Linux 软件免费装

Bot Lockout

开发者 Kognetiks
更新时间 2025年7月29日 21:23
WordPress版本: 6.8.2
版权: GPLv3 or later
版权网址: 版权信息

标签

captcha security bot protection anti-scraping javascript challenge

下载

1.0.0

详情介绍:

Bot Lockout is a security plugin that implements a lightweight cryptographic challenge system to distinguish between real browsers and automated bots. Unlike traditional CAPTCHA systems, it uses JavaScript-based cryptographic operations that are easy for humans but difficult for most bots to solve. Key Features How It Works
  1. Initial Request: When a visitor accesses your site, the plugin checks for a valid challenge token
  2. JavaScript Challenge: If no token exists, a cryptographic challenge is presented
  3. Token Generation: The challenge combines the current date with the user agent string and creates a SHA-256 hash
  4. Secure Storage: The hash is base64 encoded, truncated, and stored as a secure cookie
  5. Validation: Subsequent requests are validated against the stored token
Security Features Multi-Site Support Bot Lockout supports WordPress Multi-Site installations with both network-wide and site-specific configurations:

安装:

Single Site Installation From WordPress Plugin Directory (Recommended)
  1. Go to Plugins > Add New in your WordPress admin
  2. Search for "Bot Lockout"
  3. Click Install Now and then Activate
Manual Installation
  1. Download the plugin ZIP file
  2. Go to Plugins > Add New > Upload Plugin in your WordPress admin
  3. Choose the ZIP file and click Install Now
  4. Click Activate Plugin
FTP Installation
  1. Extract the plugin files
  2. Upload the bot-lockout folder to /wp-content/plugins/
  3. Go to Plugins in your WordPress admin
  4. Find "Bot Lockout" and click Activate
Multi-Site Installation Network Activation (Recommended)
  1. Go to My Sites > Network Admin > Plugins in your WordPress admin
  2. Find "Bot Lockout" and click Network Activate
  3. Configure settings at My Sites > Network Admin > Settings > Bot Lockout
Site-Specific Activation
  1. Go to My Sites > Network Admin > Plugins in your WordPress admin
  2. Find "Bot Lockout" and click Enable for specific sites
  3. Configure settings at Settings > Bot Lockout on each individual site

屏幕截图:

  • Blocked Attempts Logs
  • Test challenge
  • Support

升级注意事项:

1.0.0 Initial release of Bot Lockout plugin.

常见问题:

Does this plugin block legitimate users?

No, the plugin is designed to be transparent to legitimate users. It only presents a challenge once per day per browser, and the challenge is solved automatically via JavaScript.

What happens if JavaScript is disabled?

Users with JavaScript disabled will be blocked. This is by design as the protection relies on JavaScript execution to distinguish between real browsers and bots.

Can I whitelist specific bots?

Yes, you can add user agent strings for trusted bots like Googlebot, Bingbot, and other search engines in the plugin settings.

Does this affect site performance?

No, the plugin is designed to be lightweight. The JavaScript challenge runs only once per day per browser, and normal operation doesn't require database queries.

Can I exclude specific pages?

Yes, you can specify pages or paths that should be excluded from protection, such as API endpoints, RSS feeds, or sitemap files.

Is this compatible with caching plugins?

Yes, the plugin works with most caching plugins. The challenge is presented before the cached content is served.

Does this work with CDNs?

Yes, the plugin is compatible with CDNs. The challenge is processed on your server before content is served through the CDN.

Can I customize the block message?

Yes, you can customize the block message and add custom CSS to match your site's design.

How do I test if the plugin is working?

The plugin includes a built-in test tool in the admin settings that allows you to verify the challenge system works correctly.

What if I need to bypass the protection temporarily?

You can add your IP address to the whitelist in the plugin settings, or temporarily disable the plugin.

更新日志:

1.0.0