[WordPress] 外掛分享： Hopelessly Sensible: Simple Security Hardening

內容簡介

Hopelessly Sensible 是一款簡單、輕量且可靠的 WordPress 安全強化外掛，專注於提供基本的安全防護，並讓使用者掌控網站安全設定，避免過多的干擾與通知。

【主要功能】
• 隱藏使用者列表與使用者名稱
• 統一登入失敗的錯誤訊息
• 隱藏作者頁面，並排除寫手於網站地圖中
• 阻擋 XML-RPC 接口，防止密碼猜測工具
• 可選擇關閉所有評論功能
• 可選擇鎖定佈景主題與外掛檔案編輯器

外掛標籤

開發者團隊

原文外掛簡介

Most WordPress security plugins are heavy and slow. This one is simple, light and reliable.
It does seven things. Each one has a switch, a plain-English explanation of what it does and an honest note about what it might break. No notification badges, no upgrade banners and nothing in your dashboard trying to sell you something.
It sets up what is safe and leaves you in charge
When you activate it, Hopelessly Sensible looks at your site and switches on everything that is safe here. Protections that take a feature away from you are left off, so that call stays yours.
If something changes, it stands down and tells you
If a setting stops being safe to leave on, this plugin switches it off by itself and gives you one clear, dismissible notice saying what changed and why. It is the only thing this plugin ever shows you outside its own settings screen. A switch that is off is never turned on behind your back.
What it does

Keeps your list of users and their usernames away from anonymous visitors
Gives the same short message whether a login failed due to the username or the password
Hides author pages and keeps writers out of your sitemap and link previews
Blocks XML-RPC, an old remote publishing interface popular with password-guessing tools
Optionally: closes comments everywhere
Optionally: closes WooCommerce product reviews
Optionally: locks the theme and plugin file editors in the dashboard
Warns you if you have a user called “admin”, and explains how to fix it

What it does not do

It does not write to your .htaccess file, your wp-config.php or anything outside its own single settings row. Deactivate it and your site is exactly as it was, immediately.
It adds no JavaScript to your dashboard.
It does not scan, does not phone home, does not collect any data and has no paid version.
It does not give you homework. There is no checklist, no score and no red badge waiting for you.
It does not hide options from you. Anything this plugin cannot do on your site is still on the screen, switched off, saying what is stopping it.

Free and open source, GPL, written by Hebble & Stone, a community interest company that builds websites for charities, organisations and small businesses.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是一款專為 WordPress 設計的安全外掛，...Hostinger ToolsHostinger Tools 是一款多合一網站管理外掛，協助 WordPress ...Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)Really Simple Security 是一款輕量級且易於使用的 WordPress...Jetpack – AI Agents & MCP, Security, Backup & AnalyticsJetpack 是一款功能強大的 WordPress 外掛，旨在提升網站內容...ManageWP WorkerManageWP Worker 是一款專為管理多個 WordPress 網站而設計的...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Safe SVGSafe SVG 是一個讓您在 WordPress 中安全上傳 SVG 檔案的最佳...LoginizerLoginizer 是一款 WordPress 外掛，旨在防止暴力破解攻擊，當...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security 是一款專為 WordPress 設計的...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...User Role EditorUser Role Editor 外掛允許用戶輕鬆變更使用者角色和權限。用...MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child 外掛可將你的 WordPress 網站安全連線至自架的 ...Kadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security 是一款專為 WordPress 網站設計的安全外掛...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...SiteGuard WP PluginSiteGuard WP Plugin 旨在加強 WordPress 網站的登入及管理區...