WebDmitriev Protection

작성자: webdmitriev

지원

설명

WebDmitriev Protection is a compact and efficient security solution for WordPress sites:

Brute-Force Protection: Limits failed login attempts on wp-login.php.
Entry Point Security: Disables XML-RPC and prevents user enumeration via REST API and author query parameters.
File Integrity Guard: Monitors critical files (.htaccess and wp-config.php) for unauthorized changes.
Uploads Directory Guard: Automatically blocks PHP execution inside /wp-content/uploads/.
Lightweight WAF: Filters dangerous URL parameters (SQLi/XSS), blocks malicious User-Agent signatures, and manages IP blacklists.

Upload the webdmitriev-protection folder to the /wp-content/plugins/ directory.
Activate the plugin through the ‘Plugins’ menu in WordPress.
Go to ‘WD Protection’ in the admin dashboard to configure settings and view threat logs.

How does the plugin block brute-force attacks?: It tracks failed login attempts by IP address. If an IP exceeds 5 failed attempts within 15 minutes, access to the login form is temporarily blocked.
What happens if wp-config.php or .htaccess is edited?: The plugin calculates MD5 hashes of critical files. If a modification is detected, a notice appears in the admin panel allowing you to inspect and approve the new file state.

이 플러그인에 대한 평가가 없습니다.

“WebDmitriev Protection”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 이 플러그인에 기여하였습니다.

코드 탐색하기는, SVN 저장소를 확인하시거나, 개발 기록을 RSS로 구독하세요.

아직 제출된 리뷰가 없습니다.