內容簡介
### 總結：
SecurelyWP 是為您的 WordPress 網站提供頂級安全和管理工具而設計的。它提供了包括防火牆、備份系統、惡意軟體掃描器、系統詳細資訊概觀和重置 WordPress 功能等一套功能，旨在保護您的網站。
### 問題與答案：
1. SecurelyWP 主要提供什麼功能？
- 防火牆
- 備份系統
- 惡意軟體掃描器
- 系統詳細資訊概觀
- 重置 WordPress 功能
2. 防火牆有什麼功能？
- 識別並封鎖惡意流量
- 支援 IP 白名單、黑名單和速率限制
- IP 白名單和黑名單可精確控制對網站的訪問
- 速率限制可保護免受暴力攻擊和過多的請求
3. 惡意軟體掃描器如何工作？
- 它檢查核心檔案、主題和外掛程式，檢測惡意軟體、後門和可疑代碼
- 使用 API 技術進行實時威脅檢測
- 提供詳細報告，提醒用戶可能存在的弱點或被入侵的情況
4. 系統詳細資訊如何幫助用戶？
- 提供完整的系統概觀，包括服務器統計資料、外掛程式狀態、PHP 版本、數據庫詳情等
- 提供可操作的見解，幫助用戶有效地優化和排除網站問題
- 實時監控讓用戶了解網站的績效狀態
外掛標籤
開發者團隊
② 後台搜尋「SecurelyWP – all-in-one security」→ 直接安裝（推薦）
原文外掛簡介
SecurelyWP is a hassle-free security plugin that makes your WordPress site safer the moment you activate it. Most features work out of the box, with optional CAPTCHA and two-factor authentication (2FA) configuration for enhanced protection. It includes strong security features, system details, security headers, CAPTCHA integration, and 2FA to keep your site secure and healthy.
Why Choose SecurelyWP?
Works Out of the Box: Most security features activate automatically upon installation.
Comprehensive Protection: Guards against hacking, malicious files, form spam, and unauthorized access.
Lightweight: Designed to run smoothly without affecting your site’s speed or performance.
Free Features: Includes system details, security headers, CAPTCHA, and 2FA to monitor and protect your site.
Features
Hide WordPress Version
Why: Stops hackers from targeting weaknesses in your WordPress version.
Impact: Good protection with no effect on your site’s appearance.
Disable PHP Execution in Uploads Folder
Why: Prevents harmful scripts from running if someone uploads a malicious file.
Impact: Strong defense against file-based attacks.
Prevent User Enumeration
Why: Blocks hackers from guessing usernames through sneaky methods.
Impact: Keeps your user list safe from prying eyes.
Detect & Warn About “admin” Username
Why: Alerts you if your site uses the risky “admin” username.
Impact: Big security boost if you change the username.
Disable File Editing in Dashboard
Why: Stops anyone from modifying your site’s code through the WordPress dashboard.
Impact: Major safeguard against unauthorized code changes.
Force HTTPS for Login & Admin
Why: Ensures your login and admin pages use a secure connection.
Impact: Critical for keeping your credentials safe.
Basic Brute Force Protection (Lite)
Why: Temporarily blocks repeated failed login attempts.
Impact: Strong protection against login attacks.
System Details
Why: Shows important info about your site to monitor its health.
Impact: Keeps you informed about your site’s status.
Security Headers
Why: Adds HTTP headers to improve your site’s security.
Impact: Strengthens your site’s defense with minimal setup.
CAPTCHA Protection (Cloudflare Turnstile)
Why: Adds CAPTCHA to prevent spam and bot submissions.
Impact: Enhances form security with user-friendly CAPTCHA.
Two-Factor Authentication (2FA)
Why: Adds an extra layer of security by requiring a second verification step during login.
Impact: Significantly reduces the risk of unauthorized access.
2FA Features:
– Authenticator App (TOTP): Use apps like Google Authenticator or Authy for time-based codes.
– Email 2FA: Receive codes via email for verification.
– Recovery Codes: Generate emergency codes for access if other methods are unavailable.
– Per-User Settings: Each user can configure their own 2FA preferences.
– Multisite Support: Super admins can enforce 2FA network-wide.
– Flexible Options: Choose primary 2FA method from TOTP, Email 2FA, or Recovery Codes.
Supported Forms, Plugins & Multisite for CAPTCHA:
– Core WordPress: Login, Registration, Lost Password, Comment
– E-commerce & Membership: WooCommerce Checkout, MemberPress, Ultimate Member, WP-Members
– Form Plugins: WPForms, Gravity Forms, Contact Form 7 (CF7), Formidable Forms, Forminator, Elementor Pro, Easy Digital Downloads (EDD), Mailchimp for WordPress
– Community / Forums: BuddyPress, bbPress
– Multisite: Multisite Signup Forms
How to Set Up CAPTCHA with Cloudflare Turnstile
Sign Up for Cloudflare: Go to https://www.cloudflare.com/ and create a free account or log in.
Add Your Site: Click “Add a Site” in the dashboard and enter your domain.
Access Turnstile: Navigate to the “Turnstile” section in the Cloudflare dashboard.
Create a Turnstile Widget:
Click “Add Widget”
Provide a name (e.g., “SecurelyWP CAPTCHA”)
Add Hostnames (your domain, e.g., example.com) → Click “Add”
Choose the widget type (“Managed”)
Get Your Keys: Copy the Site Key and Secret Key.
Add Keys to SecurelyWP: Go to SecurelyWP > CAPTCHA Settings in WordPress → paste keys → enable CAPTCHA for desired forms.
Test Your CAPTCHA: Visit a form to ensure the CAPTCHA widget appears and works correctly.
How to Set Up Two-Factor Authentication
Access 2FA Settings: Go to “Profile” > “Two-Factor Authentication” in your WordPress dashboard.
Enable 2FA Methods:
Authenticator App: Scan the QR code or enter the secret into your app (Google Authenticator, Authy). Verify with a code.
Email 2FA: Enable to receive codes via email.
Recovery Codes: Generate emergency codes. Copy or download codes for safekeeping.
Choose Primary Method: Select your preferred 2FA method (Authenticator App, Email, or Recovery Codes).
Test 2FA: Log out and log in to verify the 2FA prompt appears below the login form.
Multisite (Super Admins): Enable network-wide 2FA enforcement for all users.
