內容簡介
Sentinel Login Guard 是一款專業的安全外掛，能隱藏預設的 WordPress 登入頁面，並根據訪客的 IP 地址提供地理限制，增強網站的安全性。
【主要功能】
• 隱藏預設的 wp-login.php 和 /wp-admin 路徑
• 自訂登入 URL（專屬的秘密標識）
• 根據國家進行地理限制
• IP 白名單和黑名單管理
• 登入統計：成功與失敗的嘗試記錄
• 一鍵阻擋/允許訪客
外掛標籤
開發者團隊
原文外掛簡介
Sentinel Login Guard is a professional security plugin that hides the default WordPress login page and provides geographic restriction based on visitor IP.
Features:
Hide the default wp-login.php and /wp-admin paths
Custom login URL (your own secret slug)
Geographic restriction by country
IP Whitelist and Blacklist (single IPs and ranges: CIDR, range, single)
Login statistics: successful and failed attempts with country/city info
One-click block/allow from the statistics page
Choose the behavior for unauthorized visitors (Home, 404, Custom URL)
Emergency fallback mode for Geo service failures
One-click “Add my IP to Whitelist” button
Full RTL and translation support
External services
This plugin connects to the ipwho.is service to detect the visitor’s country for geo-restriction of the login page.
External Service Details:
Service name: ipwho.is
Service URL: https://ipwho.is/
Terms of Use: This service does not publish a public Terms page.
Privacy Policy: This service does not publish a public Privacy page.
Data sent: Only the visitor’s IP address is sent to https://ipwho.is/{visitor-ip}. No other data, headers, cookies, or personal information are transmitted.
When: The request is made when a visitor attempts to access the login page.
Purpose: To retrieve the ISO country code (e.g., “IR”) to decide whether the visitor is allowed to see the login form.
Caching: Results are cached locally in the WordPress database using transients for 1 hour.
Fallback: If the service fails, the plugin has an “Emergency mode” setting. When enabled (default), access is allowed so the site admin is never locked out.
Privacy
Login log data:
This plugin stores a temporary record of login attempts (both successful and failed) for security auditing purposes. The stored data includes: visitor IP, country, city, and login status. This data is retained for 30 days and automatically deleted afterward. The legal basis for this processing is legitimate interest in securing the website (GDPR Recital 49).
No third-party tracking:
The plugin does not use any external services for tracking, analytics, or user profiling. ipwho.is is used solely for country detection.
Data retention:
Login records are automatically deleted after 30 days via a daily cleanup task.
Transient cache entries (country code, country name, city name) automatically expire after 1 hour.
If the plugin is uninstalled, all options, transients, and the log table are deleted via uninstall.php.
