[WordPress] 外掛分享： DCI Admin Security

首頁 › 外掛目錄 › DCI Admin Security
WordPress 外掛 DCI Admin Security 的封面圖片
全新外掛
安裝啟用
—
尚無評分
2 天前
最後更新
—
問題解決
WordPress 6.0+ PHP 7.4+ v1.0.0 上架：2026-09-30

內容簡介

DCI Admin Security 外掛旨在保護 WordPress 登入及 wp-admin 區域，透過 IP 允許清單、自訂登入網址、電子郵件一次性密碼（OTP）、速率限制、CAPTCHA、日誌記錄及警報等功能，增強網站安全性。

【主要功能】
• 支援精確的 IPv4/IPv6 地址及 CIDR 範圍
• 自訂 WordPress 登入網址
• 電子郵件 OTP 驗證管理員身份
• 暴力破解速率限制與臨時鎖定
• 安全事件日誌及管理員檢視器
• 可選擇 Google reCAPTCHA 或 hCaptcha

外掛標籤

開發者團隊

⬇ 下載最新版 (v1.0.0) 或搜尋安裝

① 下載 ZIP → 後台「外掛 › 安裝外掛 › 上傳外掛」
② 後台搜尋「DCI Admin Security」→ 直接安裝（推薦）
📦 歷史版本下載

原文外掛簡介

Protect WordPress login and wp-admin with IP allowlisting, custom login URLs, email OTP, rate limiting, CAPTCHA, logging and alerts.
Features

Allow exact IPv4/IPv6 addresses and CIDR ranges.
Accept IPv4 shorthand such as 171.61, stored as 171.61.0.0/16.
Change the WordPress login URL.
Protect the normal wp-login.php endpoint.
Optional IP blocking for the login and wp-admin pages, while keeping admin-ajax.php available.
Return a 404 response for logged-out visitors who request the default wp-admin URL.
Optional Cloudflare CF-Connecting-IP detection.
Optional trusted X-Forwarded-For detection for known reverse-proxy setups.
Optional localhost/loopback bypass for local development.
Brute-force rate limiting and temporary lockouts.
Email OTP verification for administrators, delivered to each administrator’s WordPress profile email address.
Administrator-configured emergency fallback code for environments where email cannot be delivered.
Optional Google reCAPTCHA v2, reCAPTCHA v3 or hCaptcha on the WordPress login form.
Security event logging with an administrator viewer and configurable retention.
Optional email and Slack alerts for repeated blocked-IP or brute-force events.

Important
IP blocking is optional. When it is disabled, the custom login URL remains active but the allowlist is not enforced. Keep at least one known administrator IP in the allowlist before enabling IP blocking.
Only enable Cloudflare IP detection when the site is actually behind Cloudflare. Only enable trusted X-Forwarded-For when the server is behind a trusted reverse proxy that sets that header.
On localhost, PHP commonly sees 127.0.0.1 or ::1 rather than the browser’s public VPN address. Use a publicly reachable staging site for an end-to-end VPN IP test.
The emergency fallback code is stored as a password hash and is never displayed after saving.
External Services
This plugin can optionally communicate with third-party CAPTCHA verification services when CAPTCHA is enabled:

Google reCAPTCHA: the login page loads Google reCAPTCHA assets and sends the submitted CAPTCHA token to Google’s verification endpoint. See https://policies.google.com/privacy and https://policies.google.com/terms.
hCaptcha: the login page loads hCaptcha assets and sends the submitted CAPTCHA token to hCaptcha’s verification endpoint. See https://www.hcaptcha.com/privacy and https://www.hcaptcha.com/terms.

The plugin does not contact these services when CAPTCHA is disabled.
IP access examples
Exact IP: 186.189.26.220
IPv4 /16 shorthand: 171.61
CIDR: 171.61.0.0/16
Email OTP
After a successful WordPress administrator password check, a six-digit OTP is generated and sent to that administrator’s WordPress profile email address.
If email delivery is unavailable, an administrator-configured emergency fallback code can be used.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是一款專為 WordPress 設計的安全外掛，...Hostinger ToolsHostinger ToolsHostinger Tools 是一款多合一網站管理外掛，協助 WordPress ...Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)Really Simple Security 是一款輕量級且易於使用的 WordPress...Jetpack – WP Security, Backup, Speed, & GrowthJetpack – WP Security, Backup, Speed, & GrowthJetpack 是一款功能強大的 WordPress 外掛，旨在提升網站內容...ManageWP WorkerManageWP WorkerManageWP Worker 是一款專為管理多個 WordPress 網站而設計的...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Safe SVGSafe SVGSafe SVG 是一個讓您在 WordPress 中安全上傳 SVG 檔案的最佳...LoginizerLoginizerLoginizer 是一款 WordPress 外掛，旨在防止暴力破解攻擊，當...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security 是一款專為 WordPress 設計的...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...User Role EditorUser Role EditorUser Role Editor 外掛允許用戶輕鬆變更使用者角色和權限。用...MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child 外掛可將你的 WordPress 網站安全連線至自架的 ...Kadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security 是一款專為 WordPress 網站設計的安全外掛...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...SiteGuard WP PluginSiteGuard WP PluginSiteGuard WP Plugin 旨在加強 WordPress 網站的登入及管理區...

文章
Filter
Mastodon