Lenon Leite

<p>Reduce risk for you site, running the easy hardening protection of mainly attacks.<br />
With hardening you can control bad request, blocking ips with malicious action like comments spam, brute force login and others.</p>
<h4>Hardening:</h4>
<ul>
<li>Disable Plugin Theme Editor</li>
<li>Hidden WordPress version</li>
<li>Deny WP Debug mode</li>
<li>Disable directory browsing</li>
<li>Disable author page</li>
<li>Fix corrects permissions</li>
<li>Change the prefix tables</li>
<li>Change the login url</li>
<li>2 Factor authentication</li>
<li>Google reCaptcha Option</li>
</ul>
<h4>Ip block Activity Options</h4>
<ul>
<li>Blocks comments with spam</li>
<li>Access malicious url</li>
<li>Blocks brute force</li>
</ul>
<h4>Mail notifications</h4>
<h4>Verifications:</h4>
<ul>
<li>Prefix tables</li>
<li>Easy usernames</li>
<li>Easy passwords</li>
<li>Check PHP Version</li>
<li>Check wrong permissions</li>
</ul>
<h4>Logs:</h4>
<ul>
<li>Save errors</li>
<li>User managers</li>
<li>Plugin managers</li>
</ul>


Integer Wp Security

WP security is a plugin responsible by security with short steps and fix the mainly security problems.

jp-secure

<p>You can find docs, FAQ and more detailed information on <a href="https://www.jp-secure.com/siteguard_wp_plugin_en/" rel="nofollow ugc">English Page</a> <a href="https://www.jp-secure.com/siteguard_wp_plugin/" rel="nofollow ugc">Japanese Page</a>.</p>
<p>Simply install the SiteGuard WP Plugin, WordPress security is improved.<br />
This plugin is a security plugin that specializes in the login attack of brute force, such as protection and management capabilities.</p>
<p>Notes</p>
<ul>
<li>It does not support the multisite function of WordPress.</li>
<li>It only supports Apache 1.3, 2.x for Web servers.</li>
<li>To use the CAPTCHA function, the expansion library “mbstring” and “gd” should be installed on php.</li>
<li>To use the management page filter function and login page change function, “mod_rewrite” should be loaded on Apache.</li>
<li>To use the WAF Tuning Support, WAF ( SiteGuard Server Edition ) should be installed on Apache.</li>
</ul>
<p>There are the following functions.</p>
<ul>
<li>Admin Page IP Filter</li>
</ul>
<p>It is the function for the protection against the attack to the management page (under wp-admin.)<br />
To the access from the connection source IP address which does not login to the management page, 404 (Not Found) is returned.<br />
At the login, the connection source IP address is recorded and the access to that page is allowed.<br />
The connection source IP address which does not login for more than 24 hours is sequentially deleted.<br />
The URL (under wp-admin) where this function is excluded can be specified.</p>
<ul>
<li>Rename Login</li>
</ul>
<p>It is the function to decrease the vulnerability against an illegal login attempt attack such as a brute force attack or a password list attack.<br />
The login page name (wp-login.php) is changed. The initial value is “login_<5 random digits>” but it can be changed to a favorite name.</p>
<ul>
<li>CAPTCHA</li>
</ul>
<p>It is the function to decrease the vulnerability against an illegal login attempt attack such as a brute force attack or a password list attack,<br />
or to receive less comment spam. For the character of CAPTCHA, hiragana and alphanumeric characters can be selected.</p>
<ul>
<li>Login Lock</li>
</ul>
<p>It is the function to decrease the vulnerability against an illegal login attempt attack such as a brute force attack or a password list attack.<br />
Especially, it is the function to prevent an automated attack. The connection source IP address the number of login failure of which reaches<br />
the specified number within the specified period is blocked for the specified time.<br />
Each user account is not locked.</p>
<ul>
<li>Login Alert</li>
</ul>
<p>It is the function to make it easier to notice unauthorized login. E-mail will be sent to a login user when logged in.<br />
If you receive an e-mail to there is no logged-in idea, please suspect unauthorized login.</p>
<ul>
<li>Fail Once</li>
</ul>
<p>It is the function to decrease the vulnerability against a password list attack. Even is the login input is correct, the first login must fail.<br />
After 5 seconds and later within 60 seconds, another correct login input make login succeed. At the first login failure, the following error message is displayed.</p>
<ul>
<li>Disable Pingback</li>
</ul>
<p>The pingback function is disabled and its abuse is prevented.</p>
<ul>
<li>Block Author Query</li>
</ul>
<p>Prevents leakage of user names due to “/?author=” access.</p>
<ul>
<li>Updates Notify</li>
</ul>
<p>Basic of security is that always you use the latest version. If WordPress core, plugins, and themes updates are needed , sends email to notify administrators.</p>
<ul>
<li>WAF Tuning Support</li>
</ul>
<p>It is the function to create the rule to avoid the false detection in WordPress (including 403 error occurrence with normal access,)<br />
if WAF ( SiteGuard Server Edition ) by EG Secure Solutions is installed on a Web server. WAF prevents the attack from the outside against the Web server,<br />
but for some WordPress or plugin functions, WAF may detect the attack which is actually not attack and block the function.<br />
By creating the WAF exclude rule, the WAF protection function can be activated while the false detection for the specified function is prevented.</p>
<h4>Translate</h4>
<p>If you have created your own language pack, or have an update of an existing one, you can send <a href="https://codex.wordpress.org/Translating_WordPress" rel="nofollow ugc">gettext PO and MO files</a> to sgdev@jp-secure.com so that We can bundle it into SiteGuard WP Plugin. You can download the latest <a href="https://plugins.svn.wordpress.org/siteguard/trunk/languages/siteguard.pot" rel="nofollow ugc">POT file</a>, and <a href="https://plugins.svn.wordpress.org/siteguard/branches/languages/" rel="nofollow ugc">PO files in each language</a>.</p>


SiteGuard WP Plugin


誰でもユーザーを登録できるサイトを作っているのですが、ログイン保護機能を利用しています。スパムアカウントが減りました。


ログイン保護に利用しています

SiteGurad WP Plugin is the plugin specialized for the protection against the attack to the management page and login.

Integer Wp Security vs SiteGuard WP Plugin