Protector – Malware Removal, Firewall & Core Repair
| 开发者 | marcelloruoppolome |
|---|---|
| 更新时间 | 2026年5月1日 01:39 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 6.9.4 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Every day, thousands of WordPress sites are hacked. Most security plugins offer protection, but they come with a massive cost: they slow down your server with bloated features and complex settings.
Protector is different. It is a lightweight, AI-ready security layer that turns your WordPress site into a digital fortress without compromising speed. Whether you are trying to recover a hacked site or proactively defend your business, Protector delivers enterprise-grade security that anyone can configure.
With our new 1-Click Security Overview Dashboard, you can activate all recommended protections and block 98% of automated attacks in under 8 seconds.
📖 Read the Official Documentation here
🦠 Malware Threat Scanner & Auto-Repair
Don't just find malware; destroy it. Our deep, recursive local scanner verifies your WordPress integrity without crashing your server:
* Core Integrity Verification: Cross-references all Core files against the official WordPress.org checksums.
* Advanced Pattern Detection: Detects suspicious code patterns (like
eval, base64_decode, shell_exec) hidden in your files.
* 1-Click Auto-Repair: Found a modified core file? Click "Repair" and Protector will automatically fetch a clean, original version directly from the official WP SVN and overwrite the infected file.
🛡️ Login Fortress (Brute-Force Protection)
Hackers relentlessly target the wp-login.php page. We make it disappear.
* Secret Login URL: Hide wp-login.php completely. Any unauthorized attempt will be instantly redirected to a custom URL of your choice.
* Smart Honeypots: Inject invisible fields into your login and comment forms to trap and block spam/brute-force bots automatically.
* Block Username Scanning: Prevent attackers from discovering your admin usernames via ?author=1 enumeration.
🔒 1-Click Site Hardening
Lock down common vulnerabilities instantly:
* Security Headers: Protect against XSS, Clickjacking, and MIME-Sniffing attacks with a single toggle.
* XML-RPC Control: Disable XML-RPC completely to eliminate one of the biggest brute-force attack vectors on WordPress.
* Version Obfuscation: Hide your WordPress version from the source code so hackers can't target known exploits.
* Restrict REST API: Block public access to endpoints that expose sensitive user data.
📊 Live Attack Log
Peace of mind you can actually see. Monitor every blocked attack, triggered honeypot, and deleted malware in real-time straight from your dashboard.
🚀 Upgrade to KloxStudios Pro
Need absolute maximum power? Protector integrates seamlessly with the KloxStudios Cloud AI. Pro users unlock Cloud AI Malware Verification for 3rd-party plugins/themes, Automatic IP Lockouts, Instant Admin Login Alerts (Email & Webhook), and 2FA.
安装:
You don't need a PhD in cybersecurity to secure your site.
- Upload the
protector-securityfolder to the/wp-content/plugins/directory (or install directly via the WP Plugin directory). - Activate the plugin through the 'Plugins' menu in WordPress.
- Navigate to the new "Protector" menu in your dashboard.
- Click the massive yellow "Activate Full Protection Now" button on the dashboard for instant, 1-click security. For detailed configuration guides, visit our Official Documentation.
屏幕截图:
常见问题:
How do I use the secret login URL?
- Go to the "Protector" menu > "Login Fortress" tab.
- Toggle the 'Change your secret login URL' option.
- Set your 'Secret Login Term' (e.g.,
mysecretaccess). - Save changes and use your new login URL:
yoursite.com/wp-login.php?mysecretaccess.
What if I forget my secret term and get locked out?
Don't panic! You can temporarily disable the plugin by renaming the protector-security folder inside wp-content/plugins/ via FTP or your hosting File Manager. This will instantly restore the default wp-login.php access.
Will the Malware Scanner slow down my site?
No! The scanner uses AJAX-based asynchronous batch processing. This means it scans your files in small chunks, preventing server timeouts and CPU spikes, even on massive websites with thousands of files.
更新日志:
4.0.4
- New: "Military Scan" mode - Expanded recursive scanning to the entire WordPress installation (Root, Admin, Includes, Vendor).
- Security: Hard-linked Anti-Piracy architecture for Pro features, ensuring engine integrity.
- Security: Refined Secret Login URL redirection logic to prevent false-positives during POST requests.
- Performance: Optimized AJAX batching for large-scale file processing.
- Tweak: Updated translations and documentation links.
- Fix: Resolved an issue where the Secret Login URL feature would incorrectly redirect valid users during form submission (POST request). The secret term is now securely validated during the login process.
- Tweak: Minor internal code refactoring for authentication hooks.
- Fix: Resolved a bug in the Settings API where saving one tab disabled the options in other tabs.
- Tweak: Separated option groups to improve form modularity and save actions.
- Major Overhaul: Complete UI/UX redesign with a new Security Overview Dashboard.
- New: Malware Threat Scanner (verifies WP core files and detects suspicious patterns).
- New: Auto-Repair modified Core files directly from WordPress.org SVN.
- New: Login & Comment Honeypots to trap spam and brute-force bots.
- New: Site Hardening options (Security Headers, Disable XML-RPC, Restrict REST API).
- New: Live Attack Log to monitor blocked threats in real-time.
- New: Quick Setup - Secure your site in 1-click.
- Performance: AJAX-based batch scanning to prevent server timeouts on large sites.
- Security: Added Pro Add-on architecture readiness.
- Fix: Resolved "Too Many Redirects" error by switching to wp_redirect.
- Security: Added data sanitization and escaping for all inputs.
- Performance: Removed all external CSS/JS dependencies (FontAwesome/Grids).
- New Security Algorithm.
- Layout improvements and new security features.