這個外掛並未在最新的 3 個 WordPress 主要版本上進行測試。開發者可能不再對這個外掛進行維護或提供技術支援,並可能會與更新版本的 WordPress 產生使用上的相容性問題。

Anti CSRF

外掛說明

The CSRF vulnerability is the most famous web vulnerability, since … i do not remember, too long !

Many WordPress plugin (about 70%) from this repository or elsewhere, even Premim plugins are vunerable to this flaw.

To avoid get hacked because os this, just install this plugin, no settings, no tech. Just use your blog as usual.

! ONLY FOR BACK-END USAGE !

螢幕擷圖

  • On update page, clic MY link or die. 😉
  • Example of my own die with support proposal 😉

安裝方式

  1. Extract the plugin folder from the downloaded ZIP file.
  2. Upload BAW Anti CSRF folder to your /wp-content/plugins/ directory.
  3. Activate the plugin from the “Plugins” page in your Dashboard.
  4. That’s all

常見問題集

Why do i have to link on your link when i’m on an update page ?
  • Because i’m using a buffer to modify each form and action link, but WordPress clear this buffer before me on this page 🙁 The link is just a Dashboard link.

使用者評論

這個外掛目前沒有任何使用者評論。

參與者及開發者

以下人員參與了開源軟體〈Anti CSRF〉的開發相關工作。

參與者

將〈Anti CSRF〉外掛本地化為台灣繁體中文版

對開發相關資訊感興趣?

任何人均可瀏覽程式碼、查看 SVN 存放庫,或透過 RSS 訂閱開發記錄

變更記錄

1.5.2

  • 12 sep 2012
  • Little fix bug fro my code Improvment sight

1.5.1

  • 12 sep 2012
  • Little code Improvment

1.5

  • 04 sep 2012
  • Fix bug : wp_create_nonce undefined (hooked too soon)

1.4

  • 04 sep 2012
  • Add filter on admin_url() and network_admin_url() to add my nonce.

1.3

  • 03 sep 2012
  • 1.1 rollback, i have to keep the real nonces functions.

1.2

  • 11 sep 2012
  • Add more security using a message between a link without token, more annoying i admit, but more secure.

1.1.5

  • 16 aug 2012
  • Bug fix for Redirection (bad JS on my side x2)

1.1.4

  • 13 aug 2012
  • Bug fix for Jetpack (bad JS on my side)

1.1.3

  • 13 aug 2012
  • Bug fix for some link without my nonce

1.1.2

  • 13 aug 2012
  • Bug fix for l10n load

1.1.1

  • 13 aug 2012
  • Not a big deal, just forgot to add the plugin version in die support.

1.1

  • 12 aug 2012
  • Bug fix on redirection with wp_redirect()
  • Better own wp_die to explain and give support
  • Use my own nonces functions (clone from WP core) to avoid malicious plugins that can bypass mine

1.0.1

  • 12 aug 2012
  • Bug fix for default code ajax actions

1.0

  • 12 aug 2012
  • First Release

0.1b, 0.2b, 0.3b

  • 3 betas versions tested by @rochdaniel, @screenfeedfr, @gcroupie, @tmaquet, @geekpressfr, thanks dudes!