Linux 软件免费装
Banner图

RESTless

开发者 bjornw
更新时间 2018年6月29日 16:27
PHP版本: 4.4 及以上
WordPress版本: 4.9.6
版权: GPLv2 or later
版权网址: 版权信息

标签

security REST REST-API

下载

详情介绍:

RESTless is a tiny WordPress plugin which disables access to the REST API (available in WordPress since version 4.4) for non-authenticated users. This prevents usage of the REST API by the general public and limits access to those with login credentials. No REST for the wicked. It also supports WordPress Multisite installations.

安装:

Install this plugin as you'd install any other WordPress plugin e.g.
  1. Upload restless directory to the /wp-content/plugins/ directory
  2. Activate the plugin through the 'Plugins' menu in WordPress

屏幕截图:

  • Message (in this case automagically translated in Dutch) shown to non-authenticated user of the REST AP upon this request https://domain.name/wp-json/wp/v2/users
  • Request shown to authenticated user of the REST API (example request was https://domain.name/wp-json/wp/v2/users)

常见问题:

Does this disable the REST API?

No, it only prevents non-authenticated usage of the REST API.

Does it work with WordPress Multisite?

Yes, it does. You may disable REST API access per site or per Network. Per site: Activate the plugin only per site on which you'd like to disable non-authenticated REST API access. Per network: Use network-activated for the plugin and it will automagically disable non-authenticated REST API access.

更新日志:

1.0 First release