DawsonyWeb - Security Shield
| 开发者 | dawsonyweb |
|---|---|
| 更新时间 | 2026年5月26日 16:45 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
DawsonyWeb Security Shield protects your WordPress site from comment spam and unauthorised API access.
Comment Protection
- Master switch to completely disable all comments (form, REST API, XML-RPC, feeds)
- Invisible honeypot field to trap bots
- Minimum comment length enforcement
- Block all links or cap links per comment
- Require login to comment
- Keyword/phrase blocklist
- Disable XML-RPC entirely (removes X-Pingback header too)
- Hide
/wp/v2/usersendpoint to prevent username harvesting - Require authentication for all REST API requests
- Optionally disable the REST API completely
- Block author enumeration via
/?author=N
- Per-IP comment rate limiting (configurable max and time window)
- IP address blocklist — blocked IPs receive a 403 on any front-end request
- Rolling activity log (last 200 events)
安装:
- Upload the
dawsonyweb-security-shieldfolder to/wp-content/plugins/. - Activate the plugin through the Plugins menu in WordPress.
- Go to Security Shield in the admin menu to configure.
更新日志:
1.0.1
- Compatibility: tested up to WordPress 7.0.
- Initial release.