DawsonyWeb

<p>DawsonyWeb Security Shield protects your WordPress site from comment spam and unauthorised API access.</p>
<p><strong>Comment Protection</strong></p>
<ul>
<li>Master switch to completely disable all comments (form, REST API, XML-RPC, feeds)</li>
<li>Invisible honeypot field to trap bots</li>
<li>Minimum comment length enforcement</li>
<li>Block all links or cap links per comment</li>
<li>Require login to comment</li>
<li>Keyword/phrase blocklist</li>
</ul>
<p><strong>API & REST Hardening</strong></p>
<ul>
<li>Disable XML-RPC entirely (removes X-Pingback header too)</li>
<li>Hide <code>/wp/v2/users</code> endpoint to prevent username harvesting</li>
<li>Require authentication for all REST API requests</li>
<li>Optionally disable the REST API completely</li>
<li>Block author enumeration via <code>/?author=N</code></li>
</ul>
<p><strong>Spam Rules</strong></p>
<ul>
<li>Per-IP comment rate limiting (configurable max and time window)</li>
<li>IP address blocklist — blocked IPs receive a 403 on any front-end request</li>
<li>Rolling activity log (last 200 events)</li>
</ul>


DawsonyWeb – Security Shield

Spam comment protection, comment disabling, XML-RPC hardening, REST API lockdown, user enumeration blocking, and IP blocklisting.

Luiz Bills

<p>Several opinionated WordPress tweaks focused in security and performance.</p>
<h4>FEATURES</h4>
<ul>
<li>Produces clean filenames for uploads</li>
<li>Change admin footer text</li>
<li>Disable author page and author search by url</li>
<li>Disable emoji mess</li>
<li>Disable “meta widget”</li>
<li>Disable WP REST API public access</li>
<li>Disable “website” field from comment form</li>
<li>Disable wp embed</li>
<li>Disable xmlrpc.php</li>
<li>Show admin bar for admin users only</li>
<li>Hide WordPress update nag to all but admins</li>
<li>Remove “WordPress logo” from admin bar</li>
<li>Remove “+ New” button from admin bar</li>
<li>Remove some dashboard widgets</li>
<li>Remove query strings from scripts (JavaScript and CSS)</li>
<li>Remove <link rel=”shortlink” ></li>
<li>Remove dashboard “welcome panel”</li>
<li>Remove WordPress version number in <head></li>
<li>and more…</li>
</ul>
<p><strong>Note</strong>: is possible disable any feature.</p>
<h4>Contribuitions</h4>
<p>For bugs, suggestions or contribuitions, open a issue in our <a href="https://github.com/luizbills/wp-tweaks/issues" rel="nofollow ugc">Github Repository</a> or create a topic in <a href="https://wordpress.org/support/plugin/wp-tweaks/" rel="ugc">WordPress Plugin Forum</a>.</p>
<h4>Donations</h4>
<p>Support this plugin on <a href="https://luizpb.com/donate/" rel="nofollow ugc">https://luizpb.com/donate/</a></p>


WP Tweaks

Several opinionated WordPress tweaks focused in security and performance.

DawsonyWeb – Security Shield vs WP Tweaks