[WordPress] 外掛分享: Limit Login Attempts Reloaded – Login Security, 2FA, Brute Force Protection & Firewall

首頁外掛目錄 › Limit Login Attempts Reloaded – Login Security, 2FA, Brute Force Protection & Firewall
WordPress 外掛 Limit Login Attempts Reloaded – Login Security, 2FA, Brute Force Protection & Firewall 的封面圖片
2,000,000+
安裝啟用
★★★★
4.9/5 分(1449 則評價)
7 天前
最後更新
13%
問題解決
WordPress 3.0+ v3.2.0 上架:2016-08-02

內容簡介

Limit Login Attempts Reloaded 是一款強大的安全外掛,旨在防止暴力破解攻擊,透過限制登入嘗試次數來增強網站的安全性和效能。此外掛適用於標準登入、XMLRPC、WooCommerce 及自訂登入頁面,擁有超過 250 萬的活躍用戶,滿足所有登入安全需求。

【主要功能】
• 兩步驟驗證(2FA)增強登入安全性
• 限制每個 IP 的登入嘗試次數
• 可配置的鎖定時間設定
• 登入頁面顯示剩餘嘗試次數
• 鎖定通知透過電子郵件發送給管理員
• 拒絕嘗試日誌查看所有拒絕的登入嘗試

外掛標籤

開發者團隊

⬇ 下載最新版 (v3.2.0) 或搜尋安裝

① 下載 ZIP → 後台「外掛 › 安裝外掛 › 上傳外掛」
② 後台搜尋「Limit Login Attempts Reloaded – Login Security, 2FA, Brute Force Protection & Firewall」→ 直接安裝(推薦)
📦 歷史版本下載

原文外掛簡介

Limit Login Attempts Reloaded functions as a robust deterrent against brute force attacks, bolstering your website’s security measures and optimizing its performance. It achieves this by restricting the number of login attempts allowed. This applies not only to the standard login method, but also to XMLRPC, Woocommerce, and custom login pages. With more than 2.5 million active users, this plugin fulfills all your login security requirements.
The plugin functions by automatically preventing further attempts from a particular Internet Protocol (IP) address and/or username once a predetermined limit of retries has been surpassed. This significantly weakens the effectiveness of brute force attacks on your website.
By default, WordPress permits an unlimited number of login attempts, posing a vulnerability where passwords can be easily deciphered through brute force methods.
Limit Login Attempts Reloaded Premium (Try Free with Micro Cloud)
Upgrade to Limit Login Attempts Reloaded Premium to extend cloud-based protection to the Limit Login Attempts Reloaded plugin, thereby enhancing your login security. The premium version includes a range of highly beneficial features, including IP intelligence to detect, counter and deny malicious login attempts. Your failed login attempts will be safely neutralized in the cloud so your website can function at its optimal performance during an attack.

Features (Free Version):

2FA – Enable two-factor authentication for extra login security.
Limit Logins – Limit the number of retry attempts when logging in (per each IP).
Configurable Lockout Timings – Modify the amount of time a user or IP must wait after a lockout.
Remaining Tries – Informs the user about the remaining retries or lockout time on the login page.
Lockout Email Notifications – Informs the admin via email of lockouts.
Denied Attempt Logs – View a log of all denied attempts and lockouts.
IP & Username Safelist/Denylist – Control access to usernames and IPs.
New User Registration Protection (Micro Cloud Accounts) – Protects default WP registration.
Sucuri compatibility.
Wordfence compatibility.
Ultimate Member compatibility.
WPS Hide Login compatibility.
MemberPress compatibility.
XMLRPC gateway protection.
Woocommerce login page protection.
Multi-site compatibility with extra MU settings.
GDPR compliant.
Custom IP origins support (Cloudflare, Sucuri, etc.).
llar_admin own capability.

Features (Premium Version):

Performance Optimizer – Offload the burden of excessive failed logins from your server to protect your server resources, resulting in improved speed and efficiency of your website.
Enhanced IP Intelligence – Identify repetitive and suspicious login attempts to detect potential brute force attacks. IPs with known malicious activity are stored and used to help prevent and counter future attacks.
Enhanced Throttling – Longer lockout intervals each time a malicious IP or username tries to login unsuccessfully.
Deny By Country – Block logins by country by simply selecting the countries you want to deny.
Auto IP Denylist – Automatically add IP addresses to your active cloud deny list that repeatedly fail login attempts.
New User Registration Protection – Protects default WP registration.
Global Denylist Protection – Utilize our active cloud IP data from thousands of websites in the LLAR network.
Synchronized Lockouts – Lockout IP data can be shared between multiple domains for enhanced protection in your network.
Synchronized Safelist/Denylist – Safelist/Denylist IP and username data can be shared between multiple domains.
Premium Support – Email support with a security tech.
Auto Backups of All IP Data – Store your active IP data in the cloud.
Successful Logins Log – Store successful logins in the cloud including IP info, city, state and lat/long.
Enhanced lockout logs – Gain valuable insights into the origins of IPs that are attempting logins.
CSV Download of IP Data – Download IP data direclty from the cloud.
Supports IPV6 Ranges For Safelist/Denylist
Unlock The Locked Admin – Easily unlock the locked admin through the cloud.
Registration Page Protection – Protect the registration page based on your rules and a real-time database of malicious IPs. Also protects WooCommerce and other supported plugins.

*Some features require higher level plans.
Upgrading from the old Limit Login Attempts plugin?

Go to the Plugins section in your site’s backend.
Remove the Limit Login Attempts plugin.
Install the Limit Login Attempts Reloaded plugin.

All your settings will be kept intact!
Many languages are currently supported in the Limit Login Attempts Reloaded plugin but we welcome any additional ones.
Help us bring Limit Login Attempts Reloaded to even more countries.
Translations: Bulgarian, Brazilian Portuguese, Catalan, Chinese (Traditional), Czech, Dutch, Finnish, French, German, Hungarian, Norwegian, Persian, Romanian, Russian, Spanish, Swedish, Turkish
Plugin uses standard actions and filters only.
Based on the original code from Limit Login Attempts plugin by Johan Eenfeldt.
Branding Guidelines
Limit Login Attempts Reloaded™ is a trademark of Atlantic Silicon Inc. When writing about the plugin, please make sure to use Reloaded after Limit Login Attempts. Limit Login Attempts is the old plugin.

Limit Login Attempts Reloaded (correct)
Limit Login Attempts (incorrect)

延伸相關外掛

文章
Filter
Apply Filters
Mastodon