Baskerville AI Security
| 开发者 |
equalitie
burdianov mazhurin |
|---|---|
| 更新时间 | 2026年4月3日 19:17 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPL v3 |
详情介绍:
Baskerville is a comprehensive WordPress security plugin that protects your site from malicious bots, AI crawlers, and unwanted traffic using multiple detection methods.
Key Features:
- AI Bot Detection - Intelligent classification of bots vs. humans with configurable score thresholds
- GeoIP Access Control - Block or allow traffic by country (whitelist/blacklist modes)
- Cloudflare Turnstile - CAPTCHA challenge for borderline bot scores with precision analytics
- Browser Fingerprinting - Advanced client-side fingerprinting (Canvas, WebGL, Audio)
- Honeypot Detection - Hidden links to catch AI crawlers
- Real-Time Analytics - Live feed, traffic statistics, and Turnstile precision metrics
- Under Attack Mode - Emergency mode to challenge all visitors during attacks
- IP Whitelist - Bypass firewall for trusted IPs
- Form Protection - Protect login, registration, and comment forms with Turnstile
- 0-39: Likely human (allowed)
- 40-70: Borderline (optional Turnstile challenge)
- 71-100: Likely bot (blocked)
- Minimal overhead (~1ms with page cache, ~30-50ms without)
- APCu + file-based caching for GeoIP lookups
- Compatible with all major caching plugins
安装:
- Upload the plugin files to
/wp-content/plugins/baskerville/or install via WordPress admin - Activate the plugin through the 'Plugins' menu
- Go to Settings > Baskerville to configure
- Install MaxMind GeoLite2 database for GeoIP features (one-click installer in Settings)
- (Optional) Configure Cloudflare Turnstile keys for CAPTCHA challenges
常见问题:
How do I set up GeoIP blocking?
Go to Settings > Baskerville > GeoIP, install the MaxMind database, then configure your country whitelist or blacklist.
How does Turnstile work?
Visitors with borderline bot scores (default 40-70) are shown a Cloudflare Turnstile challenge. If they pass, they're allowed through. This catches bots while minimizing friction for real users.
What is Under Attack Mode?
Emergency mode that shows Turnstile challenge to ALL visitors. Use this when your site is under active attack.
Will this slow down my site?
With page caching enabled, overhead is near zero. Without caching, expect ~30-50ms overhead per request.
更新日志:
1.0.2
- Replaced hardcoded Ajax/REST paths with wp_doing_ajax(), REST_REQUEST and rest_get_url_prefix().
- Replaced direct require_once of class-pclzip.php with WordPress unzip_file() API.
- Replaced WP_CONTENT_DIR usage with wp_upload_dir() for GeoIP database paths.
- Changed REST /fp permission_callback to __return_true (intentionally public endpoint).
- Made nonce validation mandatory in REST fingerprint handler (fail-early on missing nonce).
- Added nonce and current_user_can('manage_options') checks to debug widget toggle.
- Removed DONOTCACHEPAGE global constant definition.
- Removed unsanitized $_COOKIE processing from debug headers; now checks only specific plugin cookies.
- Documented MaxMind GitHub library downloads in readme External Services section.
- Removed external URL from test User-Agent strings.
- Added support for the Deflect GeoIP database.
- Made all hardcoded text fully translatable.
- Renamed the plugin to Baskerville AI Security.
- Moved all inline scripts and styles to proper wp_enqueue_script() / wp_enqueue_style() usage.
- Updated Chart.js to v4.5.1.