DominoGuard Security

外掛說明

DominoGuard is a focused, minimalistic security solution for WordPress. Designed to be fast and lightweight, it provides the essential security features every website needs with a clean configuration.

Key Features

• Limit Login Attempts: Automatically block IPs for 15 minutes after 5 continuous failed login attempts, keeping brute-force attacks at bay.
• Email Two-Factor Authentication (2FA): Add an extra layer of security for Administrators. When enabled, logging in requires a 6-digit code sent to the admin’s email address.
• Brute Force Protection: Easily disable XML-RPC, a common vector for brute force and pingback attacks.
• Block User Enumeration: Prevent attackers from discovering your administrator username by blocking /?author=N query scans.
• Basic Firewall: A lightweight WAF that silently blocks simple directory traversal attempts (../) and basic malicious query strings commonly found in automated SQL injections.

Why DominoGuard?

Many security plugins suffer from excessive features that can impact performance. DominoGuard focuses on delivering efficient performance by utilizing standard WordPress functions, keeping your site secure with minimal resource usage.