![]() | software | ![]() | WordPress Firewall Plugin |
It intelligently whitelists and blacklists pathological-looking phrases based on which field they appear within in a page request (unknown/numeric parameters vs. known post bodies, comment bodies, etc.). Its purpose is not to replace prompt and responsible upgrading, but rather to mitigate 0-day attacks and let bloggers sleep better at night. Its features include — * Detect, intecept, and log suspicious-looking parameters — and prevent them compromising WordPress. * Also protect most WordPress plugins from the same attacks. * Optionally configure as the first plugin to load for maximum security. * Respond with an innocuous-looking 404, or a home page redirect. * Optionally send an email to you with a useful dump of information upon blocking a potential attack. * Turn on or off directory traversal attack detection. * Turn on or off SQL injection attack detection. * Turn on or off WordPress-specific SQL injection attack detection. * Turn on or off blocking executable file uploads. * Turn on or off remote arbitrary code injection detection. * Add whitelisted IPs. * Add additional whitelisted pages and/or fields within such pages to allow above to get through when desirable. Click here for more info on the injection blocker's security filters. Screenshots:
|
||||||||