DCI Admin Security
| 开发者 | dreamcodeinfotech |
|---|---|
| 更新时间 | 2026年10月13日 20:11 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
安装:
- Upload the plugin ZIP from Plugins > Add New > Upload Plugin.
- Activate DCI Admin Security.
- Open Settings > DCI Admin Security.
- Choose whether to enable IP blocking. If enabled, add at least one IP address or CIDR range that should be allowed to reach the protected login/admin area.
- Set the custom login slug. The new URL is applied automatically after saving.
- Save the General settings and open the new custom login URL to test it.
- If you enabled IP blocking, verify access from an allowed IP before relying on it in production.
- Configure Email OTP, CAPTCHA, rate limiting and alerts as required.
更新日志:
1.0.0
- Resolved Plugin Check database-query and nonce warnings.
- Sanitized emergency fallback-code input.
- Added explicit versions to CAPTCHA provider scripts.
- Kept IP allowlist, email OTP, and WordPress.org compatibility fixes from 1.0.0.
- Removed the obsolete TOTP/two-factor authentication implementation and related files.
- Fixed WordPress coding-standard issues in IP handling, AJAX actions, CAPTCHA output and custom database queries.
- Added proper login CAPTCHA script enqueueing and a CAPTCHA nonce.
- Improved PHP 7.4 compatibility by removing PHP 8-only string helper usage.
- Updated documentation and feature list for the email OTP implementation.
- Improved IP allowlist matching and localhost development controls.
- Added IP diagnostics and test tools.
- Added explicit trusted proxy handling for
X-Forwarded-For. - Normalized IPv4-mapped IPv6 client addresses.
- Added brute-force rate limiting, CAPTCHA, security logging and alerts.
- Added administrator email OTP verification.
- Initial release with IP allowlist and custom login URL protection.