Popis

XO Security is a plugin to enhance login related security.
This plugin does not write to .htaccess file. Besides Apache, LiteSpeed, Nginx and IIS also work.

Functions

Record login log.
Limit login attempts.
Login Alert.
Add Captcha to the login form and comment form.
Change the URL of the login page.
Disable login by mail address.
Disable login by user name.
Change login error message.
Disable XML-RPC and XML-RPC Pingback.
Disable REST API.
Change REST API URL prefix.
Disable author archive page.
Remove comment author class of comments list.
Remove the username from the oEmbed response data.
WooCommerce login page protection.
Anti-spam comment.
Hide WordPress version information.
Edit the author slug.
Disable RSS and Atom feeds.

WordPress multisite considerations

If you set the login page separately for the main site and the subsite, you will not be able to use the password loss function of the subsite. We recommend that you set the login page to be common to all sites.

Snímky obrazovky

Login log page.
Status page.
Login setting page.
Profile page.

Instalace

Upload the XO-Security folder to the /wp-content/plugins/ directory.
Activate the plugin through the Plugins menu in WordPress.
Go to „Settings“ -> „XO Security“ and customize behaviour as needed.

Nejčastější dotazy

Login page is not displayed.

Please initialize the settings.

In wp_options table, the value of the option_name field (column) is to remove the record of „xo_security_options“.
If you have set the login page, please delete the file.

The CAPTCHA is not displayed.

Please install mbstring and GD module.

Recenze

altmmc 4. 11. 2023

タイトル通りです。AIOS等の定番プラグインと比べると機能は少ないですが、必要最低限の対策が揃っており設定が非常にわかりやすいので使いやすいです。これだけでは不安という人はBBQ Firewallを併用すると良いです。

Katsushi Kawamori 8. 4. 2023

This one plugin completes my security measures. Thanks !!

Anonymous User 20656096 25. 10. 2022

I recommend for those looking for a simple and reliable security plugin.

ulafox 19. 8. 2021

This plugin has become one of my favorite plugins, it protects my website from malicious users, and the development team provides support very quickly! Thanks!

mainichiweb 11. 6. 2021

長年、SiteGuardを使っていましたが、たまにログインできなくなってプラグインをサーバーから削除とかしたりだったので、こちらのプラグインを使い始めました。設定画面もわかりやすく、作動も安定していて、ログイン試行履歴とかも見れます（結構不正ログインされようとしているのがわかって楽しい）、随時他のサイトのセキュリティプラグインもこちらに切り替えていこうと思っています。感謝感謝

ifnoob 4. 4. 2021

ログイン関係にとどまらず、WordPress全体としてのセキュリティプラグインへの進化を期待します。

Přečtěte si všech 9 recenzí

Autoři

XO Security je otevřený software. Následující lidé přispěli k vývoji tohoto pluginu.

ishitaka

Plugin „XO Security“ byl přeložen do 1 jazyku. Děkujeme všem překladatelům za jejich pomoc.

Přeložte “XO Security” do svého jazyka.

Zajímá vás vývoj?

Prohledejte kód, podívejte se do SVN repozitáře, nebo se přihlaste k odběru protokolu vývoje pomocí RSS.

Přehled změn

3.7.0

Supported WordPress 6.4.

3.6.4

Fixed a bug where logs could not be deleted on the login log page.

3.6.3

Added required attribute to CAPTCHA field in login form.
Supported WordPress 6.3.

3.6.2

Fixed a bug that the login type was not displayed in the login log.
Faster admin pages.
Added option to enable/disable login information widget.

3.6.1

Fixed a bug that the table optimization function did not work.
Fixed errors output issue.

3.6.0

Added a function to optimize database table.
Code refactoring to meet WordPress PHP Coding Standards.
Supported WordPress 6.2.

3.5.1

Supported SQLite.

3.5.0

Removed password field from login log.

3.4.5

Fixed a bug that CAPTCHA may not be displayed in PHP 8.1.
Removed site information from the status screen.

3.4.4

Added support for MySQL 5.5.13 and earlier versions.

3.4.3

Fixed a bug that the login log may not be recorded in some environments.

3.4.2

Added xo_security_loginlog_checkbox filter hook.

3.4.1

Added a function to mark spam comment email addresses as spam.
Added escaping to multiple translate texts for enhanced security.

3.4.0

Bumped the minimum required version of WordPress to 4.9.
Improved performance.

3.3.0

Added the ability to remove username from the oEmbed response data.

3.2.1

Fixed a bug where the author slug (Nicename) could not be edited.

3.2.0

Added an option to set a common login page for all WordPress multisite sites.

3.1.9

Enhanced WordPress multisite support.

3.1.8

Fixed a bug that the post list page for each creator on the admin screen is not displayed when the creator archive page is disabled.
Fixed a bug that login may fail when using CAPTCHA.

3.1.7

Fixed the html of the setting screen after it was incorrect.
Omitted the lazy loading attribute of CAPTCHA in the login form.

3.1.6

Fixed a vulnerability in Authenticated (author +) Time-based SQL Injection. (Thanks to Kenta Yoshida)

3.1.5

Added the ability to choose whether spam comments should be blocked, marked as spam and saved, or put in the trash.

3.1.4

Fixed a bug that an error message may be displayed on the admin screen during a new installation.

3.1.3

Fixed a bug in login log recording.

3.1.2

Added an option to set the default display method of the login log.

3.1.1

Fixed a bug where CAPTCHA was ignored and login was possible when PHP session was not available. (Thanks to Jazz@ifNoob)

3.1.0

In the case of WordPress multisite, the log is recorded for each site.
Added the ability to disable RSS and Atom feeds.

3.0.0

Added the editing function of the author slug.
Disabled auto-completion for CAPTCHA input fields.

2.9.0

Added the ability to hide WordPress version information.

2.8.0

Added the ability to block spam comment.

2.7.0

Restructured the settings page.
Added the function to customize the login form.

2.6.0

Changed to remove the standard sitemap user provider when disabling the author archive.

2.5.0

Added login type column to login log.

2.4.0

Added the option to select the method of acquiring the IP address.

2.3.0

Added a feature to disable login by user name and enable login by email only.

2.1.3

Fixed a bug that could slow down the display of the admin page. (Thanks to mocchii)

2.1.0

Added function to display site information.

2.0.0

Added option to change login error message.
Added option to disable login by mail address.

1.5.3

Fixed XSS vulnerability.

1.0.0

Initial release.

基本的なセキュリティ機能が揃っています

This one is all you need !

Great useful and easy to use!

awesome

とても良い

軽量かつマルチサイトも対応で素晴らしいです。