內容簡介
Super Secret 可使您的博客變成私人。這意味著只有在系統上註冊的人才能訪問。Super Secret 和其他會員外掛的最大不同在於，會員外掛會重新導向您到 WordPress 登錄頁面，而 Super Secret 則不會。Super Secret 會返回一個正確的 404 HTTP 響應頭，告訴瀏覽器該網站不存在。它還會顯示一個“Not Found”通用虛擬頁面。
這並不意味著您的網站對所有人都是100％隱藏的。用戶仍然可以看到 wp-login.php
當您發布帖子時，WordPress 會通知其他與您帖子中鏈接的博客。這可能會洩漏出您的網站！請確保禁用所有這些功能！
在“設置>討論設置>默認文章設置” 中：
禁用“嘗試通知文章中鏈接到的任何博客。”
禁用“允許其他博客(持續追蹤和引用的通知) 鏈接到本文。
在“設置>隱私設置” 中：
選擇“我希望封鎖搜索引擎，但允許普通訪問者”。
您的博客存在的其他跡象是嘗試訪問“wp-admin”(不帶斜線結尾)。如果設置正確，Apache 會重定向您到“wp-admin/”。“這是一個明確的跡象，表明在您的域名下存在一個博客。
這不是一個 完全保護的外掛。真正安全的事物是不存在的。您只能阻擋人們。
我為什麼要創建這個外掛
將人們從查看網站重定向到登錄頁面的其他外掛。
我想返回正確的 404 錯誤和通用虛擬頁面。這是為了防止任何人或計算機猜測網站存在。
外掛標籤
開發者團隊
原文外掛簡介
Super Secret makes your blog private. This means, to whoever is registered on the system. The biggest difference between Super Secret and other membership plugins is that the membership plugin redirects you to the WordPres login page, Super Secret does not. Super Secret will return a proper 404 HTTP Header, telling browsers that the website is not found. It will also display a “Not Found” generic dummy page.
This doesn’t mean your website is 100% hidden from everyone who attends it. Users can still see wp-login.php
When you publish a post, WordPress notifies other blogs linked to from your post. This could give away the presense of your blog! Make sure you disable all of these!
Inside “Settings > Discussion Settings > Default article settings”:
Disable “Attempt to notify any blogs linked to from the article.”
Disable “Allow link notifications from other blogs (pingbacks and trackbacks.)”“
Inside “Settings > Privacy Settings”:
Select “I would like to block search engines, but allow normal visitors”.
Other give aways that your blog exist is trying to access ‘wp-admin’ (without the blackslash at the end). If configured correctly, Apache will redirect you to ‘wp-admin/’. This is a clear sign that a blog exists at your domain.
This is not a full proof plugin. There is no such thing as truly secure. You can only deter people.
Why I Created It
Other plugins that blocked people from viewing the site redirected them to the login page.
I wanted to return a proper 404 error, and generic dummy page. This is to prevent anyone or computer form guessing the website exists.
