跳到內容
  • 登入
  • 註冊
WordPress.org

Hong Kong 香港中文

  • 佈景主題
  • 外掛
  • News
  • Support
  • About
  • 重要通知
  • WordPress 常見問題
  • 團隊
  • 取得 WordPress
取得 WordPress

外掛

  • 我的收藏
  • Beta測試
  • 開發者
下載

Block wp-login

由Webd Ltd
  • 詳情
  • 評價
  • 安裝
  • 開發
支援

描述

Block Access to wp-login.php

This plugin does the following:

  • Locates wp-login.php in your WordPress installation and duplicates it
  • Locates .htaccess and inserts lines to block the default wp-login.php and creates a new secret address to use for legitimate login
  • Will email the site admin if an administrator signs in with an un-recognised IP address

When installed your server will return “403 Forbidden“ when attempts are made to access the default wp-login.php file. This has two benefits; it prevents hackers from using brute force methods to hack your website and it reduces the load on the server when such brute force attacks are launched on your site as WordPress isn’t run at all.

安裝

Easily prevent access to the default wp-login.php file:

1) Install Block wp-login automatically or by uploading the ZIP file.
2) Activate the plugin through the ‘Plugins’ menu in WordPress.
3) Once activated, visit “Settings – Permalinks” in the admin menu.
4) At the bottom of the page enter a new login address next to “Block wp-login” or click to create a random address.
5) Make sure you make a note of the new address you will need to use to sign in.
6) Save the settings.

Although this plugin now detects when WordPress has been upgraded and re-installs itself, when upgrading WordPress core, you should still make sure you deactivate this plugin first just in case there is an issue.

常見問題

  • What is /wp-login.php ?
    This is the login page for WordPress; hundreds or thousands of hits to this page is not normal and is almost certainly a brute force attempt to hack the admin password.

評價

Turned against me after 2 months

ktk77 2022年9月6日 3 replies
The customized login URL stopped working, leading to a "403 Forbidden" page and locking me out of my site. I had to resolve the situation through my host, after which I got back into my dashboard and deactivated this plugin (which, as of this writing, hasn't even been updated in 4 months). A highly inconvenient experience following several weeks of relatively smooth performance. User beware.

Found It!

shirtguy72 2022年4月27日 1 reply
After being abandoned and not updated in 5 years, SF Move Login plugin finally started throwing me errors, started a quest to find another login security plugin written as smart or smarter than that little gem ... FOUND IT! Really love your approach here, Scientifically Whitty! 5-Stars ALL DAY LONG! Thank you and Best Wishes!

Lightweight and superb

TrishaM 2021年1月12日 2 replies
This plugin does exactly what I need it to do, it hides my login page, and doesn't carry extra weight or complexity. I added this after I discovered a ton of (unsuccessful) attempts to hack into my site through the login process (in addition to requiring all my users to update their passwords to something much stronger). I realize where there is a will there is a way and I'll still be at risk if one or more of my *users* gets hacked and their saved login link and credentials get stolen, but I sure sleep better at night now knowing that my site is just a bit safer.

Great protection against hackers

andybull 2018年1月8日
Adds a reassuring additional level of security against hackers

A valuable tool

f5nn9s3f8 2017年4月21日
A valuable tool to combat security issues facing WordPress users.

Great way to secure login page

wchetwode 2017年4月17日
Works a treat, thanks for this clever plugin. Highly recommended !
閱讀全部9個評價

貢獻者及開發者

“Block wp-login” 是一個開源的軟體。以下的人對這個外掛作出了貢獻。

貢獻者
  • Oliver Campion

Block wp-login 外掛目前已有 1 個本地化語言版本。 感謝所有譯者為這個外掛做出的貢獻。

將 Block wp-login 外掛本地化為台灣繁體中文版。

對開發相關資訊感興趣?

任何人均可瀏覽程式碼、查看 SVN 存放庫,或透過 RSS 訂閱開發記錄。

修改日誌

1.5.1

  • Added an option to email the site admin if an administrator signs in with an un-recognised IP address
  • Added translation strings

1.5

  • General housekeeping

1.4.9

  • Fixed bug that causes an error if the login_url hook is fired early

1.4.8

  • Preparing for WordPress v6.0

1.4.7

  • Fixed a cookie related bug with Google Chrome preventing login

1.4.6

  • Fixed bugs when .htaccess cannot be opened
  • Removed all PHP short tags

1.4.5

  • Preparing for WordPress v5.8

1.4.4

  • General housekeeping

1.4.3

  • General housekeeping

1.4.2

  • Added an option to send login URL reminders when saving Permalink settings

1.4.1

  • Added random login generator.

1.4.0

  • Premium functionality is now free!

1.3.9

  • Bug fix

1.3.8

  • Removed functionality now dealt with by Deny All Firewall

1.3.7

  • Yet more fixes for compatibility with WordPress 5.3

1.3.6

  • Further fixes for compatibility with WordPress 5.3

1.3.5

  • Fixed a bug that blocked Admin Email Verification in WordPress 5.3

1.3.4

  • Integrated plugin with new Deny All Firewall plugin

1.3.3

  • Plugin now allows password protected posts and pages to work

1.3.2

  • Important security update

1.3.1

  • Important security update

1.3.0

  • Automated upgrade activation facility
  • Bug fixes

1.2.4

  • Bug fix

1.2.3

  • Updating new developer / activation domain
  • Updating tested version

1.2.2

  • Bug fixes.

1.2.1

  • WordPress upgrade email re-worded

1.2.0

  • Plugin now automatically detects when WordPress has been upgraded and re-installs itself.
  • Bug fixed for when wp_mail() isn’t working

1.1.7

  • Bug fixes.

1.1.6

  • Plugin now upgrades automatically when activated if licensed.

1.1.5

  • Plugin is now internationalised ready for translation.
  • Help banner admin notice now appears until plugin has been configured.
  • Added help links on the settings page and added this information to the FAQ.
  • Minor bug fixes.

1.1.4

  • Blocking admin-ajax.php now allows commands when inniated from /wp-admin/.
  • Blank user or site owner emails won’t break saving settings.
  • Duplicate emails are not sent now when site owner and user email addresses are the same.
  • Options to block admin-ajax.php, wp-cron.php, xmlrpc.php and robots.txt are disabled until wp-login.php block is activated.

1.1.3

  • Plugin now emails all Administrators and the email set in General Settings with the new login URL.

1.1.2

  • Added option to block admin-ajax.php, wp-cron.php, xmlrpc.php and robots.txt for the free plugin.

1.1.1

  • Bug fixes.
  • Option to block wp-cron.php, admin-ajax.php and robots.txt for upgraded plugin.

1.1.0

  • Plugin re-written to make use of “Settings – Permalinks” so upgraded plugin can choose custom login slug.
  • Plugin now reverses changes when deactivated.
  • Plugin creates random login slug.

1.0.0

  • First, beta version of the plugin.

其它

  • 版本:1.5.1
  • 最後更新:2 個月之前
  • 運作中的安裝:700+
  • WordPress Version: 3.5.0 or higher
  • 已測試到版本:6.1.1
  • PHP Version: 5.6 or higher
  • 語言:

    English (UK) 及 English (US).

    翻譯成你的語言

  • 標籤:
    block hackerslogin securitysecuresecuritysecurity plugin
  • 進階顯示

評分

顯示全部
  • 5星 7
  • 4星 0
  • 3星 0
  • 2星 1
  • 1星 0
Log in to submit a review.

貢獻者

  • Oliver Campion

支援

最近兩個月解決了的問題:

1個中的1個

檢視支援論壇

捐贈

想要支援這個外掛的發展嗎?

贊助這個外掛

  • 關於我們
  • 最新消息
  • 寄存
  • 贊助基金會
  • Swag
  • 線上說明
  • 開發者資源
  • 共同參與
  • Learn
  • 展示網站
  • 外掛
  • 佈景主題
  • 區塊版面配置
  • WordCamp
  • WordPress.TV
  • BuddyPress
  • bbPress
  • WordPress.com
  • Matt
  • 隱私權
  • Public Code
WordPress.org
WordPress.org

Hong Kong 香港中文

  • 訪問我們的 Facebook 專頁
  • 訪問我們的 Twitter 帳戶
  • Visit our Instagram account
  • Visit our LinkedIn account
代碼就是詩歌。