WebDmitriev Protection

Від автора webdmitriev

Опис

WebDmitriev Protection is a compact and efficient security solution for WordPress sites:

Brute-Force Protection: Limits failed login attempts on wp-login.php.
Entry Point Security: Disables XML-RPC and prevents user enumeration via REST API and author query parameters.
File Integrity Guard: Monitors critical files (.htaccess and wp-config.php) for unauthorized changes.
Uploads Directory Guard: Automatically blocks PHP execution inside /wp-content/uploads/.
Lightweight WAF: Filters dangerous URL parameters (SQLi/XSS), blocks malicious User-Agent signatures, and manages IP blacklists.

Upload the webdmitriev-protection folder to the /wp-content/plugins/ directory.
Activate the plugin through the ‘Plugins’ menu in WordPress.
Go to ‘WD Protection’ in the admin dashboard to configure settings and view threat logs.

How does the plugin block brute-force attacks?: It tracks failed login attempts by IP address. If an IP exceeds 5 failed attempts within 15 minutes, access to the login form is temporarily blocked.
What happens if wp-config.php or .htaccess is edited?: The plugin calculates MD5 hashes of critical files. If a modification is detected, a notice appears in the admin panel allowing you to inspect and approve the new file state.

Для цього плагіна немає відгуків.

“WebDmitriev Protection” — проект з відкритим вихідним кодом. В розвиток плагіну внесли свій вклад наступні учасники:

Перегляньте код, перегляньте сховище SVN або підпишіться на журнал розробки за допомогою RSS.

No reviews have been submitted yet.