Anonindo Security Advisor

外掛說明

Anonindo Security Advisor helps site owners understand and improve their WordPress security posture without acting like a full firewall suite.

The plugin follows a simple workflow:

  • Scan for common WordPress security issues and misconfigurations
  • Explain what each issue means in beginner-friendly language
  • Show practical guidance and safer best practices
  • Offer safe auto-fix actions for selected hardening steps

This plugin is designed to be lightweight, educational, and operationally safe.

Features

  • Detects debug mode enabled in production
  • Detects dashboard file editing enabled
  • Detects XML-RPC exposure
  • Detects weak file permissions on common paths
  • Detects potentially exposed wp-config.php backup patterns
  • Detects outdated plugins and themes
  • Detects suspicious administrator account patterns
  • Detects REST API user enumeration exposure
  • Heuristically scans active theme and plugin PHP files for basic SQL injection and XSS risk patterns
  • Scans selected database content for suspicious script-like patterns
  • Provides a security score and prioritized recommendations
  • Includes an activity log for meaningful security-related site events
  • Supports safe auto-fixes for selected hardening improvements

螢幕擷圖

安裝方式

  1. Upload the anonindo-security-advisor folder to the /wp-content/plugins/ directory.
  2. Activate the plugin through the Plugins screen in WordPress.
  3. Open Anonindo Security Advisor in the WordPress admin menu.
  4. Run a security scan and review the recommendations.

常見問題集

Does this replace a firewall or malware scanner?

No. This plugin focuses on lightweight auditing, explanation, guided improvements, and selected safe fixes.

Does the plugin make automatic changes?

Only selected hardening actions support auto-fix, and they require explicit administrator confirmation.

Will this plugin impact performance?

The plugin is designed to avoid heavy frontend overhead. Scans are run manually or on schedule, and the most expensive checks are intentionally bounded.

使用者評論

這個外掛目前沒有任何使用者評論。

參與者及開發者

以下人員參與了開源軟體〈Anonindo Security Advisor〉的開發相關工作。

參與者

將〈Anonindo Security Advisor〉外掛本地化為台灣繁體中文版

對開發相關資訊感興趣?

任何人均可瀏覽程式碼、查看 SVN 存放庫,或透過 RSS 訂閱開發記錄

變更記錄

1.1.1

  • Renamed the plugin to Anonindo Security Advisor and updated the submission metadata and slug.

1.0.0

  • Initial MVP release.