[WordPress] 外掛分享: Performance & Security

首頁外掛目錄 › Performance & Security
WordPress 外掛 Performance & Security 的封面圖片
50+
安裝啟用
★★★★★
5/5 分(2 則評價)
23 天前
最後更新
問題解決
WordPress 6.2+ PHP 7.4+ v1.2.0 上架:2014-10-19

內容簡介

Performance & Security 是一款自我託管網站管理工具,整合了安全加固、效能調整、管理清理、內容控制及電子郵件處理等功能,讓使用者無需安裝多個微型外掛,所有模組均可在單一設定頁面進行管理。

【主要功能】
• 安全性強化:禁用 XML-RPC、隱藏 WordPress 版本
• 登入頁面自訂:變更登入 URL、限制登入速率
• 效能優化:控制自動儲存與文章修訂
• 管理介面調整:隱藏前端工具列、變更 WordPress 問候語
• 內容編輯控制:自訂摘錄、禁用區塊編輯器
• 電子郵件管理:禁用選定通知郵件、重定向或阻擋所有外發郵件

外掛標籤

開發者團隊

⬇ 下載最新版 (v1.2.0) 或搜尋安裝

① 下載 ZIP → 後台「外掛 › 安裝外掛 › 上傳外掛」
② 後台搜尋「Performance & Security」→ 直接安裝(推薦)
📦 歷史版本下載

原文外掛簡介

A self-hosted site manager’s toolkit: the security hardening, performance tuning, admin cleanup, content controls and email handling you’d otherwise install half a dozen micro-plugins for — as independent modules on a single settings page (Settings → Site Toolkit). Every module is off by default and registers no hooks while disabled, so the plugin changes nothing until you opt in.
🔐 Security — disable XML-RPC, hide the WordPress version, disable user enumeration (author scans, sitemaps, oEmbed, author archives), block the REST users endpoint, disable the file editors, block readme/license files, security headers (with optional HSTS), disable application passwords, session management, a failed login log (with optional file logging for fail2ban), and an admin audit log.
🔓 Login Page — change the login URL, login rate limiting, hide detailed login errors, username-only sign-in, disable the language switcher, record each user’s last login, and login screen branding (use your site identity automatically or a custom logo from the media library).
🚀 Performance — control autosave and post revisions, remove asset version query strings, throttle the Heartbeat API, remove wp_head bloat and generator tags, dequeue unused default assets (emoji, jQuery Migrate, Block Library CSS), disable self-pings, scheduled database maintenance, DNS prefetch/preconnect hints, and manage generated image sizes.
🛠️ Admin / UX — hide the front-end toolbar, change the WordPress greeting, replace the account menu with a logout button, dashboard widget manager, custom admin footer, maintenance mode, media library user isolation, environment indicator, suppress update notices on non-production, control the admin email verification screen, trim the WordPress toolbar menu, and an “All Settings” menu item.
📝 Content & Editorial — customize excerpts, disable the block editor per post type, disable trackbacks, targeted comment controls (media comments, plain-text links, minimum length), disable comments entirely, disable oEmbed, and restore the Links Manager.
📧 Email & Notifications — disable selected notification emails, and redirect or block all outgoing email on non-production environments.
If you have further suggestions, please contact us via the plugin support page.
If this plugin is useful for managing your WordPress settings, please leave a review.
Developed by JMR.codes.

延伸相關外掛

文章
Filter
Mastodon