Protection – WordPress

На цій сторінціWordPress SecurityWordPress PluginFAQ

In this article, you will learn:


WordPress Security

The WordPress content management system is very popular, as are various kinds of attacks against webs that run it. Even if these attacks fail to breach the web or admin interface, they significatnly increase server load and slow your website down. That’s why WEDOS Protection aims to stop this unwanted traffic before it even reaches the web server.

WEDOS Global Protection uses the following methods to protect WordPress websites:

  • Блокування запитів до таких файлів:
    • xmlrpc.php, якщо запит не надходить від WordPress
    • wp-config.php
    • .htaccess
    • wpad.dat
    • PHP in the wp-content/uploads folder
    • PHP in the wp-includes folder
    • wp-admin/admin-ajax.php, unless the request comes from WordPress or Google
  • Using captcha:
    • for wp-login.php (admin, wp-admin)
    • for requests from IPs with bad reputation scores (according to UDGER ⧉)

The system also monitors traffic from various IP addresses. If an address makes too many requests over a time period, the system temporarily denies it further access.

All static content (return codes 200, 301, 302) also remains cached for 10 minutes by default.


WordPress Plugin

You can now download and install the WEDOS Protection WordPress plugin ⧉ directly. This has the following advantages:

Installation Guide

You can install the WEDOS Protection plugin as any other WordPress plugin. The easiest way is via the WordPress admin panel:

  1. Log into your WordPress administration panel.
  2. In the left menu, select Plugins Додати новий плагін.
  3. Search for the WEDOS Protection keywords.
  4. On the WEDOS | Protection & Cache Performance card, click the Install button, followed by the Активувати button.
WEDOS Protection & Cache Performance Plugin
WEDOS Protection & Cache Performance Plugin

Plugin Activation

Активуйте плагін, виконавши такі кроки:

  1. Log into your WordPress administration panel.
  2. In the left menu, select WEDOS Protection.
  3. Click the Start Protection Setup button.
Free WEDOS.protection setup via WordPress plugin
Free WEDOS.protection setup via WordPress plugin

This will open a setup wizard.

  1. Website Information. Check the host domain, WordPress server IP and type A DNS records. Update your email if necessary, click the Create Request button and Continue.
  2. DNS Setup. Set up values according to the provided instructions with your current DNS provider. Pay attention to your provider’s name and record type specifications and adjust copied values accordingly.

For WEDOS DNS, the correct entries are:

  1. Domain Verification: Enter the record name _acme-challenge and choose type CNAME. Скопіюйте Value в поле Data.
  2. Main Domain Routing: Leave the record name blank and choose type ALIAS. Скопіюйте Value в поле Data. Далі створіть ще один запис з іменем www and choose type CNAME. Скопіюйте те саме Value в поле Data.

Once DNS is configured correctly, WEDOS.protection activates.

Активний WEDOS.protection у плагіні для WordPress
Активний WEDOS.protection у плагіні для WordPress

FAQ

No Frequently asked question for the current version.

Чи була ця стаття корисною?

Ваша оцінка допомагає нам покращувати статті.

Ваше повідомлення прочитає редакція документації, але вона на нього не відповідає. Якщо вам потрібна допомога, звертайтеся до нас через контактну форму. Не вказуйте тут паролі чи особисті дані.

Didn’t find what you were looking for?

Send us your question using the contact form.