WebDmitriev Protection

由 webdmitriev 開發

外掛說明

WebDmitriev Protection is a compact and efficient security solution for WordPress sites:

Brute-Force Protection: Limits failed login attempts on wp-login.php.
Entry Point Security: Disables XML-RPC and prevents user enumeration via REST API and author query parameters.
File Integrity Guard: Monitors critical files (.htaccess and wp-config.php) for unauthorized changes.
Uploads Directory Guard: Automatically blocks PHP execution inside /wp-content/uploads/.
Lightweight WAF: Filters dangerous URL parameters (SQLi/XSS), blocks malicious User-Agent signatures, and manages IP blacklists.

Upload the webdmitriev-protection folder to the /wp-content/plugins/ directory.
Activate the plugin through the ‘Plugins’ menu in WordPress.
Go to ‘WD Protection’ in the admin dashboard to configure settings and view threat logs.

How does the plugin block brute-force attacks?: It tracks failed login attempts by IP address. If an IP exceeds 5 failed attempts within 15 minutes, access to the login form is temporarily blocked.
What happens if wp-config.php or .htaccess is edited?: The plugin calculates MD5 hashes of critical files. If a modification is detected, a notice appears in the admin panel allowing you to inspect and approve the new file state.

這個外掛目前沒有任何使用者評論。

以下人員參與了開源軟體〈WebDmitriev Protection〉的開發相關工作。

任何人均可瀏覽程式碼、查看 SVN 存放庫，或透過 RSS 訂閱開發記錄。

這個項目尚無任何評論記錄。