[WordPress] 外掛分享： DawsonyWeb Spam Protection and API Hardening

內容簡介

Spam Protection & API Hardening 外掛旨在防止評論垃圾郵件並加強 WordPress 的安全性，無需安裝繁重的安全套件。它透過蜜罐技術、簡單規則和 API 加固來阻擋垃圾評論和機器人攻擊。

【主要功能】
• 完全禁用所有評論功能
• 隱形蜜罐欄位捕捉機器人
• 禁止 XML-RPC 並隱藏用戶詳細資訊
• 每個 IP 的評論速率限制
• IP 地址黑名單管理

外掛標籤

開發者團隊

原文外掛簡介

Stop comment spam and close off parts of WordPress that bots abuse, without installing a heavy security suite. Block spam comments with a honeypot and simple rules, disable XML-RPC, hide user details from the REST API and block problem IP addresses. It is not a malware scanner or firewall, and it doesn’t pretend to be.
Comment Protection

Master switch to completely disable all comments (form, REST API, XML-RPC, feeds)
Invisible honeypot field to trap bots
Minimum comment length enforcement
Block all links or cap links per comment
Require login to comment
Keyword/phrase blocklist

API & REST Hardening

Disable XML-RPC entirely (removes X-Pingback header too)
Hide /wp/v2/users endpoints from guests while keeping them available to signed-in users
Require authentication for all REST API requests
Optionally disable the REST API completely
Block author enumeration via /?author=N

Spam Rules

Per-IP comment rate limiting (configurable max and time window)
IP address blocklist – blocked IPs receive a 403 on any front-end request
Rolling activity log (last 200 events)

Privacy
When activity logging is enabled, the plugin stores up to 200 blocked-event entries locally, including IP address, time and reason. Administrators can clear the log or turn logging off. Comment rate limits use temporary counters. No log data is sent to DawsonyWeb or a third-party service. Uninstalling removes the plugin settings, logs and rate-limit transients.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是一款專為 WordPress 設計的安全外掛，...Hostinger ToolsHostinger Tools 是一款多合一網站管理外掛，協助 WordPress ...Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)Really Simple Security 是一款輕量級且易於使用的 WordPress...Jetpack – AI Agents & MCP, Security, Backup & AnalyticsJetpack 是一款功能強大的 WordPress 外掛，旨在提升網站內容...ManageWP WorkerManageWP Worker 是一款專為管理多個 WordPress 網站而設計的...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Safe SVGSafe SVG 是一個讓您在 WordPress 中安全上傳 SVG 檔案的最佳...LoginizerLoginizer 是一款 WordPress 外掛，旨在防止暴力破解攻擊，當...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security 是一款專為 WordPress 設計的...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...User Role EditorUser Role Editor 外掛允許用戶輕鬆變更使用者角色和權限。用...MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child 外掛可將你的 WordPress 網站安全連線至自架的 ...Kadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security 是一款專為 WordPress 網站設計的安全外掛...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...SiteGuard WP PluginSiteGuard WP Plugin 旨在加強 WordPress 網站的登入及管理區...