Linux 软件免费装

在这里免费安装WordPress以及其他软件

Banner图

Riskora User Scanner

开发者 wpclinic
更新时间 2026年9月24日 00:11
PHP版本: 7.4 及以上
WordPress版本: 7.1
版权: GPLv2 or later
版权网址: 版权信息

标签

security users spam users fake users user cleanup

下载

0.1.2

详情介绍:

Riskora User Scanner helps site administrators identify suspicious users, fake accounts, spam-like registrations, and inactive accounts. The plugin calculates an advisory risk score for each user based on signals such as temporary email domains, suspicious usernames, incomplete profiles, missing activity, and login data collected after plugin activation. The score is intended to support careful manual review. It is not proof that an account is malicious, and the plugin never deletes users automatically. Main Features Safety First The plugin does not automatically delete or block users. Authorized administrators must review accounts manually before taking action. A risk score is only an indicator and may include false positives. Administrator protection is enabled by default. Disabling this protection should be done only after carefully reviewing the possible consequences. User deletion is permanent. Create a database backup before deleting user accounts from a production site, especially before using bulk deletion.

安装:

  1. Upload the plugin files to the /wp-content/plugins/riskora-user-scanner/ directory, or install the plugin through the WordPress Plugins screen.
  2. Activate Riskora User Scanner.
  3. Go to Users > Riskora User Scanner.
  4. Review the settings and run the first scan.
  5. Open Users > Suspicious Users to review the results.

屏幕截图:

  • Suspicious Users table with filters and risk levels
  • Full-width risk reasons panel
  • Activity Logs page
  • Plugin Settings page

升级注意事项:

0.1.2 Adds post-review metadata fixes and automated quality assurance tooling. 0.1.1 Improves the user review interface, scoring consistency, security checks, scan controls, log retention, and privacy documentation.

常见问题:

Does the plugin automatically delete users?

No. The plugin never deletes users automatically. Authorized administrators can delete one or more selected users manually after reviewing them.

Does a high risk score prove that a user is fake or malicious?

No. The score is an advisory indicator based on configurable signals. Always review the account and the listed reasons before taking action.

Can administrator accounts be deleted or blocked?

Administrator protection is enabled by default. Protected users cannot be blocked or deleted through the plugin. This protection can be changed in the settings and should be disabled only with care.

Does WordPress track last login by default?

No. WordPress does not track the last login time by default. This plugin starts collecting last login information after activation. Existing users may show as "Not tracked yet" until they log in again.

What does "Block login" do?

Block login prevents the selected user from logging in. It does not delete the account and can be reversed with the "Unblock login" action.

What data does the plugin store?

The plugin stores risk scores, scan results, manual statuses, login blocking metadata, last login metadata, scan summaries, settings, and plugin activity logs.

Can plugin data be removed on uninstall?

Yes. Enable the data-removal setting before uninstalling to remove the plugin tables, options, and user metadata. Data is retained by default.

Does the plugin send personal data to external services?

No. The plugin does not send user account data, risk scores, scan results, or plugin logs to external services.

How long are activity logs retained?

Logs are retained according to the period configured in the plugin settings. A daily cleanup task removes entries older than that period.

Does the plugin include bulk deletion?

Yes. Bulk deletion uses the same capability, protected-user, safe-user, and self-deletion safeguards as single-user deletion.

更新日志:

0.1.2 0.1.1 0.1.0