IP Blacklist for Cloudflare
| 开发者 |
MillerMediaNow
mikemm01 MillerMedia |
|---|---|
| 更新时间 | 2026年3月12日 08:38 |
| PHP版本: | 8.1 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPL-2.0-or-later |
| 版权网址: | 版权信息 |
详情介绍:
Cloudflare provides security and optimization services for websites all around the internet. WordPress sites are often attacked by bots or hackers and, while Cloudflare has preset firewall rules to help, it doesn’t always filter out all malicious activity.
Cloudflare IP Blacklist allows WordPress admins to add a list of prohibited usernames and if someone attempts to log in with one of these usernames, this users IP address is automatically added to the Cloudflare blacklist. By doing this, the next time this user attempts to load the site, they will be blocked by Cloudflare before their requests get to your site’s server. Add an extra layer of security today to your site!
** This plugin relies on the use of Cloudflare, a third-party service that increases security and performance for web sites and services across the internet. For more information, visit the Cloudflare website and their privacy policy. This plugin is not officially endorsed, built or maintained by the Cloudflare team; rather, we are a development company that uses their services every day! **
常见问题:
How do I set up my Cloudflare API credentials?
Go to Settings > Cloudflare IP Blacklist in your WordPress admin. You can authenticate using either a scoped API Token (recommended) or your Global API Key (legacy). For API Tokens, create one in your Cloudflare dashboard with the "Account > Account Firewall Access Rules > Edit" permission.
What happens when someone tries to log in with a banned username?
Their IP address is automatically added to your Cloudflare firewall block list. On their next visit, Cloudflare blocks them before the request ever reaches your server, saving your server resources.
Can I use an API Token instead of the Global API Key?
Yes! As of version 1.0.5, scoped API Tokens are fully supported and recommended over the Global API Key. Create a token in your Cloudflare dashboard with the required firewall permissions.
What PHP and WordPress versions are supported?
The plugin requires PHP 8.1 or higher and has been tested up to WordPress 6.9.1.
What languages are supported?
The plugin is available in 30 languages with more being added regularly. We are working toward supporting 50 languages total!
更新日志:
1.2.2
- Fixed text domain mismatch: updated all i18n calls to use correct slug
ip-blacklist-for-cloudflare - Renamed translation files to match correct text domain
- Added ABSPATH checks to ReviewNotice.php and SiteSettingsView.php
- Fixed unescaped output in SiteSettingsView.php (printf calls now use wp_kses_post + numbered placeholders)
- Removed deprecated load_plugin_textdomain() call (WordPress handles this since 4.6)
- Replaced parse_url() with wp_parse_url() in Helpers.php
- Updated "Tested up to" to 6.9
- Added GPL license declaration to plugin header
- Updated Author URI
- Added direct file access protection to all PHP files
- Improved output escaping and input sanitization
- Removed non-production files from plugin directory
- Added translations for 50 languages
- Added POT translation template file
- Added opt-in data cleanup on plugin deletion
- Added Settings link on Plugins page
- Updated FAQ section
- Updated readme with complete language list
- Added translations for Russian, Polish, Dutch, Turkish, and Swedish
- Updated localization section in readme
- Added Chinese Simplified (zh_CN) translation
- Added Japanese (ja) translation
- Tested up to WordPress 6.9.1
- Added dismissible review prompt notice after 14 days of usage
- Added translations for Spanish, French, German, Portuguese (Brazilian), and Italian
- Added support for scoped API tokens as an alternative to Global API Key
- Added connected state UI with credential status bar and masked credential preview
- Added Disconnect action to easily switch authentication methods
- Added internationalization (i18n) support for all user-facing strings
- Labeled Global API Key as Legacy, recommending API Token for new installs
- Added required Cloudflare token permissions in API Token field description
- Added output escaping to settings page
- Scoped nonce verification to plugin settings page only
- Removed unnecessary error suppression on nonce verification
- Improved setup instructions for Cloudflare API credentials
- Compatibility updates for WordPress 6.9 and PHP 8.1+
- Fixed PHP 8.2 dynamic property deprecation warnings
- Initial public release