Protection – WordPress

In questa paginaWordPress SecurityWordPress PluginFAQ

In this article, you will learn:


WordPress Security

The WordPress content management system is very popular, as are various kinds of attacks against webs that run it. Even if these attacks fail to breach the web or admin interface, they significatnly increase server load and slow your website down. That’s why WEDOS Protection aims to stop this unwanted traffic before it even reaches the web server.

WEDOS Global Protection uses the following methods to protect WordPress websites:

  • Blocco delle richieste che accedono ai seguenti file:
    • xmlrpc.php, a meno che la richiesta non provenga da WordPress
    • wp-config.php
    • .htaccess
    • wpad.dat
    • PHP in the wp-content/uploads folder
    • PHP in the wp-includes folder
    • wp-admin/admin-ajax.php, unless the request comes from WordPress or Google
  • Using captcha:
    • for wp-login.php (admin, wp-admin)
    • for requests from IPs with bad reputation scores (according to UDGER ⧉)

The system also monitors traffic from various IP addresses. If an address makes too many requests over a time period, the system temporarily denies it further access.

Anche tutti i contenuti statici (codici di risposta 200, 301, 302) restano per impostazione predefinita nella cache per 10 minuti.


WordPress Plugin

You can now download and install the WEDOS Protection WordPress plugin ⧉ directly. This has the following advantages:

Installation Guide

You can install the WEDOS Protection plugin as any other WordPress plugin. The easiest way is via the WordPress admin panel:

  1. Log into your WordPress administration panel.
  2. In the left menu, select Plugins Add New Plugin.
  3. Search for the WEDOS Protection keywords.
  4. On the WEDOS | Protection & Cache Performance card, click the Install button, followed by the Activate button.
WEDOS Protection & Cache Performance Plugin
WEDOS Protection & Cache Performance Plugin

Plugin Activation

Attiva il plugin seguendo questi passaggi:

  1. Log into your WordPress administration panel.
  2. In the left menu, select WEDOS Protection.
  3. Click the Start Protection Setup button.
Free WEDOS.protection setup via WordPress plugin
Free WEDOS.protection setup via WordPress plugin

This will open a setup wizard.

  1. Website Information. Check the host domain, WordPress server IP and type A DNS records. Update your email if necessary, click the Create Request button and Continue.
  2. DNS Setup. Set up values according to the provided instructions with your current DNS provider. Pay attention to your provider’s name and record type specifications and adjust copied values accordingly.

For WEDOS DNS, the correct entries are:

  1. Domain Verification: Enter the record name _acme-challenge and choose type CNAME. Copia il Value nel campo Data.
  2. Main Domain Routing: Leave the record name blank and choose type ALIAS. Copia il Value nel campo Data. Poi crea un altro record con il nome www and choose type CNAME. Copia lo stesso Value nel campo Data.

Once DNS is configured correctly, WEDOS.protection activates.

WEDOS.protection attivo nel plugin WordPress
WEDOS.protection attivo nel plugin WordPress

FAQ

No Frequently asked question for the current version.

Questo articolo le è stato utile?

Il suo giudizio ci aiuta a migliorare i nostri articoli.

Il suo messaggio viene letto dal team della documentazione, che però non risponde. Se ha bisogno di aiuto, contattici tramite il modulo di contatto. Non inserisca password né dati personali.

Didn’t find what you were looking for?

Send us your question using the contact form.