ArkHost Security Pack
| 开发者 | arkhost |
|---|---|
| 更新时间 | 2026年2月20日 02:23 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
A complete security plugin that's actually free. No "pro" version, no nag screens, no made-up threat statistics.
Login Protection
- Blocks IPs after failed login attempts
- Custom login URL (hides wp-login.php)
- Hides wp-admin from logged-out users
- Honeypot field for bots
- Hides login errors (stops username enumeration)
- Email alerts for admin logins from new IPs
- Country/IP restrictions on login page
- Whitelist and blacklist
- Auto-blacklist after repeated lockouts
- IPv4, IPv6, CIDR supported
- Block countries
- Uses free IP2Location LITE database
- One-click download
- Disable XML-RPC
- Disable dashboard file editing
- Disable application passwords
- Restrict REST API to logged-in users
- Remove WordPress version
- Block user enumeration (?author=1 and REST API)
- Disable pingbacks/trackbacks
- TOTP (Google Authenticator, Authy, etc.)
- Backup codes
- Enforce for admins
- Checks WordPress core files against official checksums
- Daily scans
- Email alerts on changes
- Scans plugins, themes, uploads
- Pattern-based detection
- Quarantine suspicious files
- Weekly scans
- Login attempts, lockouts, blocks
- IP, country, username, timestamp
- Configurable retention
- CSV export
- Export/import settings
- Force logout all users
- Test email
- Delete readme.html/license.txt
- WordPress.org API (core file checksums)
- IP2Location (database download, only when you click it)
安装:
- Upload the plugin files to
/wp-content/plugins/arkhost-security-pack/ - Activate the plugin through the 'Plugins' screen
- Configure under the Security menu
屏幕截图:
常见问题:
Is there a premium version?
No. This is the complete plugin.
Will it slow my site?
No. Checks run on login and admin access, not frontend page loads.
I locked myself out
Connect via FTP/SSH and rename the plugin folder. Log in normally. Fix your settings.
Does geo-blocking work without the database?
No. Download the free IP2Location LITE database from the plugin settings.
Can I use this with other security plugins?
Possible but likely to cause conflicts. We recommend using one security plugin at a time.
更新日志:
1.1
- Fixed: Custom login URL form submission redirecting to 404 page
- Fixed: URL rewrite filters not being registered before login page render
- Initial release