Walkiria Maintenance
| 开发者 | walkiriaapps |
|---|---|
| 更新时间 | 2026年10月6日 00:17 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Walkiria Maintenance is a lightweight but powerful all-in-one security and maintenance plugin for WordPress.
Features
- 🔐 Custom Login URL – Hide
wp-login.phpandwp-adminfrom attackers and bots. Returns a clean 404 to unauthenticated access attempts. - 📂 File Integrity Scanner – Builds a cryptographic baseline (SHA-256) of all your site files and alerts you when anything is added, modified or deleted.
- 🌐 Uptime Monitor – Checks your site every 30 minutes and sends an instant email alert when your site goes down or comes back up.
- 🔄 Update Notifications – Daily report of available updates for WordPress core, plugins and themes.
- 📧 HTML Email Alerts – Beautiful, branded HTML emails for every security event.
- 🗓️ Scheduled Scans – Configurable daily scan time (synced to your WordPress timezone).
安装:
- Upload the
walkiria-maintenancefolder to the/wp-content/plugins/directory, or install the plugin directly through the WordPress plugin screen. - Activate the plugin through the Plugins screen in WordPress.
- Go to Settings → Walkiria Maintenance to configure alert email, scan time, custom login URL and excluded directories.
- Click Run Scan Now to build the initial baseline. Future scans will only alert you about changes.
屏幕截图:
常见问题:
Will this plugin slow down my site?
No. The file scanner only runs on schedule (once a day by default) or when manually triggered from the dashboard. It has no impact on front-end performance.
What happens if I lock myself out with the custom login URL?
You can deactivate the plugin via FTP/cPanel by renaming the plugin folder, which will restore normal access to wp-login.php.
Does it work with multisite?
Not officially tested with multisite networks. Single-site installations only at this time.
更新日志:
1.1.1
- Security: Hardened all database queries using
$wpdb->prepare()with identifier placeholder%i. - Accessibility: Added explicit
id,for, andaria-labelattributes to all settings form inputs and textareas. - Accessibility: Marked email layout tables with
role="presentation"and row header cells for screen readers. - Added: Official GNU General Public License v2
LICENSE.txtfile to repository root. - Added: Explicit
load_plugin_textdomain()call hooked intoinit.
- Improved: Full i18n compliance — all strings are now translatable.
- Improved: Custom login handler correctly resolves relative paths in subdirectory installations.
- Improved: Scanner no longer checks the deprecated
safe_modePHP ini directive (removed in PHP 7.0). - Added:
uninstall.php— database table and all plugin options are fully cleaned up on uninstall. - Added:
sanitize_callbackfor the custom login slug setting. - Fixed:
wp_die()messages are now translated and properly escaped. - Fixed: Email footer uses
gmdate()instead ofdate()for server-timezone independence.
- Improved: Custom login now correctly handles subdirectory installations.
- Improved:
path_hashcolumn for reliable DB indexing of long file paths (>191 chars). - Added: Automatic DB schema migration via
check_upgrade(). - Fixed: Scanner timeout raised to 300s / 512MB for large sites.
- Added: HTML email templates with branded design.
- Added: Persistent dashboard scan logs.
- Added: Timezone sync for Cron scheduling.
- Added: First-run alert suppression (baseline build does not trigger a false-positive alert).
- Initial release.