Linux 软件免费装
Banner图

FBS Secure Optimize – Speed Optimization, Security Headers & Malware Scanner

开发者 fazlebari
更新时间 2026年10月31日 17:56
PHP版本: 7.4 及以上
WordPress版本: 7.1
版权: GPLv2 or later
版权网址: 版权信息

标签

performance security malware-scanner security-headers database-cleanup

下载

1.0.1 1.0.0 1.0.2 2.0.0

详情介绍:

FBS Secure Optimize (engineered by FBS Fusion) is a modern, lightweight performance and security suite built around 6 Independent Zero-Overhead Modules. Most sites don't need bloated, all-or-nothing plugins that slow down wp-admin or clash with existing caching layers. With FBS Secure Optimize, every engine has its own 1-Click Master Toggle in the Module Control Center: 6 Independent Modules Included Free 1. Asset & Core Web Vitals Optimizer Boost Lighthouse Performance and Largest Contentful Paint (LCP) without jQuery bloat or fragile script bundling: Unlock Active Defense with FBS Secure Optimize Pro Need real-time attack blocking and 1-click threat eradication? FBS Secure Optimize Pro extends the free plugin with 5 additional independent modules: External Services When an administrator manually clicks Run 6-Layer Deep Scan inside wp-admin (or enables scheduled scans in Pro), the plugin connects to the official public WordPress.org Core Checksums API (https://api.wordpress.org/core/checksums/1.0/) to fetch official MD5 file hashes for your installed core version and locale.

安装:

  1. In your dashboard, go to Plugins → Add New, search for FBS Secure Optimize, and click Install Now (or upload the fbs-secure-optimize folder to /wp-content/plugins/).
  2. Click Activate.
  3. Open FBS Optimize → Control Center from the left admin menu.
  4. Toggle on the exact speed and security modules your site needs:
  5. Already using a page-caching plugin? Keep Database & Autoload Cleaner, HTTP Security Headers, Login Shield, WP Hardening, and 6-Layer Malware Scanner enabled, and toggle Asset Optimizer off if your cache plugin already handles lazy loading.
  6. Open Headers & Hardening and click 1-Click Shield wp-content/uploads/ to block PHP execution in media directories.
  7. Open 6-Layer Malware Scanner and click Run 6-Layer Deep Scan to establish a clean security baseline.

屏幕截图:

  • **Speed & Database Optimization** — LCP-safe native lazy loading (`fetchpriority="high"`), JS deferring, Heartbeat control, 1-click database cleanup, and Top 5 Heaviest Autoloaded `wp_options` Inspector.
  • **Headers, Core Hardening & Login Shield** — Toggleable Grade A HTTP security headers, 1-click `wp-content/uploads/` PHP execution shield, XML-RPC & REST `/users` hardening, and brute-force IP lockouts.
  • **6-Layer Malware, Core Checksum & Hidden-Admin Scanner** — Official WordPress.org MD5 checksum verification, root/uploads PHP shell inspection, safe code preview, and stealth `pre_user_query` hidden-admin detection.
  • **WAF Firewall, 429 Rate Limiter & Admin Whitelist Guard (Pro)** — Optional active firewall, anti-bot flood rate limiting, real-time capability guard, and Custom CSP header builder.
  • **Meet The Author & Engineering Studio** — Engineered by Fazle Bari & FBS Fusion following strict WordPress Coding Standards (WPCS).

升级注意事项:

2.0.0 Major v2.0 upgrade! Adds 6 Independent Zero-Overhead Module Toggles with Auto-Hide UI, 6-Layer Malware & Hidden-Admin Scanner, 1-Click Uploads PHP Shield, Autoload Bloat Inspector, and LCP-safe lazy loading.

常见问题:

Will FBS Secure Optimize conflict with WP Rocket, LiteSpeed Cache, or Cloudflare?

No. Every engine is controlled by an Independent Module Toggle in the Module Control Center. If another plugin already handles script deferring or lazy loading, simply toggle Asset & Bloat Optimizer off—disabled modules are bypassed at boot and register zero frontend hooks, while you continue enjoying Database Cleanup, Autoload Inspection, Security Headers, Login Protection, Core Hardening, and the 6-Layer Malware Scanner.

If I disable a module, does it hide those settings in the dashboard?

Yes. Turning any module off in Module Control Center immediately hides its configuration panel (and hides the corresponding top navigation tab if all modules in that group are disabled) while safely preserving your saved preferences in case you re-enable it later.

Is the Asset Optimizer safe for eCommerce checkouts and LCP images?

Yes. Unlike aggressive lazy-loaders that delay your top hero banner and hurt Largest Contentful Paint (LCP), FBS Secure Optimize automatically skips lazy-loading on the first image in your content and adds fetchpriority="high". Likewise, JavaScript deferring automatically excludes jQuery core and sensitive cart/checkout pages.

Will enabling HTTP Security Headers break external fonts, analytics, or embeds?

No. The free HTTP Security Headers module ships with safe, standards-compliant defaults (X-Content-Type-Options: nosniff, X-Frame-Options: SAMEORIGIN, Referrer-Policy, and Permissions-Policy) that never block third-party CSS, fonts, or payment scripts. Every header is individually toggleable.

How does the Stealth Hidden-Admin Detector work?

Sophisticated malware often creates a backdoor administrator account and hooks pre_user_query or users_list_table_query_args so the rogue account is completely invisible on your Users → All Users screen. Layer 6 of our scanner cross-checks standard user queries against raw usermeta capability rows in MySQL to expose any hidden or stealth-elevated administrator immediately.

Does the free Malware Scanner delete files automatically?

Never automatically. In the Free edition, the 6-Layer Scanner performs a 100% safe, read-only forensic audit and lets you inspect suspicious code inside the Safe File Snippet Preview modal so core or custom files are never accidentally deleted. One-click deletion and auto-disarming are optional tools available in Pro.

What happens if I uninstall FBS Secure Optimize?

Uninstalling the plugin through the Plugins screen cleanly removes its saved options, clears scheduled cleanup cron hooks, and drops its custom fbsseop_login_attempts database table—leaving zero orphaned clutter behind.

更新日志:

2.0.0 1.0.2 1.0.1 1.0.0