説明
- Custom login address: wp-login.php and wp-admin show a 404 page to visitors who do not know your login address.
- Login limits: after a few wrong passwords (5 by default) an IP address is locked for a while (15 minutes by default).
- 2-step email codes: after the password, chosen roles enter a 6-digit code sent to their email. Trusted devices can skip it for 30 days.
- Hardening: hide the WordPress version, switch off XML-RPC, stop user enumeration, add security headers and more, each with its own switch.
- Login log: every successful and failed login, with the user, IP address and time.
If you are ever locked out, add define( 'OESL_OFF', true ); to wp-config.php to switch the plugin off.
External services
This plugin does not connect to any outside service. 2-step codes are sent with WordPress’s own email function.
インストール
- Upload the
online-everything-secure-loginfolder to/wp-content/plugins/and activate the plugin. - Go to Settings Online Everything Secure Login, choose your login address and save it somewhere safe.
- Turn on the protections you want.
FAQ
-
I forgot my login address.
-
Add
define( 'OESL_OFF', true );to wp-config.php, log in at /wp-login.php, look up the address in the settings and remove the line again. -
Does the 2-step code need an app?
-
No. The code is sent by email, so make sure your site’s emails arrive (for example with OE Mail SMTP).
-
What happens to my data when I delete the plugin?
-
All settings, logs and locks are removed.
評価
このプラグインにはレビューがありません。
貢献者と開発者
Online Everything Secure Login はオープンソースソフトウェアです。以下の人々がこのプラグインに貢献しています。
貢献者“Online Everything Secure Login” をあなたの言語に翻訳しましょう。
開発に興味がありますか ?
変更履歴
1.0.0
- First release.
