內容簡介
Trufend 是一款專為 WordPress 網站提供安全防護的外掛，透過實用的安全控制功能，讓使用者在需要時輕鬆啟用，並能從單一控制台檢視活動紀錄，確保常見攻擊路徑保持封閉。
【主要功能】
• IP 鎖定 — 限制登入失敗次數，封鎖濫用的 IP 位址
• 登入安全 — 隱藏登入提示，自訂登入 URL，支援電子郵件雙重驗證
• 管理員用戶保護 — 強制使用更強的管理員密碼，顯示重要帳戶變更
• 安全標頭 — 發送常見的 HTTP 安全標頭
• XML-RPC 保護 — 在不需要時禁用 XML-RPC
• 用戶活動日誌 — 檢視近期的安全相關活動
外掛標籤
開發者團隊
原文外掛簡介
Trufend helps you protect a WordPress site with practical security controls that stay out of your way until you need them. Enable only the modules you want, review activity from a single dashboard, and keep common attack paths closed.
Free features
IP Lock — Limit failed login attempts, block abusive IP addresses, and unblock them from the settings page.
Login Security — Hide login hints, optional custom login URL, and email-based two-factor authentication.
Admin User Protection — Enforce stronger administrator passwords and surface important account changes.
Security Headers — Send common HTTP security headers such as X-Frame-Options and Referrer-Policy.
XML-RPC Protection — Disable XML-RPC when it is not needed.
User Enumeration Protection — Block common author-scanning techniques.
REST API Protection — Restrict anonymous REST API access when configured.
Comment Protection — Add a lightweight honeypot to comment forms.
User Activity Log — Review recent security-related activity in the dashboard.
Malware Scanner — Scan individual files for suspicious PHP patterns.
Backups — Create manual database or site file backups in the background.
File Permissions — Browse file and folder permissions from the WordPress admin.
External libraries
Trufend bundles the following library with its distribution:
shewa/wp-job-queue — GPL-2.0-or-later — Background job processing for scans and backups.
