Locktura Security
| 开发者 | alainlankers |
|---|---|
| 更新时间 | 2026年10月14日 01:18 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Firewall - Attack filtering and cache-aware protection.
- Brute Force Defense - Login limits, bans, and unban controls.
- Hardening - User enumeration, editor, XML-RPC, feed, hotlink, and server-exposure controls.
- Update Manager - Updates, Software Health, rollback, and cleanup.
- Access Control - IP lists, exclusions, and automatic bans.
- Geo Blocking - Country rules and crawler verification.
- Hide Login - Custom login URL and route protection.
- Anti-Spam Shield - Local CAPTCHA and form or comment protection.
- Usernames & 2FA - Username audits, TOTP, passkeys, recovery codes, role rules, manual account login locks, and least-privilege Locktura permissions.
- Password Manager - Policies, resets, risk scans, and breach checks.
- Email Alerts - Configurable security notifications.
- Security Logs - Tamper-evident local events, integrity checks, and export.
- Live Traffic - Requests, visitors, bots, filters, and geolocation.
- User Log - Tamper-evident account, content, and settings activity.
- File Scanner - File and configuration checks, official checksum verification, incremental integrity scans, deployment windows, quarantine, and restore.
- File Permissions - Permission checks, fixes, and history.
- SSL Control - HTTPS, certificate, proxy, backup, and rollback.
- Email Encoder - Email inventory and obfuscation.
- Pattern Recognition
- Behavior Analytics
- Admin Lockdown
- Virtual Patching
- Header Hardening
- API Guardian
- Neural Bot Suppressor
- Network Reputation Control
- Domain Security
- Cookie Security Center
- Malware Scanner & Cleanup
- Smart 404
- Extra Hardening Tools
- Monthly Reports
- Session Management
- Extra User Safety Tools
- Premium Signature Pack
安装:
- Upload the
lockturafolder to/wp-content/plugins/, or install it through the WordPress Plugins screen. - Activate Locktura Security and open the Locktura dashboard.
- Review the modules, enable the protections you need, and save changed settings.
屏幕截图:
常见问题:
Is the firewall included?
Yes. Locktura Security includes the firewall with bundled community rules.
Do all listed Free features work without a license?
Yes. Every feature listed under Included in this plugin works without a license and has no time or usage restrictions. The separately distributed Premium plugin is not included in this package.
Do I need a cloud account?
No. Protection runs locally. Only the optional features documented under External services make network requests.
Does Locktura Security store security logs?
Yes. Security events are stored locally for administrator review. New records are linked and signed so unexpected changes or missing records can be detected. Existing records remain available as legacy logs after upgrading.
Can IP addresses be anonymized?
Yes. An IP anonymization setting is available.
Do users need a passkey?
No. Passkeys and physical security keys are optional. Existing authenticator-app 2FA keeps working without re-enrollment, and the familiar 2FA screen remains the default after password login.
Where do users manage 2FA?
Users manage their own authenticator app, passkeys, and recovery codes under Users > Profile. Administrators can require 2FA by role, set a grace period, review enrollment status, and reset 2FA without seeing user secrets.
What does the Permissions tab control?
It separates Locktura access into viewing security, managing blocks, running scans, repairing files, managing policy, and clearing logs. Administrators retain full access; other roles or individual users receive only the permissions you assign. Permission changes require a fresh 2FA verification.
更新日志:
- Added Password Emergency Reset.
- Added password reuse prevention and password history.
- Added configurable password expiration policies.
- Added manual login locks for user accounts.
- Fixed password policy handling and File Scanner checks.
- Improved code efficiency and input validation.
- Fixed CAPTCHA challenge refresh on cached pages.
- Fixed Firewall handling of WooCommerce payment return URLs.
- Preserved public author and comment names with Usernames protection enabled.
- Improved Access Control navigation for active IP bans.
- Fixed Brute Force ban duration and centralized ban management in Access Control.
- Fixed Hide Login handling of password-protected pages.
- Improved File Integrity Monitoring reliability.
- Updated Hardening controls and added an optional Jetpack XML-RPC exception.
- Improved firewall request handling and Jetpack compatibility.
- Improved WooCommerce compatibility in the firewall.
- Improved File Integrity Monitoring and File Scanner workflows.
- Added daily unique visitor estimates to the dashboard.
- Improved dashboard notifications, module cards, and Security Score calculations.
- Refined Access Control ban-list presentation.
- Fixed IP-address filtering in User Logs.
- Improved Hardening server-rule updates, backups, and restore handling.