Title: Delta Dev Comment Lockdown Author: Delta Dev Published: 2026 年 8 月 28 日 Last modified: 2026 年 8 月 28 日 --- 搜尋外掛 ![](https://ps.w.org/delta-dev-comment-lockdown/assets/banner-772x250.png?rev=3669757) ![](https://ps.w.org/delta-dev-comment-lockdown/assets/icon-256x256.png?rev=3669757) # Delta Dev Comment Lockdown 由 [Delta Dev](https://profiles.wordpress.org/deltadevbd/) 開發 [下載](https://downloads.wordpress.org/plugin/delta-dev-comment-lockdown.1.0.0.zip) * [詳細資料](https://tw.wordpress.org/plugins/delta-dev-comment-lockdown/#description) * [使用者評論](https://tw.wordpress.org/plugins/delta-dev-comment-lockdown/#reviews) * [安裝方式](https://tw.wordpress.org/plugins/delta-dev-comment-lockdown/#installation) * [開發資訊](https://tw.wordpress.org/plugins/delta-dev-comment-lockdown/#developers) [技術支援](https://wordpress.org/support/plugin/delta-dev-comment-lockdown/) ## 外掛說明 Delta Dev Comment Lockdown is a security-focused comment attack-surface hardening plugin developed by Delta Dev for WordPress sites that do not need the native comment system. Instead of only hiding a comment form, the plugin applies multiple independent WordPress- native protection layers. It closes public commenting, blocks direct and core comment creation paths, removes core REST comment routes, disables comment-related XML-RPC/ pingback surfaces, blocks comment feeds, and can remove related admin surfaces. It does not modify WordPress core files and it does not delete existing comments. Default protections include: * Forces comments closed on the public site. * Hides existing comments without deleting them. * Blocks normal WordPress comment submissions with HTTP 403. * Stops new comments in the core comment approval pipeline. * Removes and blocks the core REST API `/wp/v2/comments` endpoints. * Disables pingbacks and trackbacks. * Removes WordPress XML-RPC comment and pingback methods. * Removes the `X-Pingback` response header. * Disables comment-feed discovery links and direct comment-feed requests. * Removes Comments and Trackbacks support from registered post types. * Hides the Comments admin menu, toolbar item, and Recent Comments dashboard widget. All protections can be configured from **Settings > Comment Lockdown**. Strict protection is enabled by default. #### Security design * Uses WordPress core hooks and APIs instead of modifying core files. * Uses a defense-in-depth approach so disabling a theme comment form is not the only control. * Settings are restricted to administrators with `manage_options`. * Settings are saved through the WordPress Settings API and sanitized to strict boolean values. * Admin output is escaped before rendering. * No arbitrary code execution, file manager, remote executable downloads, telemetry, licensing gate, or external service is included. #### Privacy Delta Dev Comment Lockdown does not collect, store, transmit, or sell personal data. It does not use analytics, telemetry, cookies, external APIs, or third-party services. #### Compatibility note Some plugins use the native WordPress comment system for other features. WooCommerce product reviews are a common example. Enabling all protections can disable those comment-based review flows. ## 安裝方式 1. In WordPress, go to **Plugins > Add Plugin > Upload Plugin**. 2. Upload the Delta Dev Comment Lockdown ZIP file and activate the plugin. 3. Open **Settings > Comment Lockdown**. 4. Keep all options enabled for a strict site-wide comment shutdown, or adjust individual protections as needed. ## 常見問題集 ### Does the plugin delete existing comments? No. Existing comments remain in the WordPress database. They can be hidden publicly while the plugin is active. ### What happens after deactivation? All runtime protections stop. Existing WordPress comment data is left unchanged. ### Does this block REST API comments? Yes. The plugin removes the core comment endpoints and also blocks matching requests as a defense-in-depth measure. ### Does it disable XML-RPC completely? No. It removes comment and pingback XML-RPC methods while leaving unrelated XML- RPC functionality available for plugins or services that may still need it. ### Does it affect WooCommerce product reviews? It can. WooCommerce product reviews use the WordPress comment system. If you need product reviews, do not enable protections that conflict with your review workflow. ### Does the plugin send data to Delta Dev? No. The plugin has no telemetry, tracking, external API calls, or phone-home functionality. ## 使用者評論 這個外掛目前沒有任何使用者評論。 ## 參與者及開發者 以下人員參與了開源軟體〈Delta Dev Comment Lockdown〉的開發相關工作。 參與者 * [ Delta Dev ](https://profiles.wordpress.org/deltadevbd/) [將〈Delta Dev Comment Lockdown〉外掛本地化為台灣繁體中文版](https://translate.wordpress.org/projects/wp-plugins/delta-dev-comment-lockdown) ### 對開發相關資訊感興趣？ 任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/delta-dev-comment-lockdown/)、 查看 [SVN 存放庫](https://plugins.svn.wordpress.org/delta-dev-comment-lockdown/)， 或透過 [RSS](https://plugins.trac.wordpress.org/log/delta-dev-comment-lockdown/?limit=100&mode=stop_on_copy&format=rss) 訂閱[開發記錄](https://plugins.trac.wordpress.org/log/delta-dev-comment-lockdown/)。 ## 變更記錄 #### 1.0.0 * Initial public release. * Added frontend comment shutdown. * Added direct submission and core comment insertion protection. * Added REST API comment blocking. * Added pingback, trackback, XML-RPC, and comment-feed protection. * Added configurable admin UI controls. * Added privacy-friendly, no-telemetry defaults. ## 中繼資料 * 版本 **1.0.0** * 最後更新 **1 週前** * 啟用安裝數 **少於 10 次** * WordPress 版本需求 ** 6.0 或更新版本 ** * 已測試相容的 WordPress 版本 **7.1** * PHP 版本需求 ** 7.4 或更新版本 ** * 語言 * [English (US)](https://wordpress.org/plugins/delta-dev-comment-lockdown/) * 標籤: * [disable comments](https://tw.wordpress.org/plugins/tags/disable-comments/)[hardening](https://tw.wordpress.org/plugins/tags/hardening/) [pingbacks](https://tw.wordpress.org/plugins/tags/pingbacks/)[rest-api](https://tw.wordpress.org/plugins/tags/rest-api/) * [進階檢視](https://tw.wordpress.org/plugins/delta-dev-comment-lockdown/advanced/) ## 評分 這個項目尚無任何評論記錄。 [撰寫評分](https://wordpress.org/support/plugin/delta-dev-comment-lockdown/reviews/#new-post) [查看全部使用者評論](https://wordpress.org/support/plugin/delta-dev-comment-lockdown/reviews/) ## 參與者 * [ Delta Dev ](https://profiles.wordpress.org/deltadevbd/) ## 技術支援 使用者可在技術支援論壇提出意見反應或使用問題。 [檢視技術支援論壇](https://wordpress.org/support/plugin/delta-dev-comment-lockdown/)