Ke nānā nei ʻo Wordfence Security plugin i nā pūnaewele WordPress no nā code ʻino

Ka nānā ʻana a me ka hoʻoponopono pilikiaWordPressʻO nā plugins ʻaoʻao ʻekolu / mea hana no ka code malicious (trojans / backdoors).

Chen WeiliangHoʻohana ʻiaWordPress plugin- Wordfence Security palekana palekana plug-in.

• He polokalamu palekana WordPress e pili ana i ka pā ahi a me ka nānā ʻana i nā code malicious.
• Kūkulu ʻia a mālama ʻia e kahi hui nui, 100% i kālele ʻia i ka palekana WordPress.

Hoʻoiho i ka plugin Wordfence Security

ʻOiai aia kahi module uku, hiki iā mākou ke hoʻohana i ka module manuahi "Scan" e nānā i kā mākou pūnaewele WordPress no nā faila PHP me ka "code malicious".

ʻOiai aia kekahi helu kuhi hewa:

• Ma muli o nā hopena maikaʻi ʻole o kekahi mau plugins i uku ʻia a me nā ʻāpana hoʻopili kumuhana.
• Eia nō naʻe, ʻo ka loaʻa ʻana o ka "code malicious" me Wordfence Security he ala maikaʻi loa ia.
• ʻAʻole ʻōlelo ʻia ka wehe pinepine ʻana o Wordfence Security plugin.
• Ma muli o kāna pale ahi a me ka palekana palekana, e hoʻokau i kekahi kaumaha ma ka waihona, e hoʻopilikia i ka hana holoʻokoʻa o ka pūnaewele.

ʻO ka maʻamau, inā pono ʻoe e hoʻā i kahi plugin, e holo i kahi nānā "Scan" scan.

I ka pau ʻana, e pani i ka plugin a mālama iā ia no ka hoʻohana e hiki mai ana.

No ke aha e loaʻa ai iaʻu ka wikiwiki "Incomplete installation of Wordfence"?

Ma muli o ka hoʻokomo ʻia ʻana o nā plug-in palekana like ʻole, aia kahi "paʻakikī" i hoʻokumu ʻia, e hoʻopau wale i nā plug-ins palekana ʻē aʻe.

He aha kaʻu e hana ai inā ʻaʻole hiki ke hoʻokuʻu ʻia ka plugin Wordfence ma hope o ka hoʻopau ʻana i nā plug-in palekana ʻē aʻe?

Hiki iā ʻoe ke hoʻāʻo i ke kauoha SSH e hoʻomaka hou i kēia mau lawelawe ▼

systemctl restart httpd
systemctl restart nginx
systemctl restart mariadb
systemctl restart memcached

Nā hopena hoʻāʻo, ua hoʻomaka maikaʻi ʻia ka plug-in Wordfence.

Pehea e hoʻonohonoho ai i Wordfence?

ʻO ka maʻamau, hiki iā ʻoe ke hahai i nā hoʻonohonoho paʻamau o ka plugin Wordfence.

Pehea e hoʻonohonoho ai i Wordfence plugin scan?

Kaomi iā Scan → Scan Options and Schedules → Basic Scan Type Options ▼

• Hoʻonohonoho ʻia no ka "Standard Scan":ʻO kā mākou mau manaʻo no nā pūnaewele āpau.Hāʻawi i nā mana ʻike maikaʻi loa i ka ʻoihana.
• E koho e hoʻonoho i ka ʻike kiʻekiʻe wale nō inā ua hacked kāu pūnaewele:No nā mea nona ka pūnaewele e manaʻo nei ua hacked paha lākou.ʻOi aku ka maikaʻi, akā hiki ke hana i nā hopena maikaʻi ʻole.

He aha kaʻu e hana ai inā he hewa i ka nānā ʻana iā Wordfence?

Inā ʻoe e hoʻohana i ka plugin Wordfence e scan, e ʻike ʻia kēia memo hewa:

Nā kikowaena nānā ʻōlelo Wordfence: hewa cURL 28: Ua pau ka pilina ma hope o 10000 milliseconds

Hoʻonohonoho i ke ala e hoʻoponopono ai i ka hewa scan Wordfence:

KaʻAnuʻu Hana 1: Ma Wordfence → "Nā Mea Hana" → "Diagnostics" → "Nā koho Debugging":
E ho'āʻo e hoʻā a hoʻopau paha "E hoʻomaka i nā scan āpau ma kahi mamao (e hoʻāʻo i kēia inā ʻaʻole i hoʻomaka kāu scans a hiki ke ʻike ʻia kāu pūnaewele)"

KaʻAnuʻu 2:Hoʻomaka hou i ka lawelawe ʻo Apache ▼

systemctl restart httpd

Ma hope o ka hoʻomaka hou ʻana i ka lawelawe Apache, hoʻoholo maʻamau ia "Wordfence scanning servers: cURL error 28: Connection timed out after 10000 milliseconds"he hewa.

He aha kaʻu e hana ai inā hāʻule ka ʻimi ʻōlelo Wordfence?

He aha kaʻu e hana ai inā ʻaʻole hiki i ka Wordfence plug-in ke nānā a hoʻomaha i ka wā o ke kaʻina hana scan, a ʻike ʻia ka wikiwiki scan failure ma hope?

ʻIke ʻia ʻaʻole i hāʻule ka scan i kēia manawa.ʻO kona kūlana kūlana hope loa he 8 mau minuke aku nei.Hiki iā ʻoe ke hoʻomau i ke kali ʻana a hoʻomaka a hoʻomaka hou i ka nānā ʻana.Pono paha kekahi mau paena e hoʻolohe i ka holo pono ʻana o nā scans.Kaomi ma aneʻi no nā ʻanuʻu hiki iā ʻoe ke hoʻāʻo.

A i ʻole ka memo hiki ʻole scan:

ʻIke ʻia ʻaʻole i hāʻule ka scan i kēia manawa.ʻO kona kūlana kūlana hope loa 5 minuke Ma mua.Hiki iā ʻoe ke hoʻomau i ke kali ʻana a hoʻomaka a hoʻomaka hou i ka scan.Pono paha kekahi mau paena e hoʻopaʻa pono i nā scans. Kaomi ma aneʻi no nā ʻanuʻu hiki iā ʻoe ke hoʻāʻo.

Pāʻoihana:

1. Kaomi "Cancel Scan";
2. E ho'āʻo e hoʻomaka hou i ka plugin Wordfence;
3. kekahi manawa houE ho'āʻo wale i kahi scan palekana.

Nā memo Wordfence Plugin

Nā memo no ka hoʻohana ʻana i ka Wordfence Security Plugin:

• No ka hōʻoia ʻana i kahi scan paʻa, ʻoi aku ka maikaʻi o ka hoʻopau ʻana i nā plugins ʻē aʻe (ʻo Wordfence wale nō nā plugins palekana palekana) ma mua o ka hoʻomaka ʻana i ka "Scan".
• No ka mea hiki i ka Wordfence Security Plugin scans ke hoʻoulu i ka ukana CPU server kiʻekiʻe, pono ia e nānā i ke kakahiaka nui a i ʻole ka liʻiliʻi o ke kaʻa pūnaewele.
• Hoʻohana wale mākou i ke kānāwai "scan" a Wordfence Security no ka code malicious, no laila e hoʻolohe i ke ala o nā faila php kānalua i koi ʻia i nā hopena scan, i maʻalahi ke hoʻihoʻi lima a laila holoi a holoi.

Chen WeiliangUa ʻōlelo ʻia kēia blog aʻoaʻo, WordPress theme malicious code analysis ▼

He aha ke code malicious o WordPress theme?Ka nānā 'ana i nā code malicious code

Ma kahi o 90% ke kumu o "malicious code". ʻOi aku ma mua o 80% o nā pūnaewele WordPress nā plugins e lawe mai i nā code malicious i loko o nā moʻokāki pūnaewele (aia nā plugins pūnaewele mana, nā plugins streaming online, etc.).ʻO ka mea ʻē aʻe, ʻo ke kumumanaʻo (cracked version, pirated theme) he "code malicious" a i ʻole "ma hope o ...

ʻO nā mea hana 3rd Party E ʻimi i nā Trojan Backdoors

ʻOiaʻiʻo, aia kekahi mea hana maoli ʻo ia ke ala maikaʻi loa e ʻike ai i nā code malicious ma nā faila PHP - Microsoft's MSE.

• Hiki iā mākou ke hoʻoiho i ka faila PHP ʻaoʻao kikowaena ma ka ʻāina, no laila hiki i ka MSE scan a me ka ʻike ʻana ke loaʻa pū kekahi "code malicious", "Trojan horse", a me "backdoor".
• ʻAʻole ʻoi aku ka ikaika o kēia ma mua o ko Kina "360 Security Guard", "Tencent Computer Manager" a me "Kingshan Drug Tyrant".
• He nui kā mākou mau mea hana ʻaoʻao 3 e koho ai, e ʻoluʻolu e koho e like me kou kūlana ponoʻī.

ʻO ka ʻoihana kaiaola WordPress ka mea maikaʻi loa:

• ʻO ka noho ʻana o nā plugins palekana e like me Wordfence Security, hiki ke hoʻopau i ka pilikia o WordPress malicious code.

Hoʻohālikelike

Ma ka hopena,Chen WeiliangE hooikaika hou ia:

1. ʻO ka hoʻonohonoho waiwai o WordPress o nā plugins a me nā kumumanaʻo he "pahi pahi pālua".
2. Pono nā kānaka a pau e makaʻala i ke koho ʻana a me ka hoʻohana ʻana i nā plugins a me nā kumumanaʻo.
3. No ka mea ʻo ke kumu nui o ka palekana WordPress ʻo nā plugins a me nā kumumanaʻo, ʻaʻole i hoʻomalu ʻia e WordPress.
4. Hoʻouna ʻia e kahi mea hoʻomohala ʻaoʻao ʻekolu ma hope o nā mea a pau.
5. Manaʻo ʻia e hoʻohana mau i ka plugin palekana Wordfence.
6. No ka hoʻolālā e hana i kahi pūnaeweleHoʻolaha PūnaeweleE ka poʻe, makemake ʻia e kūʻai i nā plugins WordPress maoli a me nā kumumanaʻo.
7. Ma muli o ka pirated, hiki i nā mana manuahi ke hūnā i ka pōʻino o "code malicious".