php.
Create wp-content/mu-plugins/brightery-file-lockdown/ and copy includes/class-brightery-file-lockdown.php into that directory as class-brightery-file-lockdown.php.

The deployed MU loader resolves the copied engine relative to the loader’s own location. It does not rely on WP_PLUGIN_DIR or the normal plugin directory name. This lets the Must-Use protection continue loading even if the normal plugin is deactivated or its directory is renamed.
Remove both manually deployed Must-Use files with trusted filesystem access before uninstalling the normal plugin.
This plugin is a hardening layer, not a guarantee against compromise. Keep WordPress, plugins, themes, PHP, and the web server updated and apply server-level upload execution restrictions where appropriate.
Privacy
Brightery File Lockdown does not transmit data to external servers and does not collect IP addresses or WordPress user IDs. A bounded local event record may contain blocked filenames, MIME types, block reasons, and timestamps.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是一款專為 WordPress 設計的安全外掛，...Hostinger ToolsHostinger ToolsHostinger Tools 是一款多合一網站管理外掛，協助 WordPress ...Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)Really Simple Security 是一款輕量級且易於使用的 WordPress...Jetpack – WP Security, Backup, Speed, & GrowthJetpack – WP Security, Backup, Speed, & GrowthJetpack 是一款功能強大的 WordPress 外掛，旨在提升網站內容...ManageWP WorkerManageWP WorkerManageWP Worker 是一款專為管理多個 WordPress 網站而設計的...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Safe SVGSafe SVGSafe SVG 是一個讓您在 WordPress 中安全上傳 SVG 檔案的最佳...LoginizerLoginizerLoginizer 是一款 WordPress 外掛，旨在防止暴力破解攻擊，當...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security 是一款專為 WordPress 設計的...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...User Role EditorUser Role EditorUser Role Editor 外掛允許用戶輕鬆變更使用者角色和權限。用...MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child 外掛可將你的 WordPress 網站安全連線至自架的 ...Kadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security 是一款專為 WordPress 網站設計的安全外掛...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...SiteGuard WP PluginSiteGuard WP PluginSiteGuard WP Plugin 旨在加強 WordPress 網站的登入及管理區...

文章
Filter
Mastodon