Title: WP REST API Security
Author: invisnet
Published: <strong>2019年3月5日</strong>
Last modified: 2019年8月12日

---

搜尋外掛

這個外掛**並未在最新的 3 個 WordPress 主要版本上進行測試**。開發者可能不再對這個
外掛進行維護或提供技術支援，並可能會與更新版本的 WordPress 產生使用上的相容性問題。

![](https://s.w.org/plugins/geopattern-icon/wp-rest-api-security.svg)

# WP REST API Security

 由[invisnet](https://profiles.wordpress.org/invisnet/)

[下載](https://downloads.wordpress.org/plugin/wp-rest-api-security.zip)

 * [詳情](https://zh-hk.wordpress.org/plugins/wp-rest-api-security/#description)
 * [評價](https://zh-hk.wordpress.org/plugins/wp-rest-api-security/#reviews)
 *  [安裝](https://zh-hk.wordpress.org/plugins/wp-rest-api-security/#installation)
 * [開發](https://zh-hk.wordpress.org/plugins/wp-rest-api-security/#developers)

 [支援](https://wordpress.org/support/plugin/wp-rest-api-security/)

## 描述

The REST API is essential for any modern web framework, but with it comes a huge
attack surface. _WP REST API Security_ reduces the attack surface by disabling all
the REST API endpoints by default, allowing you to enable only those actually needed.
Those that are enabled require authentication by default, allowing you to choose
which to make public.

> **N.B.** If you are using the new Block Editor you must keep nearly all the endpoints
> enabled for it to work, but none need be public.

## 安裝

 1. Install via the Plugin Directory, or upload to your plugins directory.
 2. Activate the plugin through the ‘Plugins’ menu in WordPress.
 3. Go to _Settings_ -> _WP REST API Security_

> **N.B.** Activating _WP REST API Security_ will disable all REST endpoints – you**
> must** enable the ones you need.

## 評價

![](https://secure.gravatar.com/avatar/345025fc3fcb9b613af3175f40c2c7cd692225038d2472a95b1dd75e49ca785d?
s=60&d=retro&r=g)

### 󠀁[Great Plugin, just missing multisite support](https://wordpress.org/support/topic/great-plugin-bugs-though/)󠁿

 [Larzans](https://profiles.wordpress.org/larzans/) 2020年2月6日

This is a great plugin that gives you fine-grained control over your REST API, you
can prevent public access but allow private access. This way you can disable all
the gutenberg stuff for public use but are still able to use it for logged in users.
It would be great to have multisite support too, so that you could protect the whole
multisite from the configuration without having to apply the setting in each blog.

 [ 閱讀全部1個評價 ](https://wordpress.org/support/plugin/wp-rest-api-security/reviews/)

## 貢獻者及開發者

“WP REST API Security” 是一個開源的軟體。以下的人對這個外掛作出了貢獻。

貢獻者

 *   [ invisnet ](https://profiles.wordpress.org/invisnet/)

[將 WP REST API Security 外掛本地化為台灣繁體中文版。](https://translate.wordpress.org/projects/wp-plugins/wp-rest-api-security)

### 對開發相關資訊感興趣？

任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/wp-rest-api-security/)、
查看 [SVN 存放庫](https://plugins.svn.wordpress.org/wp-rest-api-security/)，或透過
[RSS](https://plugins.trac.wordpress.org/log/wp-rest-api-security/?limit=100&mode=stop_on_copy&format=rss)
訂閱[開發記錄](https://plugins.trac.wordpress.org/log/wp-rest-api-security/)。

## 修改日誌

#### 1.1.2

 * Fix array error.

#### 1.1.1

 * Fix CSS leakage.
 * Fix array warning.

#### 1.1.0

 * Bugfix.
 * Use actions.

#### 1.0.0

 * Initial release.

## 其它

 *  Version **1.1.2**
 *  Last updated **7 年之前**
 *  Active installations **10+**
 *  WordPress version ** 4.9 or higher **
 *  Tested up to **5.1.22**
 *  PHP version ** 7.0 or higher **
 *  Language
 * [English (US)](https://wordpress.org/plugins/wp-rest-api-security/)
 * Tags
 * [api](https://zh-hk.wordpress.org/plugins/tags/api/)[rest](https://zh-hk.wordpress.org/plugins/tags/rest/)
   [security](https://zh-hk.wordpress.org/plugins/tags/security/)
 *  [進階顯示](https://zh-hk.wordpress.org/plugins/wp-rest-api-security/advanced/)

## 評分

 4 out of 5 stars.

 *  [  0 5-star reviews     ](https://wordpress.org/support/plugin/wp-rest-api-security/reviews/?filter=5)
 *  [  1 4-star review     ](https://wordpress.org/support/plugin/wp-rest-api-security/reviews/?filter=4)
 *  [  0 3-star reviews     ](https://wordpress.org/support/plugin/wp-rest-api-security/reviews/?filter=3)
 *  [  0 2-star reviews     ](https://wordpress.org/support/plugin/wp-rest-api-security/reviews/?filter=2)
 *  [  0 1-star reviews     ](https://wordpress.org/support/plugin/wp-rest-api-security/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/wp-rest-api-security/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/wp-rest-api-security/reviews/)

## 貢獻者

 *   [ invisnet ](https://profiles.wordpress.org/invisnet/)

## 支援

有話想說？需要協助？

 [檢視支援論壇](https://wordpress.org/support/plugin/wp-rest-api-security/)

## 捐贈

想要支援這個外掛的發展嗎？

 [ 贊助這個外掛 ](https://paypal.me/invisnet/)