Gatorio
| 开发者 | sichtelement |
|---|---|
| 更新时间 | 2026年4月10日 20:51 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Gatorio is a minimal WordPress security plugin that protects login endpoints against brute-force attacks.
The plugin follows a strict privacy-first and KISS (keep it simple) philosophy.
No dashboards.
No tracking.
No unnecessary complexity.
Just effective login protection.
Unlike many plugins, Gatorio blocks login attempts before authentication begins.\
This prevents bypasses caused by plugins that override the default WordPress login flow.
安装:
- Upload the plugin folder to
/wp-content/plugins/ - Activate the plugin
- Protection starts automatically
常见问题:
Does the plugin store IP addresses?
No. Gatorio hashes IP addresses using SHA-256 and does not store raw IPs.
Does it require configuration?
No. The plugin works automatically without setup.
Does it work with WooCommerce or custom login forms?
Yes. Gatorio blocks login attempts at request level, independent of the authentication system.
Does it slow down the login?
A minimal delay is applied to slow down automated attacks. Source code: https://codeberg.org/Sichtelement/gatorio
更新日志:
1.1
- Added translators comment for localized strings with placeholders
- Fixed WordPress Plugin Check error (MissingTranslatorsComment)
- Added proper handling for nonce verification warnings (via phpcs ignore)
- Improved compatibility with WordPress and external login flows
- Minor security and code consistency improvements
- Added pre-authentication request blocking via init hook
- Implemented universal login detection (WordPress, WooCommerce, custom forms)
- Fixed brute-force bypass caused by plugin-based authentication overrides
- Improved reliability across different login systems
- Added session-level lockout fallback via init
- Improved compatibility with external authentication flows
- Adjusted authenticate hook priority
- Lockout stability improvements
- Initial public release