Title: Rooted Dev Studio Security Toolkit Author: bigdawgdad2185 Published: 2026 年 8 月 29 日 Last modified: 2026 年 8 月 29 日 --- 搜尋外掛 ![](https://ps.w.org/rooted-dev-studio-security-toolkit/assets/icon-256x256.png? rev=3671852) # Rooted Dev Studio Security Toolkit 由 [bigdawgdad2185](https://profiles.wordpress.org/bigdawgdad2185/) 開發 [下載](https://downloads.wordpress.org/plugin/rooted-dev-studio-security-toolkit.0.2.1.zip) * [詳細資料](https://tw.wordpress.org/plugins/rooted-dev-studio-security-toolkit/#description) * [使用者評論](https://tw.wordpress.org/plugins/rooted-dev-studio-security-toolkit/#reviews) * [安裝方式](https://tw.wordpress.org/plugins/rooted-dev-studio-security-toolkit/#installation) * [開發資訊](https://tw.wordpress.org/plugins/rooted-dev-studio-security-toolkit/#developers) [技術支援](https://wordpress.org/support/plugin/rooted-dev-studio-security-toolkit/) ## 外掛說明 Rooted Dev Studio Security Toolkit provides a transparent baseline for protecting a WordPress website without hiding important behavior behind vague scores or destructive automatic fixes. Features include: * Configurable failed-login limiting with short, per-login-and-IP temporary lockouts. * Administrator controls for reviewing and clearing active Rooted Dev Studio Security Toolkit lockouts. * Time-based two-factor authentication with single-use recovery codes. * A local Security Timeline for important authentication, administration, hardening, and file events. * Hashed origin records without storing raw IP addresses in security events. * Baseline browser security headers. * Reversible theme and plugin editor protection. * Optional XML-RPC authentication restriction. * Optional public REST user endpoint restriction. * Security configuration checks for HTTPS, updates, debug display, administrator access, WordPress salts, and PHP. * Read-only file fingerprinting with expected and unexplained change review. * A bounded, manual suspicious-code scan for selected high-risk PHP patterns. * Email alerts for important software and administrator changes and repeated-login lockouts. * Local retention controls and automatic cleanup. Rooted Dev Studio Security Toolkit does not transmit site data to Rooted Dev Studio or any third party. It does not execute, edit, quarantine, restore, or delete scanned files. A clean scan is not a guarantee that a website is free of malicious code. Rooted Dev Studio Security Toolkit does not replace secure hosting, backups, software updates, or professional incident response. ## 安裝方式 1. Upload the `rooted-security` folder to `/wp-content/plugins/`, or install the ZIP through Plugins > Add New > Upload Plugin. 2. Activate Rooted Dev Studio Security Toolkit. 3. Open Rooted Dev Studio Security Toolkit > Dashboard. 4. Review Rooted Dev Studio Security Toolkit > Settings before enabling compatibility- sensitive options. 5. Configure two-factor authentication from each administrator’s WordPress profile and store recovery codes securely. 6. Create a file-monitor baseline only after confirming the website is in a known- good state. ## 常見問題集 ### Does Rooted Dev Studio Security Toolkit send my site data anywhere? No. Rooted Dev Studio Security Toolkit Free has no telemetry, remote API, account requirement, or external service connection. ### Does the suspicious-code scan prove my website is clean? No. The bounded, read-only scanner looks for selected high-risk PHP patterns in active themes and plugins. Findings require review, and a clean result cannot detect every malware family or hidden compromise. ### Why are XML-RPC and REST user restrictions disabled by default? Those options can affect mobile apps, publishing tools, and integrations. Rooted Dev Studio Security Toolkit keeps compatibility-sensitive controls opt-in. ### Are IP addresses stored? Raw IP addresses are not written to the activity table. Rooted Dev Studio Security Toolkit stores a keyed hash so repeated events can be correlated without retaining the original address. ### Can login protection lock every visitor out of an account? No. Temporary lockouts are tied to the matching login value and the server-observed IP address. Password-reset access remains available, active administrators can clear Rooted Dev Studio Security Toolkit lockouts, and a file-access recovery constant is documented on the Login Protection screen. ### Does Rooted Dev Studio Security Toolkit automatically change or delete suspicious files? No. File monitoring and suspicious-code scanning are review tools. Rooted Dev Studio Security Toolkit does not automatically modify, quarantine, restore, or delete files. ## 使用者評論 這個外掛目前沒有任何使用者評論。 ## 參與者及開發者 以下人員參與了開源軟體〈Rooted Dev Studio Security Toolkit〉的開發相關工作。 參與者 * [ bigdawgdad2185 ](https://profiles.wordpress.org/bigdawgdad2185/) [將〈Rooted Dev Studio Security Toolkit〉外掛本地化為台灣繁體中文版](https://translate.wordpress.org/projects/wp-plugins/rooted-dev-studio-security-toolkit) ### 對開發相關資訊感興趣？ 任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/rooted-dev-studio-security-toolkit/)、 查看 [SVN 存放庫](https://plugins.svn.wordpress.org/rooted-dev-studio-security-toolkit/)， 或透過 [RSS](https://plugins.trac.wordpress.org/log/rooted-dev-studio-security-toolkit/?limit=100&mode=stop_on_copy&format=rss) 訂閱[開發記錄](https://plugins.trac.wordpress.org/log/rooted-dev-studio-security-toolkit/)。 ## 變更記錄 #### 0.2.1 * Renamed the plugin for a distinctive WordPress.org identity. #### 0.2.0 * Added local two-factor authentication and single-use recovery codes. * Added the local Security Timeline and dashboard summary. * Added reversible hardening controls and review history. * Added read-only file fingerprinting and expected-change review. * Added a bounded manual suspicious-code scanner with PHP comment filtering. * Added windowed login limiting, administrator lockout recovery, timeline events, and anti-flood email alerts. * Expanded privacy, safety-scope, and uninstall cleanup documentation. * Addressed WordPress Plugin Check translation, request-validation, package, and database-query findings. * Corrected translator-comment placement in administrative templates. * Normalized production source-file line endings. ## 中繼資料 * 版本 **0.2.1** * 最後更新 **1 週前** * 啟用安裝數 **少於 10 次** * WordPress 版本需求 ** 6.5 或更新版本 ** * 已測試相容的 WordPress 版本 **7.1** * PHP 版本需求 ** 7.4 或更新版本 ** * 語言 * [English (US)](https://wordpress.org/plugins/rooted-dev-studio-security-toolkit/) * 標籤: * [Activity Log](https://tw.wordpress.org/plugins/tags/activity-log/)[hardening](https://tw.wordpress.org/plugins/tags/hardening/) [login security](https://tw.wordpress.org/plugins/tags/login-security/)[security](https://tw.wordpress.org/plugins/tags/security/) [Security Headers](https://tw.wordpress.org/plugins/tags/security-headers/) * [進階檢視](https://tw.wordpress.org/plugins/rooted-dev-studio-security-toolkit/advanced/) ## 評分 這個項目尚無任何評論記錄。 [撰寫評分](https://wordpress.org/support/plugin/rooted-dev-studio-security-toolkit/reviews/#new-post) [查看全部使用者評論](https://wordpress.org/support/plugin/rooted-dev-studio-security-toolkit/reviews/) ## 參與者 * [ bigdawgdad2185 ](https://profiles.wordpress.org/bigdawgdad2185/) ## 技術支援 使用者可在技術支援論壇提出意見反應或使用問題。 [檢視技術支援論壇](https://wordpress.org/support/plugin/rooted-dev-studio-security-toolkit/)