HSArticle Login Math Verification
| 开发者 | hsarticle |
|---|---|
| 更新时间 | 2026年9月15日 13:16 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
HSArticle Login Math Verification protects your WordPress login page from bots and brute-force attacks using a simple math question. No Google reCAPTCHA, no Cloudflare, no API keys required.
Features
- Math captcha (e.g. "8 + 5 = ?") on the login page
- Answer signed directly into the form token, no server-side storage or PHP sessions needed
- Beautiful light and dark-themed login page design
- Customizable accent color with live preview
- Enable/disable toggle from admin settings
- Login attempt stats (passed vs. blocked) in the admin dashboard
- Lightweight — no external scripts loaded on the front end
安装:
- Upload the
hsarticle-login-math-verificationfolder to/wp-content/plugins/ - Activate the plugin from the Plugins menu in WordPress
- Go to Settings → Login Math Verification to configure
常见问题:
Does this require any API keys?
No. Everything runs on your WordPress server using PHP. The captcha answer is signed into a token embedded in the login form, so there is nothing stored on the server to look up.
Will this slow down my site?
No. The plugin only loads on the login page and admin settings page.
What if the captcha expires?
Each captcha token is valid for 10 minutes. If it expires, the user just needs to refresh the login page.
What happens when I uninstall the plugin?
All plugin settings are automatically cleaned from your database when you delete the plugin via the WordPress admin, including any leftover captcha data from older versions.
更新日志:
1.0.3
- Captcha no longer relies on WordPress transients for storing the answer
- Fixes "incorrect answer" errors on sites where page caching, a CDN, or a persistent object cache prevented the transient from being read back correctly
- Answer is now signed directly into the form token (HMAC), verified with no server-side lookup
- Plugin renamed to HSArticle Login Math Verification with new slug hsarticle-login-math-verification
- All prefixes updated from slc_ to almv_ throughout
- Inline CSS moved to wp_add_inline_style() — no more raw style tags
- Inline JS moved to wp_add_inline_script() — no more raw script tags
- Google Fonts loaded via wp_enqueue_style() on both login and admin pages
- Stat counters (passed/blocked) now increment correctly on each login attempt
- All text domain references updated to hsarticle-login-math-verification
- Initial release