Title: Brightery File Lockdown Author: Brightery Published: 2026년 9월 6일 Last modified: 2026년 9월 6일 --- 플러그인 검색 ![](https://ps.w.org/brightery-file-lockdown/assets/banner-772x250.png?rev=3683667) ![](https://ps.w.org/brightery-file-lockdown/assets/icon.svg?rev=3683667) # Brightery File Lockdown 작성자: [Brightery](https://profiles.wordpress.org/brighterycom/) [다운로드](https://downloads.wordpress.org/plugin/brightery-file-lockdown.1.0.9.zip) * [세부사항](https://ko.wordpress.org/plugins/brightery-file-lockdown/#description) * [평가](https://ko.wordpress.org/plugins/brightery-file-lockdown/#reviews) * [설치](https://ko.wordpress.org/plugins/brightery-file-lockdown/#installation) * [개발](https://ko.wordpress.org/plugins/brightery-file-lockdown/#developers) [지원](https://wordpress.org/support/plugin/brightery-file-lockdown/) ## 설명 Brightery File Lockdown reduces the impact of a compromised WordPress administrator account by restricting high-risk code and upload capabilities. In standard plugin mode it: * Disables theme and plugin source-editing capabilities. * Blocks installation of new plugins and themes from wp-admin. * Blocks plugin and theme ZIP uploads. * Blocks plugin and theme deletion from wp-admin. * Keeps core, plugin, and theme updates configurable. * Restricts uploads to an explicit image, audio, and video allowlist. * Rejects executable, script, archive, and configuration-file extensions. * Rejects suspicious double extensions such as `example.php.jpg`. * Uses WordPress file-type validation plus server-side MIME detection when available. * Applies the same upload checks to normal uploads and sideloaded uploads. * Keeps a bounded local record of the latest 100 blocked security events in the WordPress database. The plugin does not contact Brightery or any external service, does not send telemetry, and does not collect IP addresses or WordPress user IDs. #### Admin-resistant Must-Use mode A normal WordPress plugin can always be deactivated by an administrator. If your security goal is to remain active after a WordPress administrator account is compromised, use the optional Must-Use loader included in the `mu` directory. For WordPress.org transparency and normal plugin lifecycle behavior, Brightery File Lockdown does not copy or install itself into `wp-content/mu-plugins` automatically. A trusted server administrator may manually deploy the Must-Use mode using two files from this package: 1. Copy `mu/brightery-file-lockdown-mu-loader.php` to `wp-content/mu-plugins/brightery- file-lockdown.php`. 2. Create `wp-content/mu-plugins/brightery-file-lockdown/` and copy `includes/class- brightery-file-lockdown.php` into that directory as `class-brightery-file-lockdown. php`. The deployed MU loader resolves the copied engine relative to the loader’s own location. It does not rely on `WP_PLUGIN_DIR` or the normal plugin directory name. This lets the Must-Use protection continue loading even if the normal plugin is deactivated or its directory is renamed. Remove both manually deployed Must-Use files with trusted filesystem access before uninstalling the normal plugin. This plugin is a hardening layer, not a guarantee against compromise. Keep WordPress, plugins, themes, PHP, and the web server updated and apply server-level upload execution restrictions where appropriate. ### Privacy Brightery File Lockdown does not transmit data to external servers and does not collect IP addresses or WordPress user IDs. A bounded local event record may contain blocked filenames, MIME types, block reasons, and timestamps. ## 스크린샷 [[ [[ [[ [[ [[ ## 설치 1. Upload and activate Brightery File Lockdown normally from Plugins > Add New. 2. Test normal media uploads and your update workflow. 3. Apply the appropriate Apache or Nginx uploads rule from the included `server` directory. 4. For admin-resistant protection, manually deploy the optional MU loader and its engine copy using trusted hosting, SSH, SFTP, or deployment access. 5. Review `wp-config-example.txt` for optional server-side configuration. ## FAQ ### Can a WordPress administrator deactivate the plugin? In standard mode, yes. This respects the normal WordPress plugin lifecycle. For a compromised-admin threat model, manually deploy the included MU loader and engine copy using trusted server access. ### Does the plugin automatically write files outside its own directory? No. The WordPress.org package does not automatically create or modify files in ` wp-content/mu-plugins` or other content directories. ### Why does Must-Use mode require two files? The Must-Use loader is intentionally independent of the normal plugin directory. Deploying a copy of the engine beside the loader means the loader does not hardcode the normal plugin folder or rely on `WP_PLUGIN_DIR`. ### Does this block normal media uploads? Common image, audio, and video formats remain allowed. PDF is disabled by default and can be explicitly enabled in `wp-config.php`. ### Are plugin and theme updates blocked? Updates are allowed by default. They can be disabled through server-side configuration constants when a site owner intentionally wants a stricter immutable-code workflow. ### Does the plugin send data to Brightery? No. There are no telemetry, tracking, remote API, license-check, or external service calls. ### Where are security events stored? The latest 100 blocked events are kept in a non-autoloaded WordPress option on the local site. Entries can contain the blocked filename, claimed MIME type, reason, and event time. IP addresses and user IDs are not collected. ### What happens to locally stored events when the plugin is uninstalled? The plugin removes its local blocked-event option during normal WordPress uninstall. Any manually deployed Must-Use files must be removed separately using trusted filesystem access. ## 후기 이 플러그인에 대한 평가가 없습니다. ## 기여자 & 개발자 “Brightery File Lockdown”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 이 플러그인에 기여하였습니다. 기여자 * [ Brightery ](https://profiles.wordpress.org/brighterycom/) [자국어로 “Brightery File Lockdown”(을)를 번역하세요.](https://translate.wordpress.org/projects/wp-plugins/brightery-file-lockdown) ### 개발에 관심이 있으십니까? [코드 탐색하기](https://plugins.trac.wordpress.org/browser/brightery-file-lockdown/) 는, [SVN 저장소](https://plugins.svn.wordpress.org/brightery-file-lockdown/)를 확인하시거나, [개발 기록](https://plugins.trac.wordpress.org/log/brightery-file-lockdown/)을 [RSS](https://plugins.trac.wordpress.org/log/brightery-file-lockdown/?limit=100&mode=stop_on_copy&format=rss) 로 구독하세요. ## 변경이력 #### 1.0.9 * Updated the Contributors field to the WordPress.org owner username `brighterycom`. * Defined the normal plugin location from `__FILE__` and `plugin_dir_path()` instead of relying on implicit paths. * Reworked optional Must-Use deployment so the loader resolves a separately deployed engine relative to its own location. * Removed the Must-Use loader dependency on `WP_PLUGIN_DIR` and the normal plugin folder slug. * Added uninstall cleanup for the locally stored blocked-event option. #### 1.0.8 * Removed automatic writes to the Must-Use plugin directory from the WordPress. org build. * Replaced file-based logging with a bounded local WordPress option. * Removed direct PHP filesystem operations flagged by Plugin Check. * Removed direct request-action inspection that generated nonce warnings. * Removed runtime definition of the WordPress `DISALLOW_FILE_EDIT` constant; it is now documented as optional server configuration. * Removed IP/user actor logging. * Added an explicit manual MU-loader workflow for administrator-resistant deployments. * Retained WordPress 7.1 compatibility metadata. #### 1.0.7 * Updated compatibility metadata to WordPress 7.1. ## 기초 * 버전 **1.0.9** * 최근 업데이트: **2일 전** * 활성화된 설치 **10보다 적음** * 워드프레스 버전 ** 6.2 또는 그 이상 ** * 다음까지 시험됨: **7.1** * PHP 버전 ** 7.4 또는 그 이상 ** * 언어 * [English (US)](https://wordpress.org/plugins/brightery-file-lockdown/) * 태그: * [file security](https://ko.wordpress.org/plugins/tags/file-security/)[hardening](https://ko.wordpress.org/plugins/tags/hardening/) [media](https://ko.wordpress.org/plugins/tags/media/)[security](https://ko.wordpress.org/plugins/tags/security/) [uploads](https://ko.wordpress.org/plugins/tags/uploads/) * [고급 보기](https://ko.wordpress.org/plugins/brightery-file-lockdown/advanced/) ## 평점 아직 제출된 리뷰가 없습니다. [Your review](https://wordpress.org/support/plugin/brightery-file-lockdown/reviews/#new-post) [모든 리뷰 보기](https://wordpress.org/support/plugin/brightery-file-lockdown/reviews/) ## 기여자 * [ Brightery ](https://profiles.wordpress.org/brighterycom/) ## 지원 할 말 있으신가요? 도움이 필요하신가요? [지원 포럼 보기](https://wordpress.org/support/plugin/brightery-file-lockdown/)