[WordPress] 外掛分享： TechnologyWisdom File Editor Access Lock

內容簡介

TechnologyWisdom File Editor Access Lock 外掛可禁用 WordPress 控制台中的主題和外掛編輯器，防止未經授權或意外的代碼變更，提升網站安全性並促進更安全的網站管理。

【主要功能】
• 完全禁用主題編輯器
• 完全禁用外掛編輯器
• 移除控制台中的選單項目
• 阻止直接訪問編輯器檔案
• 無需配置，啟用即可使用

外掛標籤

開發者團隊

原文外掛簡介

This plugin disables the built-in WordPress theme and plugin editors in the admin dashboard. It helps protect your website by preventing unauthorized or accidental code changes. By restricting direct file editing, it enhances security and promotes safer website management practices. Lightweight and easy to use, it works without affecting other WordPress functionality.
Features

Disables theme editor completely
Disables plugin editor completely
Removes menu items from admin area
Blocks direct access to editor files
No configuration needed – just activate
Top-level admin menu with Tutorial, Support, and Announcements
In-plugin support form and Technology Wisdom support portal integration
Optional rating / review feedback popup
Lightweight and simple

Why Disable Editors?

Security – Prevents attackers from injecting malicious code
Prevents Mistakes – Avoid accidental changes that break your site
Production Safety – Enforce proper development workflows

Upgrade to TW Security Toolkit
Need more advanced WordPress site protection and security monitoring features?
TW File Editor Access Lock is also available as part of the premium TW Security Toolkit. The Security Toolkit brings login hardening, content workflow controls, file protection, and security monitoring into one admin menu — all without custom development.
Premium Features Include

Secure Login Path with a custom login URL
Upload Guard with role-based file size, type, and dimension limits
Login Alert & Tracker with last-login tracking and email alerts
Disable File Editor to block theme and plugin editors
Post Modifier Tracker showing who last edited content
Link Expiration by date and/or click count
CPT Revisions control per custom post type
Post Approval Notifier with optional draft hold-for-approval
Security Dashboard with recent activity overview
Complete Audit Log with CSV/PDF export
Failed Login Monitoring & Brute Force Protection
IP Blacklist to block unwanted visitors
Two-Factor Authentication (email OTP) and role policies
Login History by User with advanced filters
Email, Slack & Discord security notifications
Scheduled Security Reports (daily, weekly, or monthly)
Suspicious Activity Detection & Alerts
Security Health Check with recommendations
File Change Detection for important WordPress files

Whether you are hardening login access, protecting uploads and file editors, managing content approvals, or monitoring suspicious activity, TW Security Toolkit provides the tools needed to secure and oversee your WordPress site from a single plugin.
Upgrade to TW Security Toolkit and unlock a complete set of WordPress security features designed for growing websites and teams.
For full Premium details, pricing, and feature comparison, visit the TW Security Toolkit.
Privacy / External Service
This plugin can optionally connect to an external support service operated by Technology Wisdom.
Service: https://pluginsupport.technologywisdom.com
Terms of Use: https://pluginsupport.technologywisdom.com/terms-of-use/
Privacy Policy: https://pluginsupport.technologywisdom.com/privacy-policy/
The service is used to provide in-plugin support messaging, feedback forwarding, announcements, and connection status for opted-in sites.
Opt-in consent (required before any connection):
When you activate the plugin, an admin notice asks whether you want to allow the support connection. You can choose Allow Support Connection or No Thanks.

If you allow the connection, the plugin may send: site URL, site name, admin email, plugin name/version, WordPress version, and PHP version. Support requests and review/feedback details are sent only when you submit those forms. The plugin may also check weekly for announcements from Technology Wisdom.
While the connection is enabled, the plugin may also report a connection status to the portal so we can tell whether the site is Active, Deactivated, Disconnected, or Deleted. Status is only sent after you opt in.
If you decline (or never accept), that data is not sent to the support portal. The plugin’s core feature continues to work normally without the connection.
You are never required to allow the connection to use the plugin.
You can disconnect the support connection at any time from the plugin’s Support page by choosing Disable priority support. After you disconnect, the plugin stops sending status updates, support traffic, and announcement checks.

Support and rating forms also include their own consent checkboxes before site information is included with a submission.
Please review the service Terms of Use and Privacy Policy before enabling the connection.
License
This plugin is licensed under the GPL-2.0+ License.
You may use, modify, and distribute it freely under the license terms.
Full license: https://opensource.org/licenses/GPL-2.0