Injection Guard

开发者	fahadmahmood alianwaar91 invoicepress
更新时间	2025年7月22日 23:41
PHP版本:	7.0 及以上
WordPress版本:	6.8
版权:	GPL2
版权网址:	版权信息

开发者

fahadmahmood
alianwaar91
invoicepress

更新时间

2025年7月22日 23:41

PHP版本:

7.0 及以上

WordPress版本:

6.8

版权:

GPL2

版权网址:

版权信息

详情介绍:

Author: Fahad Mahmood\ Project URI: https://www.androidbubbles.com/extends/wordpress/plugins/injection-guard\ License: GPL v3 Injection Guard is a WordPress plugin designed to block malicious query string attacks and suspicious URL parameters. It logs all incoming attempts, blocks harmful parameters, and adds extra security intelligence to your WordPress admin—like user session tracking and capability audit. The plugin uses the ig_ prefix for database keys and functions, follows WordPress coding standards, and supports multiple languages. It's compatible with pretty permalinks and helps in securing your site from automated bots and manual attacks.

安装:

To install Injection Guard, you will need:

WordPress 3.0 or later
FTP/SFTP or hosting control panel access

屏幕截图:

升级注意事项:

1.2.8 Security Fix: Escaped $_SERVER['REQUEST_URI'] output to prevent Reflected Cross-Site Scripting (XSS) vulnerability in the admin logs tab. 1.2.7 Enhanced security for capability audit with proper nonce validation and admin-only access. 1.2.6 Added user session tracking, logout history, and capability audit with proper prefixing (ig_) and textdomain usage. 1.2.4 Updated version for WordPress. 1.2.3 Updated version for pioneer. 1.2.2 Updated version for vulnerable to Broken Access Control. 1.2.1 Updated version for WordPress. 1.2.0 Bootstrap, FontAwesome and timestamp based log added. 1.1.9 Updating jQuery functions. 1.1.8 Updating FAQs. 1.1.7 Languages added. 1.1.6 Dashboard refined with customers results. 1.1.5 Dashboard introduced for registered users activity regarding orders and logins from different locations. 1.1.4 Sanitized input and fixed direct file access issues. 1.1.3 Updating a few Illegal string offset conditions. 1.1.2 Updating a few Illegal string offset conditions. 1.1.0 Releasing with WP Mechanic free help feature.

常见问题:

Does this plugin help with SEO?

Yes. By preventing invalid URLs from being indexed, it supports clean crawl behavior.

How does it work?

It monitors incoming query strings and blocks those that don't match expected patterns. You can log, block, or analyze attempts.

What if I'm still getting suspicious traffic?

Update to the latest version, use pretty permalinks, and tighten your query parameter policy.

Can I get help with setup or troubleshooting?

Yes. Use the plugin support tab or contact the author via the provided link.

更新日志:

1.2.8

Security Fix: Escaped $_SERVER['REQUEST_URI'] output to prevent Reflected Cross-Site Scripting (XSS) vulnerability in the admin logs tab. [Thanks to WPScan / 22/07/2025].

1.2.7

Enhanced security for capability audit with proper nonce validation and admin-only access.

1.2.6

Added user session tracking, logout history, and capability audit with proper prefixing (ig_) and textdomain usage. [Thanks to Hila / 10/04/2025]

1.2.4

Updated version for WordPress. [05/06/2024]

1.2.3

Updated version for pioneer. [Thanks to alianwaar91][11/05/2023]

1.2.2

Updated version for vulnerable to Broken Access Control. [Thanks to Darius Sveikauskas | Patchstack Alliance overlord][10/05/2023]

1.2.1

Updated version for WordPress. [07/09/2022]

1.2.0

Bootstrap, FontAwesome and timestamp based log added. [Thanks to Team Ibulb Work]

1.1.9

Updating jQuery functions.

1.1.8

Updating FAQs.

1.1.7

Languages added. [Thanks to Abu Usman]

1.1.6

Dashboard refined with customers results.

1.1.5

Dashboard introduced for registered users activity regarding orders and logins from different locations.

1.1.4

Sanitized input and fixed direct file access issues.

1.1.3

Updating a few Illegal string offset conditions. [Thanks to PapGeo]

1.1.2

Updating a few Illegal string offset conditions.

1.1.0

Releasing with WP Mechanic free help feature.