內容簡介
Delta Dev Comment Lockdown 是一款專注於安全性的 WordPress 外掛，旨在為不需要原生評論系統的網站加強評論攻擊面。它透過多層保護措施來關閉公共評論，阻止評論提交，並隱藏現有評論，提升網站安全性。
【主要功能】
• 強制關閉公共網站的評論功能
• 隱藏現有評論而不刪除
• 阻止正常的 WordPress 評論提交
• 移除核心 REST API 的評論端點
• 禁用 pingback 和 trackback 功能
• 隱藏管理介面的評論選項
外掛標籤
開發者團隊
原文外掛簡介
Delta Dev Comment Lockdown is a security-focused comment attack-surface hardening plugin developed by Delta Dev for WordPress sites that do not need the native comment system.
Instead of only hiding a comment form, the plugin applies multiple independent WordPress-native protection layers. It closes public commenting, blocks direct and core comment creation paths, removes core REST comment routes, disables comment-related XML-RPC/pingback surfaces, blocks comment feeds, and can remove related admin surfaces. It does not modify WordPress core files and it does not delete existing comments.
Default protections include:
Forces comments closed on the public site.
Hides existing comments without deleting them.
Blocks normal WordPress comment submissions with HTTP 403.
Stops new comments in the core comment approval pipeline.
Removes and blocks the core REST API /wp/v2/comments endpoints.
Disables pingbacks and trackbacks.
Removes WordPress XML-RPC comment and pingback methods.
Removes the X-Pingback response header.
Disables comment-feed discovery links and direct comment-feed requests.
Removes Comments and Trackbacks support from registered post types.
Hides the Comments admin menu, toolbar item, and Recent Comments dashboard widget.
All protections can be configured from Settings > Comment Lockdown. Strict protection is enabled by default.
Security design
Uses WordPress core hooks and APIs instead of modifying core files.
Uses a defense-in-depth approach so disabling a theme comment form is not the only control.
Settings are restricted to administrators with manage_options.
Settings are saved through the WordPress Settings API and sanitized to strict boolean values.
Admin output is escaped before rendering.
No arbitrary code execution, file manager, remote executable downloads, telemetry, licensing gate, or external service is included.
Privacy
Delta Dev Comment Lockdown does not collect, store, transmit, or sell personal data. It does not use analytics, telemetry, cookies, external APIs, or third-party services.
Compatibility note
Some plugins use the native WordPress comment system for other features. WooCommerce product reviews are a common example. Enabling all protections can disable those comment-based review flows.
