前言介紹
- 這款 WordPress 外掛「Improve Website Security」是 2024-12-27 上架。
- 目前有 30 個安裝啟用數。
- 上一次更新是 2025-04-20，距離現在已有 13 天。
- 外掛最低要求 WordPress 5.5 以上版本才可以安裝。
- 外掛要求網站主機運作至少需要 PHP 版本 7.0 以上。
- 有 1 人給過評分。
- 還沒有人在論壇上發問，可能目前使用數不多，還沒有什麼大問題。
外掛協作開發者
外掛標籤
disable-json-api | Security Headers | disable right click | Solid WP Security Plugin | change default Login Page |
內容簡介
總結: WordPress 安全對於保護您的網站免受駭客和惡意攻擊至關重要。這款外掛通過提供多項功能來增強您的WordPress安全性，包括添加安全標頭、更改登入錯誤訊息、停用 REST API、禁用 XML-RPC、防止右鍵複製、停用快捷鍵、登入時發送電子郵件警示等。
問題與答案:
1. 這款外掛的哪些功能可以增加WordPress網站的安全性？
- Security Headers、Change WP Login Error Message、Disable WP REST API、Disable XML-RPC、Disable Right-Click、Disable Ctrl+C, Ctrl+X, Ctrl+V, Ctrl+A、Email Alerts on Login、Change Default WP-Login URL。
2. 如果忘記了自訂登入URL而被鎖在WordPress儀表板外，可以如何恢復存取？
- 透過特殊的URL來停用外掛，而無需登入cPanel或FTP。
3. 透過外掛連接的API主要用於獲取哪些資訊？
- IP地址和國家名稱，這些資訊在某人登入您的WordPress儀表板時顯示詳細資料。
4. 使用WP登入電子郵件警示時是否默認同意使用外掛提供的服務？
- 是的，若使用WP登入電子郵件警示功能，即默認同意使用這項服務。
原文外掛簡介
WordPress security is essential to protect your website from hackers and malicious attacks. Without proper security measures, your site can be vulnerable to data breaches, spam, and unauthorized access. A well-secured WordPress site ensures that your content, user data, and website functionality remain safe from threats.
This plugin boosts your WordPress security with several key features:
Security Headers: Adds extra layers of protection by sending security headers with each page load.
Change WP Login Error Message: Hides whether the username or password is incorrect, preventing hackers from easily guessing your login details.
Disable WP REST API: Stops unauthorized access to your site’s data by disabling the REST API for non-logged-in users.
Disable XML-RPC: Blocks XML-RPC functionality to prevent brute force attacks and unauthorized access.
Disable Right-Click: Adds a basic level of protection against copying your site content by disabling right-clicking.
Disable Ctrl+C, Ctrl+X, Ctrl+V, Ctrl+A: It will disable these shortcuts, preventing copying of site content.
Email Alerts on Login: Sends the site admin an email alert every time someone logs into the WordPress dashboard.
Change Default WP-Login URL: Customize your WordPress Login Page URL to any name instead of the default ‘wp-admin.’
Special Feature:
If you’re locked out of your WordPress Dashboard (e.g., forgot the custom login URL), you can deactivate the plugin using a special URL. This allows you to regain access without needing to log in to cPanel or FTP.
Tutorial video
If you want to learn more about how this plugin works, please check our website – ideastocode.com.
External services
This plugin connects to an API to obtain the IP address and country name, which are required to display the details when someone logs in to your WordPress dashboard.
It sends the logged-in user’s IP address and country information when they log in. If you are using WP Login Email Alerts, you are giving consent to use this service.
This service is provided by ipapi (ipapi.co): Terms of Service
各版本下載點
- 方法一：點下方版本號的連結下載 ZIP 檔案後，登入網站後台左側選單「外掛」的「安裝外掛」，然後選擇上方的「上傳外掛」，把下載回去的 ZIP 外掛打包檔案上傳上去安裝與啟用。
- 方法二：透過「安裝外掛」的畫面右方搜尋功能，搜尋外掛名稱「Improve Website Security」來進行安裝。
（建議使用方法二，確保安裝的版本符合當前運作的 WordPress 環境。
延伸相關外掛（你可能也想知道）
暫無相關外掛推薦。