| 开发者 | reinajhon46 |
|---|---|
| 更新时间 | 2026年5月21日 10:15 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.9 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
jr-security-hardening-login-protection folder to /wp-content/plugins/.No. This plugin protects what goes through WordPress. For static files like /readme.html, you need server-level rules (Apache/Nginx). The plugin includes those rules ready to copy and paste in the "Server" tab.
Yes. It automatically detects the visitor's real IP via CF-Connecting-IP. If you use another proxy, you can enable "Trust proxy headers" in the settings.
Lockouts use WordPress transients and expire automatically based on the configured hours. You can also add your IP to the whitelist from settings, or temporarily deactivate the plugin via FTP/SSH by renaming the folder.
Yes, but avoid duplicating functionality. If another plugin already disables XML-RPC or adds headers, disable those modules here to avoid conflicts.
No. Settings are preserved when deactivating. They are only deleted when uninstalling the plugin completely.
If you are logged in as an administrator, the plugin does NOT block the author page — this is normal behavior. To test, use an incognito window without a WordPress session.