前言介紹
- 這款 WordPress 外掛「WP Webdoctor」是 2020-11-12 上架。 目前已經下架不再更新，不建議安裝使用。
- 目前尚無安裝啟用數，是個很新的外掛。如有要安裝使用，建議多測試確保功能沒問題！
- 上一次更新是 2024-12-06，距離現在已有 149 天。
- 外掛最低要求 WordPress 3.0 以上版本才可以安裝。
- 有 1 人給過評分。
- 還沒有人在論壇上發問，可能目前使用數不多，還沒有什麼大問題。
外掛協作開發者
外掛標籤
ban | secure | security | antivirus | anti-virus |
內容簡介
WP Webdoctor - WordPress 安全外掛：防毒與病毒掃描器
WordPress 本身是一個非常安全的平台。然而，使用一個實行良好安全實踐的安全外掛可為您的網站添加額外的安全和防火牆。
WP Webdoctor Security 外掛將為您的網站安全帶來全新的水平。
該外掛由專家設計和編寫，易於使用和理解。
它通過檢查漏洞以及實施和執行最新的 WordPress 安全實踐和技術，從而降低安全風險。
All In One WP Security 還使用前所未有的安全點評系統，根據您激活的安全功能衡量您保護站點的功效。
我們的安全防火牆規則分為“基本”、“中級”和“高級”。這樣您可以按部就班地應用防火牆規則，而不會破壞您的網站功能。
WP Webdoctor Security 外掛不會減慢您的網站速度，並且它是100％免費的。
以下是該外掛提供的安全和防火牆功能列表：
用戶帳戶安全
- 檢測是否存在使用預設“管理員”用戶名的用戶帳戶，並輕鬆更改用戶名為您選擇的值。
- 外掛還會檢測您是否有任何 WordPress 用戶帳戶具有相同的登錄名和顯示名。使用顯示名與登錄名相同的帳戶是不良的安全實踐，因為它使黑客的攻擊成功率提高了50％，因為他們已經知道了登錄名。
- 提供密碼強度測試工具，讓您創建非常強壯的密碼。
- 阻止用戶枚舉。所以用戶 / 機器人無法通過作者永久鏈接發現用戶信息。
用戶登錄安全
- 使用登錄鎖定功能保護您的站點免受“暴力登錄攻擊”。根據配置設置，IP 地址或範圍的用戶將被鎖定一段預定時間，您也可以選擇通過電子郵件收到每次由於太多登錄嘗試而被鎖定的通知。
- 作為管理員，您可以查看所有被鎖定的用戶列表，這些列表以易於閱讀和導航的表格形式顯示，並且還允許您通過點擊按鈕解鎖單個或批量 IP 地址。
- 在可配置的時間段後強制登出所有用戶。
- 監視/查看登錄失敗的嘗試，顯示用戶的 IP 地址、用戶 ID/用戶名和失敗登錄嘗試的日期/時間。
- 監視/查看系統上所有用戶帳戶的活動，通過跟踪用戶名、IP 地址、登錄日期/時間和登出日期/時間。
- 自動鎖定嘗試使用無效的用戶名進行登錄的 IP 地址範圍。
- 查看當前正在網站上登錄的所有用戶列表。
- 允許您在特殊白名單中指定一個或多個 IP 地址。白名單中的 IP 地址將可以訪問您的 WP 登錄頁面。
- 為 WordPress 登錄表單添加 Google reCaptcha 或純數學驗證碼。
- 為 WP 登錄系統的忘記密碼表單添加 Google reCaptcha 或純數學驗證碼。
用戶註冊安全
- 啟用 WordPress 用戶帳戶的手動批准。如果您的網站允許通過 WordPress 註冊表單創建自己的帳戶，那麼您可以通過手動批准減少垃圾郵件或虛假註冊。
原文外掛簡介
WP Webdoctor – WordPres Security Plugin: Antivirus & Virus Scanner
WordPress itself is a very secure platform. However, it helps to add some extra security and firewall to your site by using a security plugin that enforces a lot of good security practices.
The WP Webdoctor Security plugin will take your website security to a whole new level.
This plugin is designed and written by experts and is easy to use and understand.
It reduces security risk by checking for vulnerabilities, and by implementing and enforcing the latest recommended WordPress security practices and techniques.
All In One WP Security also uses an unprecedented security points grading system to measure how well you are protecting your site based on the security features you have activated.
Our security and firewall rules are categorized into “basic”, “intermediate” and “advanced”. This way you can apply the firewall rules progressively without breaking your site’s functionality.
The WP Webdoctor Security plugin doesn’t slow down your site and it is 100% free.
Below is a list of the security and firewall features offered in this plugin:
User Accounts Security
Detect if there is a user account which has the default “admin” username and easily change the username to a value of your choice.
The plugin will also detect if you have any WordPress user accounts which have identical login and display names. Having account’s where display name is identical to login name is bad security practice because
you are making it 50% easier for hackers because they already know the login name.
Password strength tool to allow you to create very strong passwords.
Stop user enumeration. So users/bots cannot discover user info via author permalink.
User Login Security
Protect against “Brute Force Login Attack” with the Login Lockdown feature. Users with a certain IP address or range will be locked out of the system for a predetermined amount of time based on the configuration settings and you can also choose to be notified
via email whenever somebody gets locked out due to too many login attempts.
As the administrator you can view a list of all locked out users which are displayed in an easily readable and navigable table which also allows you to unlock individual or bulk IP addresses at the click of a button.
Force logout of all users after a configurable time period
Monitor/View failed login attempts which show the user’s IP address, User ID/Username and Date/Time of the failed login attempt
Monitor/View the account activity of all user accounts on your system by keeping track of the username, IP address, login date/time, and logout date/time.
Ability to automatically lockout IP address ranges which attempt to login with an invalid username.
Ability to see a list of all the users who are currently logged into your site.
Allows you to specify one or more IP addresses in a special whitelist. The whitelisted IP addresses will have access to your WP login page.
Add Google reCaptcha or plain maths captcha to WordPress Login form.
Add Google reCaptcha or plain maths captcha to the forgot password form of your WP Login system.
User Registration Security
Enable manual approval of WordPress user accounts. If your site allows people to create their own accounts via the WordPress registration form, then you can minimize SPAM or bogus registrations by manually approving each registration.
Ability to add Google reCaptcha or plain maths captcha to the WordPress’s user registration page to protect you from spam user registration.
Ability to add Honeypot to the WordPress’s user registration form to reduce registration attempts by robots.
Database Security
Easily set the default WP prefix to a value of your choice with the click of a button.
Schedule automatic backups and email notifications or make an instant DB backup whenever you want with one click.
File System Security
Identify files or folders which have permission settings which are not secure and set the permissions to the recommend secure values with click of a button.
Protect your PHP code by disabling file editing from the WordPress administration area.
Easily view and monitor all host system logs from a single menu page and stay informed of any issues or problems occurring on your server so you can address them quickly.
Prevent people from accessing the readme.html, license.txt and wp-config-sample.php files of your WordPress site.
htaccess and wp-config.php File Backup and Restore
Easily backup your original .htaccess and wp-config.php files in case you will need to use them to restore broken functionality.
Modify the contents of the currently active .htaccess or wp-config.php files from the admin dashboard with only a few clicks
Blacklist Functionality
Ban users by specifying IP addresses or use a wild card to specify IP ranges.
Ban users by specifying user agents.
Firewall Functionality
This plugin allows you to easily add a lot of firewall protection to your site via htaccess file. An htaccess file is processed by your web server before any other code on your site.
So these firewall rules will stop malicious script(s) before it gets a chance to reach the WordPress code on your site.
Access control facility.
Instantly activate a selection of firewall settings ranging from basic, intermediate and advanced.
Enable the famous “6G Blacklist” Firewall rules courtesy of Perishable Press
Forbid proxy comment posting.
Block access to debug log file.
Disable trace and track.
Deny bad or malicious query strings.
Protect against Cross Site Scripting (XSS) by activating the comprehensive advanced character string filter.
or malicious bots who do not have a special cookie in their browser. You (the site admin) will know how to set this special cookie and be able to log into your site.
WordPress PingBack Vulnerability Protection feature. This firewall feature allows the user to prohibit access to the xmlrpc.php file in order to protect against certain vulnerabilities in the pingback functionality. This is also helpful to block bots from constantly accessing the xmlrpc.php file and wasting your server resource.
Ability to block fake Googlebots from crawling your site.
Ability to prevent image hotlinking. Use this to prevent others from hotlinking your images.
Ability to log all 404 events on your site. You can also choose to automatically block IP addresses that are hitting too many 404s.
Ability to add custom rules to block access to various resources of your site.
Brute force login attack prevention
Instantly block Brute Force Login Attacks via our special Cookie-Based Brute Force Login Prevention feature. This firewall functionality will block all login attempts from people and bots.
Ability to hide admin login page. Rename your WordPress login page URL so that bots and hackers cannot access your real WordPress login URL. This feature allows you to change the default login page (wp-login.php) to something you configure.
Ability to use Login Honeypot which will helps reduce brute force login attempts by robots.
Security Scanner
The file change detection scanner can alert you if any files have changed in your WordPress system. You can then investigate and see if that was a legitimate change or some bad code was injected.
Comment SPAM Security
Monitor the most active IP addresses which persistently produce the most SPAM comments and instantly block them with the click of a button.
Prevent comments from being submitted if it doesn’t originate from your domain (this should reduce some SPAM bot comment posting on your site).
Add a captcha to your wordpress comment form to add security against comment spam.
Automatically and permanently block IP addresses which have exceeded a certain number of comments labelled as SPAM.
Front-end Text Copy Protection
Ability to disable the right click, text selection and copy option for your front-end.
Regular updates and additions of new security features
WordPress Security is something that evolves over time. We will be updating the All In One WP Security plugin with new security features (and fixes if required) on a regular basis so you can rest assured that your site will be on the cutting edge of security protection techniques.
Works with Most Popular WordPress Plugins
It should work smoothly with most popular WordPress plugins.
各版本下載點
- 方法一：點下方版本號的連結下載 ZIP 檔案後，登入網站後台左側選單「外掛」的「安裝外掛」，然後選擇上方的「上傳外掛」，把下載回去的 ZIP 外掛打包檔案上傳上去安裝與啟用。
- 方法二：透過「安裝外掛」的畫面右方搜尋功能，搜尋外掛名稱「WP Webdoctor」來進行安裝。
（建議使用方法二，確保安裝的版本符合當前運作的 WordPress 環境。
延伸相關外掛（你可能也想知道）
WP-Ban 》這個外掛會在被封鎖的 IP、IP 範圍、主機名稱或轉介網址試圖訪問您的博客時，顯示自訂的封鎖訊息。您也可以排除某些 IP 不被封鎖。並會紀錄有多少次該 IP 試...。
Ban Hammer 》我們都曾經遇到這樣的問題：一群來自 mail.ru 的垃圾郵件發送者正在註冊您的博客，但您希望保持開放的註冊方式。如何在不影響您的顧客的情況下消除這些垃圾郵...。
Banhammer – Monitor Site Traffic, Block Bad Users and Bots 》, Banhammer：保護你的網站免於敵人襲擊！, , Banhammer 給予你完全控制權，決定誰有權限進入你的網站。在防禦塔中監視網路流量，並審查可疑的訪問者。如果你...。
BAN Users 》WP Plugin for truly banning users!, , 該 BAN Users WordPress 外掛能讓管理員快速禁止（禁用、暫停）使用者登入其 WordPress 使用者帳號，並提供將所有文...。
Login Security 》許多針對WordPress網站的暴力攻擊在您可能沒有察覺到的情況下進行。這些攻擊是由計算機程序執行的，其目的是嘗試每個可能的密碼，直到找到正確的密碼。如果您...。
Spam Captcha – Safeguard your WordPress website effortlessly with Spam Captcha for WordPress 》這個外掛程式可避免您的網站（留言和聯絡表單，如果您使用Contact Form 7）遭受垃圾郵件影響。, 此外，這個外掛也可使用驗證碼圖像和Akismet API來偵測垃圾郵...。
Right Click Disable OR Ban 》這是一個相當常被攝影網站使用的外掛功能，作者希望能阻止使用者在他的網站上複製他們的圖像和內容，所以只需安裝這個外掛，然後參考以下問題的解答即可。, ...。
IP Ban 》當 IP Ban 選項在 Discussion Options 頁面中指定到你的博客時，對此 IP 造訪者會返回「頁面未找到」的 404 錯誤訊息。。
Admin Country Allowlist 》- 這是一個提供給WordPress使用的最簡單的國家允許列表外掛程式。, - 使用QWeb的IP to country查詢API，將管理面板和XMLRPC訪問鎖定在允許的國家列表中。, - ...。
crawler-hunter 》當機器人和網頁爬蟲造訪您的網站時，它們會檢查完整用戶代理字串的內容，並封鎖除了白名單以外的機器人和爬蟲。, 此外，您也可以手動封鎖 IP 位址，如果您啟...。
Automatic Ban IP 》此外掛可封鎖懷疑嘗試在您的部落格垃圾留言中發佈的 IP 位址。, 此外掛需要您創建 Honey Pot Project 帳戶 (https://www.projecthoneypot.org，免費 API) 或...。
Wp Restricted 》這個外掛可以限制所有 IP 的訪問，只開放特定的 IP 訪問 WordPress 管理員頁面。。
WordPress Varnish as a Service 》WordPress Varnish as a Service 是一個外掛程式，用於 Varnish Cache，可清除/禁用快取伺服器。, 支援Varnish 2（清除）和Varnish 3（禁止）版本、秘密金鑰...。
Stop War! Stop Putin! 》這個外掛需要關閉任何高速緩存(Cache)外掛才能正常運作。, 當您安裝且啟用了「Stop War! Stop Putin! WordPress Plugin」時，它將允許您封鎖所有來自俄羅斯聯...。
WP-BlockYou 》評論黑名單功能很好用，但如果你真的想阻止某人連閱讀你的部落格都無法，這個外掛可以幫助你達成。, 它使用 .htaccess 檔案修改，從特定的 IP 位址(Deny from...。