[WordPress] 外掛分享： WP Login Door

內容簡介

你曾經覺得你的網站或博客登錄頁面非常脆弱且容易被入侵者破壞嗎？

個人而言，我不喜歡想象每天有數百人嘗試開啟我的門鎖數百次，我的博客登錄頁面也是如此。

在 WordPress 上，有兩個主要的 bruteforce 入侵向量：
* http://my-site.com/wp-login.php，這是登錄頁面
* http://my-site.com/xmlrpc.php，這是用於與第三方應用程序交互的 API 網關。

這個外掛程式在您的登錄頁面前增加了一個安全層，同時，如果您不需要它（XML-RPC 是一個廣泛使用的攻擊向量），您還可以通過一個簡單的複選框禁用 XML-RPC。

這個想法很簡單：您選擇一對單詞，當您想要訪問您的登錄頁面時，您只需要在網址中提供它們，就像這樣：http://my-site.com/wp-login.php?word1=word2。這就是全部！
如果您未使用這一對單詞訪問您的登錄頁面，您將收到一條可配置的錯誤消息，您可以在其中侮辱攻擊者，如您所願 😉

外掛標籤

開發者團隊

原文外掛簡介

Did you ever feel like your website or blog login page is ridiculously fragile and reachable, and could be easily broken in by an intruder?
Personally I hate to think of hundreds of people playing with my door lock hundreds of times a day. It’s the same with my blog login page.
On WordPress, there are two main potential vectors of bruteforce intrusion:
* http://my-site.com/wp-login.php, which is the login page
* http://my-site.com/xmlrpc.php, which is an API gateway for interacting with third party applications.
This plugin adds one security layer in front of your login page, and by the way you can also disable XML-RPC with a simple checkbox if you don’t need it (XML-RPC is a WIDELY used vector of attacks).
The idea is simple: you choose a pair of words, and when you want to access your login page, you just have to provide them in the URL like this: http://my-site.com/wp-login.php?word1=word2. That’s all!
If you try to access your login page without this pair of words, you get a configurable error message, where you can insult the attacker as much as you want 😉

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是最受歡迎的 WordPress 安全防護外掛，...Hostinger ToolsHostinger Tools 是一款多合一網站管理外掛，協助 WordPress ...Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)le Plugins include Complianz GDPR, Disable Updates Manage...Jetpack – WP Security, Backup, Speed, & GrowthJetpack 是一款多合一 WordPress 外掛，整合網站安全防護、自...Limit Login Attempts Reloaded – Login Security, Brute Force Protection, FirewallLimit Login Attempts Reloaded 是一款WordPress外掛，可阻止...ManageWP WorkerManageWP Worker 是一款多站管理外掛，讓你透過單一控制台集...Security Optimizer – The All-In-One Protection Plugin透過精心挑選且易於配置的功能，SiteGround Security 外掛提...Safe SVGSafe SVG 可以讓你安心地在 WordPress 中上傳 SVG 檔案！ 它...LoginizerLoginizer 是一款 WordPress 安全防護外掛，主要用於阻擋暴力...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...User Role Editor「User Role Editor」WordPress 外掛讓您輕鬆更改使用者角色...MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child 外掛可將你的 WordPress 網站安全連線至自架的 ...Solid Security – Password, Two Factor Authentication, and Brute Force Protectioning iThemes Security Plugin can benefit you: 保護您的 Wor...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...SiteGuard WP Plugin版本: 1.6.7 您可以在日文網頁和英文網頁上找到文件、常見問...