[WordPress] 外掛分享： FP Site Security

外掛標籤

開發者團隊

原文外掛簡介

FP Site Security is a self-contained WordPress security plugin. It runs entirely on your own site — no external dashboards, no license servers, no cloud sync.
Features:

Login protection — brute-force lockout, optional TOTP two-factor authentication
Firewall — built-in rules and request blocking
DDoS rate limiting
Near-real-time malware scanning with signature and heuristic detection
File integrity monitoring
Optional WordPress.org checksum verification
Optional outdated plugin/theme/core checks
Quarantine and guided cleanup
Local + scheduled backups
Activity log and reports
Admin email alerts

External services
This plugin connects to a small number of third-party services. All of them are optional and only contacted when you turn them on, supply credentials, or opt in to a feature that explicitly depends on that service.
WordPress.org (checksum and update verification, optional) — Only contacted if you enable WordPress.org verification lookups in the plugin settings. When enabled, the plugin requests WordPress core checksums and update metadata from api.wordpress.org. No personal data is sent. wordpress.org Privacy: https://wordpress.org/about/privacy/.
Google reCAPTCHA (optional) — Only contacted if you enable reCAPTCHA on login/register/password-reset and supply your own site keys. The plugin loads https://www.google.com/recaptcha/api.js on the login page and submits responses to https://www.google.com/recaptcha/api/siteverify. Google reCAPTCHA Terms: https://policies.google.com/terms — Privacy: https://policies.google.com/privacy.
Slack (optional) — Only contacted if you enable Slack notifications and configure a webhook URL. Security events are posted to the webhook you supply.
Sentry (optional) — Only contacted if you enable Sentry notifications and configure a Sentry DSN. Critical events are posted to the Sentry endpoint encoded in your DSN.
Filesystem scope
The plugin only writes to the database and a small set of clearly named directories under wp-content/uploads/. It never asks users to edit plugin files, and it does not store runtime data in its own plugin folder. Every write below is gated behind an admin nonce or a WordPress cron event — there is no path that an unauthenticated visitor can use to write to disk.

wp-content/uploads/firssise-backups/ — created by the local-backup feature when scheduled or manual backups are run. Contains the generated .zip archives. Backups are NOT removed on uninstall (that’s your data); delete the folder manually if you don’t want them.
wp-content/uploads/firssise-logs/ — internal error log written by the plugin’s own error-capture handlers when the “Monitor PHP error log” option is enabled. The directory gets a blank index.html and a restrictive .htaccess file when supported by the server.
Quarantine records are stored in the WordPress database. Flagged files are deleted from disk when quarantined instead of being copied into the plugin directory or a public uploads subfolder.

The plugin reads many other paths (WordPress core files, other plugins, themes, uploads) for integrity scanning and malware detection, but it does not write to them.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是最受歡迎的 WordPress 安全防護外掛，...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Reloaded 是一款強大的安全外掛，旨在...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...MalCare WordPress Security Plugin – Malware Scanner, Cleaner, Security FirewallMalCare 是一款專為 WordPress 網站設計的安全外掛，提供即時...NinjaFirewall (WP Edition) – Advanced Security Plugin and FirewallNinjaFirewall (WP Edition) 是一款先進的網頁應用防火牆，專...Login Lockdown & ProtectionLogin Lockdown & Protection 外掛能夠記錄失敗登入嘗試...WP Ghost (Hide My WP Ghost) – Security & FirewallWP Ghost 是一款專業級的 WordPress 安全解決方案，專注於防...Anti-Malware Security and Brute-Force FirewallAnti-Malware Security and Brute-Force Firewall 外掛旨在保...BBQ Firewall – Fast & Powerful Firewall SecurityBBQ Firewall 是一款輕量級且快速的 WordPress 防火牆外掛，...Defender Security – Malware Scanner, Login Security & FirewallDefender Security 是一款易於設置的企業級安全外掛，能有效...Patchstack – WordPress & Plugins SecurityPatchstack 是一個強大的工具，可幫助您識別所有網站的外掛、...Security Plugin, Firewall & Malware Scanner with Auto Removal這款安全外掛專為 WordPress 設計，提供全面的安全防護，包括...Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning你一定會喜歡的功能 獨家AntiBot Detection Engine - 強大的...