內容簡介
Ethwebs Role Auditor 是一款超輕量級的安全工具，專為檢測特權提升和未經授權的管理員帳號創建而設計，能有效防範透過直接資料庫 SQL 注入攻擊的安全漏洞。
【主要功能】
• 直接資料庫 SQL 審核
• 即時控制台狀態顯示
• 智能主旨行預覽
• 多收件者通知
• 攻擊者排除保護
• 手動即時檢查審核
外掛標籤
開發者團隊
原文外掛簡介
Ethwebs Role Auditor is an ultra-lightweight, zero-bloat security tool specifically built to catch privilege escalation and unauthorized administrator account creations—even when performed via direct database SQL injection attacks that bypass standard security plugins.
Most security logging plugins create heavy custom database tables and rely strictly on standard WordPress hooks (wp_login, user_register). When attackers exploit database vulnerabilities, they insert rows directly into wp_users and wp_usermeta, bypassing WordPress hooks entirely.
Ethwebs Role Auditor addresses this by running direct, prefix-aware SQL database queries during scheduled background audits to count and identify every single user account holding administrator capabilities.
Key Features:
Direct Database SQL Audit: Queries the database directly to detect unauthorized administrator accounts added via SQL injection.
Instant Dashboard Status: Displays real-time role counts and active admin IDs immediately upon opening the settings page.
Smart Subject Line Previews: View current admin and editor counts directly in your email inbox subject line without having to open the message.
Multiple Recipient Notifications: Enter single or comma-separated email addresses to notify your security team.
Attacker Exclusion Protection: Intelligently strips newly promoted/attacker email addresses from receiving security alerts.
Manual “Run Check Now” Audit: Trigger an instant on-demand database scan and email test directly from your settings panel.
Instant Role Elevation Alerts: Receive email notifications whenever a user is created or promoted to Administrator or Editor.
Smart Subnet-Aware IP Detection: Persistent IPv4 & IPv6 /64 subnet tracking alerts you to new network locations while eliminating false-positive spam on dynamic mobile connections.
Zero Database Bloat: Creates zero custom database tables and runs cleanly in the background.
