WordPress.org

Plugin Directory

BBQ Firewall – 快速、功能強大的安全性防火牆

BBQ Firewall – 快速、功能強大的安全性防火牆

外掛說明

Install, activate, and done!
Powerful protection from WP’s fastest firewall plugin.

BBQ Firewall is a lightweight, super-fast plugin that protects your site against a wide range of threats. BBQ checks all incoming traffic and quietly blocks bad requests containing nasty stuff like eval(, base64_, and excessively long request-strings. This is a simple yet solid solution for sites that are unable to use a strong Apache/.htaccess firewall.

Adds a strong firewall to ANY WordPress site
Works with all WordPress plugins and themes

Powerful Protection

BBQ protects your site against many threats:

  • SQL injection attacks
  • Executable file uploads
  • Directory traversal attacks
  • Unsafe character requests
  • Excessively long requests
  • PHP remote/file execution
  • XSS, XXE, and related attacks
  • Protects against bad bots
  • Protects against bad referrers
  • Protects against bad POST content
  • Protects against many other bad requests

Works great with Blackhole for Bad Bots

Awesome Features

BBQ provides all the best firewall features:

  • Rated 5 stars at WordPress.org
  • 100% plug-&-play, zero configuration
  • 100% focused on security and performance
  • Blocks a wide range of malicious URL requests
  • Fastest Web Application Firewall (WAF) for WordPress
  • Based on the 6G/7G Firewall
  • Scans all incoming traffic and blocks bad requests
  • Scans all types of requests: GET, POST, PUT, DELETE, etc.
  • Protects against known bad bots and referrers
  • Works silently behind the scenes to protect your site
  • Hassle-free security plugin that’s easy to use
  • Thoroughly tested, error-free performance
  • Extremely low rate of false positives
  • Compatible with other security plugins
  • Regularly updated and “future proof”
  • Firewall < 10 kilobytes in size
  • Lightweight, fast and flexible

For advanced protection and features, check out BBQ Pro »
BBQ = Block Bad Queries

Privacy

This plugin does not collect or store any user data. It does not set any cookies, and it does not connect to any third-party locations. Thus, this plugin does not affect user privacy in any way.

BBQ Firewall is developed and maintained by Jeff Starr, 15-year WordPress developer and book author.

Support development

I develop and maintain this free plugin with love for the WordPress community. To show support, you can make a donation or purchase one of my books:

And/or purchase one of my premium WordPress plugins:

Links, tweets and likes also appreciated. Thank you! 🙂

安裝方式

Installing BBQ

  1. Install, activate, done.

Once active, BBQ automatically protects your site against threats. Quietly, behind the scenes. For more control and stronger protection, check out BBQ Pro »

More info on installing WP plugins

Customizing

Note that the Pro version of BBQ makes it possible to customize patterns and everything else directly via the plugin settings, with a click. BBQ Pro also displays the current block count for each firewall rule, like this.

Uninstalling

This plugin cleans up after itself. All plugin settings will be removed from your database when the plugin is uninstalled via the Plugins screen.

Like the plugin?

If you like BBQ, please take a moment to give a 5-star rating. It helps to keep development and support going strong. Thank you!

常見問題集

How to test that the plugin is working?

To test that the plugin is working, you can request any of the blocked patterns. For example, visit your site’s homepage and enter the following URL:

https://example.com/eval(

Replace example.com with your site’s actual domain. If BBQ is active, the request for that URL will be blocked (with a “403 Forbidden” status). This means the plugin is working properly. You can test other patterns as well. To view all the patterns blocked by BBQ, look at the function bbq_core() located in block-bad-queries.php.

Do you offer any other security plugins?

Yes, three of them:

Pro versions with more features available at Plugin Planet.

Do I need to do anything else for BBQ to work?

Nope, just install and relax knowing that BBQ is protecting your site from bad URL requests.

Where are the plugin settings?

No settings needed for BBQ! Everything is done automatically behind the scenes. Zero configuration required. The free version of BBQ is strictly plug-n-play, set-it-and-forget-it, with no settings to configure whatsoever. Just install, activate, and enjoy better security and robust protection against malicious requests. The Pro version of BBQ is just as fast and simple to use, but is much more powerful and includes robust settings to customize and fine-tune your firewall.

BBQ 免費版本是否與 Wordfence 相容?

Does it makes sense to use both? Yes BBQ free and BBQ Pro are both compatible with any plugin written according to the WP API. And yes, there is benefit to using BBQ with any other security plugin, including Wordfence. They protect against different threats, so using both means you are extra secure.

Does BBQ make changes to my .htaccess file?

Absolutely not. Unlike other security/firewall plugins, neither BBQ (free version) nor BBQ Pro make any changes to any .htaccess file.

Does BBQ make any changes to my WP database?

No, the free version of BBQ operates as each page is loaded; it does not make any changes whatsoever to the WP database.

Does BBQ block malicious strings included in arrays?

Yes, BBQ scans any arrays that are included in the URI request. If any matching patterns are found, the request is blocked.

My PHP scanner/checker plugin says there is an error?

For example, if your PHP/plugin scanner reports something like, “found 0x3c62723e which is bad.” Normally you would not want to find such bad strings of code, but there is an exception for security plugins. Think about it: in order to block some nasty string, BBQ must know about it. So each bad string that is blocked by BBQ is included in the plugin “blacklist”. That means, when some PHP scanner looks at BBQ and finds some known bad strings, it just means that the scanner has discovered BBQ’s list of blocked terms. In other words, BBQ contains static strings of non-functional text, in order to match and block malicious requests to your site. I hope this makes sense, feel free to contact me if I may provide any further infos.

Do I need WordPress to run BBQ?

Nope! BBQ is available in the following flavors:

So you can check out the Standalone PHP Script for sites that are not running WordPress.

Can I use BBQ and 7G/8G Firewall at the same time?

Full question: “Except most of the rules overlapping, is it counter productive (site slowing down for example, potential conflicts, bugs) or is there any risks using 7G/8G Firewall + BBQ at the same time?”

Answer: It’s fine to run both BBQ and 7G/8G Firewall at the same time. Both firewalls are super fast, so they won’t slow things down. In other words the two firewalls play well together. The only downside is that some of the rules will be redundant, but there should be no negative impact on performance. The upside is that you get extra protection when using both, as there are variations in the firewall rules and patterns, etc.

My PHP checker found something?

If you are using some PHP checker that’s reporting an error or bad string in BBQ, it’s a false positive and safe to ignore. Why? Because the PHP checker is finding the static strings/patterns that BBQ uses to identify and block bad requests. In other words, your PHP checker is finding a static string thinking it is live code. It’s not. If possible, please take a moment to report this to the developers of your PHP checker. They should be happy to improve the accuracy and quality of their plugin. More info.

如何啟用記錄功能?

使用者可以使用免費的附加元件在 BBQ 設定頁面顯示遭到封鎖的全部要求。這份官方指南會說明相關設定方式。

此外,BBQ 能進行組態以記錄每一個封鎖要求的符合模式。啟用符合記錄功能後,BBQ 會在網站的預設錯誤記錄中新增記錄項目。如需啟用符合記錄功能,請使用免費的自訂外掛

請注意,BBQ Pro 會顯示每一項防火牆規則目前封鎖的數量 (範例螢幕擷圖)。相關處理全部自動化,不需要任何撰寫程式碼的能力 🙂

Got a question?

Send any questions or feedback via my contact form.

使用者評論

2024 年 4 月 18 日
A fantasic plugin, works as expected. I upgraded to a pro licence to support the developer, Jeff. An understanding and approachable guy, quick to respond to queries and offer help where he can. A pro licence is a small price to pay to help support the developer, and for the rock-solid plugin he’s developed over the years, it’s a no-brainer. Look no further. It’s a wise investment for your website. Bloat free, good support, and it works better than any other of the weaker plugins out there, I’ve tried them all. Thanks Jeff, may your life be prosperous and magical.
2024 年 3 月 23 日
I have been using BBQ in conjunction with Jeff’s Blackhole for Bad Bots plugin for over 5 years and have successfully fended off hundreds of attacks. Keep it up, Jeff!
2024 年 3 月 7 日
I install this plugin on all of my WP client sites, along with Jeff’s Blackhole for Bad Bots. Thank you, Jeff!
閱讀全部 136 則使用者評論

參與者及開發者

以下人員參與了開源軟體〈BBQ Firewall – 快速、功能強大的安全性防火牆〉的開發相關工作。

參與者

〈BBQ Firewall – 快速、功能強大的安全性防火牆〉外掛目前已有 14 個本地化語言版本。 感謝全部譯者為這個外掛做出的貢獻。

將〈BBQ Firewall – 快速、功能強大的安全性防火牆〉外掛本地化為台灣繁體中文版

對開發相關資訊感興趣?

任何人均可瀏覽程式碼、查看 SVN 存放庫,或透過 RSS 訂閱開發記錄

變更記錄

If you like BBQ, please take a moment to give a 5-star rating. It helps to keep development and support going strong. Thank you!

2024/03/06

  • Updates plugin settings page
  • Updates default translation template
  • Improves plugin docs/readme.txt
  • Tests on WordPress 6.5 (beta)

Full changelog @ https://plugin-planet.com/wp/changelog/block-bad-queries.txt