內容簡介
SecuPlug 是 WordPress 最簡單、最快速的安全外掛。它可以禁用你所選擇的特定 XML-RPC 服務，
隱藏登入頁面 URL 並將 HTTP 流量重定向到 HTTPS。
功能：
XMLRPC
WordPress 駭客攻擊（以及垃圾評論）主要是在 XML-RPC 請求上進行的。
Secuplug 幫助你管理一些關鍵的 XML-RPC 服務。它禁用了你所選擇的特定 XML-RPC 服務。
因此，它可以使你的網站對 XML-RPC 攻擊（例如垃圾評論）進行保護，而不必禁用所有 XML-RPC 服務。
XML-RPC 全面保護（禁用所有 xml-rpc）
拒絕所有遠端請求。最常用於阻止所有遠端攻擊。
XML-RPC 登入保護
拒絕遠端登入請求。最常用於防止暴力登入嘗試。
XML-RPC PINGBACK 保護
拒絕遠端 pingback 請求。最常用於防止 DDoS 攻擊。
自我 pingback 保護
拒絕遠端自我 pingback 請求。最常用於防止 DDoS 攻擊。
SSL
如果你有 SSL 憑證，你可以啟用 SSL。但首先必須從任何 SSL 經銷商購買 SSL 憑證。
同樣地，你可以使用 Cloudflare 免費的 SSL 服務。Secuplug 強制將你的網站選定區域的 URL 重定向為 HTTPS/SSL。
此外，它透過隱藏地址和確保你的登入頁面的 SSL，增強了你的登入頁面的安全性。
啟用 HTTPS/SSL
SSL 自動加密你的關鍵信息數據。
強制 HTTPS 登入
將登入頁面協議由 HTTP 重定向為 HTTPS。
強制 HTTPS 管理頁面
將管理頁面協議由 HTTP 重定向為 HTTPS。
強制 HTTPS 前台頁面
將前台頁面協議由 HTTP 重定向為 HTTPS。
登入
更改登入錯誤
禁用預設的登入錯誤，給攻擊者留下較少的提示。
更改管理員ID
如果你的管理員ID是 1，攻擊者不難預測你的管理員ID，進而對你的網站發起簡單的 SQL 漏洞攻擊。
新的自訂登入 URL 名稱
你可以變更你的登入頁面URL名稱而不會遇到 SSL 問題。
防火牆
過濾惡意請求
有助於保護你的網站免受 XSS、CSRF、代碼注入等攻擊。
禁用 Rest API
隱藏你的敏感信息。例如，管理員用戶ID、用戶列表和它們的ID。
有關詳細信息，請訪問我們的網站SecuPlug網站。
外掛標籤
開發者團隊
② 後台搜尋「SecureFusion: Ultimate Security – Firewall, SSL Control, Anti Spam, Login Security」→ 直接安裝（推薦）
📦 歷史版本下載
原文外掛簡介
SecureFusion acts as a robust shield against many common attack types, including login attempts and DDoS attacks via XML-RPC.
It not only enhances security but also significantly improves your site’s performance.
By helping to prevent unauthorized access and collection of sensitive information from your site, it neutralizes many attack vectors.
This is an effective solution for ensuring user safety and maintaining the speed of your site.
Features:
XMLRPC
SecureFusion aids in managing your critical XML-RPC services, often a prime target for WordPress hack attempts and spam comments.
The plugin allows you to selectively disable specific XML-RPC services, defending your site from XML-RPC attacks like spam comments without entirely disabling all XML-RPC services.
However, be aware that blocking all XML-RPC requests may impact the interaction of certain applications and services with WordPress.
XML-RPC FULL PROTECTION (Disable all XML-RPC)
This feature blocks all incoming XML-RPC requests, offering an effective countermeasure against various remote attacks.
Remember, this might impact certain functionalities that rely on XML-RPC.
XML-RPC LOGIN PROTECTION
This feature denies remote login requests made via XML-RPC, providing an extra line of defense against brute force login attempts.
XML-RPC PINGBACK PROTECTION
This feature blocks remote pingback requests, assisting in the prevention of DDoS attacks.
SELF PINGBACK PROTECTION
This feature prevents remote self pingback requests, further strengthening your defenses against DDoS attacks.
SSL
SecureFusion facilitates SSL integration into your site, provided you have an SSL certificate purchased from any SSL dealer or acquired through a free SSL service like Cloudflare.
The plugin forces the redirection of selected zone URLs on your site to HTTPS/SSL.
Note that SSL certificates must always be valid and correctly configured; otherwise, users may face issues accessing the site.
Enable HTTPS / SSL
Enforces the use of HTTPS/SSL across your site, ensuring that data is encrypted during transmission.
Force HTTPS Login
Redirects login page protocol from HTTP to HTTPS.
Force HTTPS Admin
Redirects admin page protocol from HTTP to HTTPS.
Force HTTPS Front Page
Redirects front page protocol from HTTP to HTTPS.
Login
Login Attempt Limit
Set the maximum number of login attempts and the waiting time after reaching this limit to prevent brute force attacks on your login page.
Change Login Error
SecureFusion allows you to modify default login errors, making it harder for potential attackers to gather information.
Change Admin Username
This feature lets you change your administrator’s username (e.g., the default ‘admin’ username), making it more difficult to guess user credentials. This provides an obscurity layer rather than direct protection from SQL vulnerabilities. (Note: This changes the username, not the numerical User ID).
New Custom Login URL
This feature lets you change your login page URL name.
Be aware that if your site uses SSL/HTTPS, ensure your overall SSL configuration is correct and all resources load securely after any URL changes to avoid potential issues.
Firewall
Filter Bad Requests
The plugin helps secure your site against various attacks such as XSS, CSRF, and Code Injections.
Disable Rest API
SecureFusion helps safeguard sensitive information by allowing you to disable REST API endpoints, which can prevent them from being used by attackers for information disclosure or exploitation.
However, keep in mind that disabling the REST API can restrict the functionality of your WordPress site since some plugins and themes depend on it.
For complete information, please visit our website the SecureFusion website.
