I-Wordfence Security plugin ihlola iisayithi ze-WordPress ngekhowudi enobungozi

Iiplagi/izixhobo zomntu wesithathu eziskena kwaye zibone ikhowudi enobungozi (iiTrojans/backdoors) kwiWordPress .

UChen Weiliang ucebisa ukusebenzisa i-plugin ye-WordPress i-Wordfence Security.

• Yiplagi yokhuseleko ye-WordPress esekwe kwi-firewall kunye nokuskena ikhowudi engalunganga.
• Yakhiwe kwaye igcinwe liqela elikhulu, i-100% igxile kukhuseleko lwe-WordPress.

Wordfence Security plugin download

Nangona kukho imodyuli ehlawulwayo, sinokusebenzisa imodyuli yasimahla "Scan" ukuskena indawo yethu yeWordPress yeefayile zePHP "ngekhowudi ekhohlakeleyo".

Nangona kukho inqanaba elithile elingeyonyani:

• Ikakhulu ngenxa yeepositi ezingeyonyani zezinye iiplagi ezihlawulwayo kunye namacandelo oguqulelo oluntsonkothileyo.
• Nangona kunjalo, ukufumana "ikhowudi ekhohlakeleyo" kunye ne-Wordfence Security ngokuqinisekileyo yindlela esebenzayo.
• Ukuvulwa rhoqo kwe-Wordfence Security plugin ayikhuthazwa.
• Ngenxa ye-firewall kunye nokukhuselwa kokhuseleko, kuya kubangela umthwalo othile kwi-database, eya kuchaphazela ukusebenza ngokubanzi kwewebhusayithi.

Ngokuqhelekileyo, xa ufuna ukuvula i-plugin, sebenzisa i-scan "Scan" khangela.

Xa ugqibile, vala iplagin kwaye uyigcine ukuze uyisebenzise kwixesha elizayo.

Kutheni le nto "ufakelo lwe-Wordfence aluphelelanga" luvela ngokukhawuleza?

Ngenxa yokuba ezinye iiplagi zokhuseleko ezifanayo zifakiwe, kukho "ingxabano" ebangelwayo, cima nje ezinye iiplagi zokhuseleko.

Yintoni endimele ndiyenze ukuba iplagi ye-Wordfence ayinakusungulwa ngempumelelo emva kokukhubaza ezinye iiplagi zokhuseleko?

Ungazama umyalelo we-SSH ukuqalisa kwakhona ezi nkonzo zilandelayo ▼

systemctl restart httpd
systemctl restart nginx
systemctl restart mariadb
systemctl restart memcached

Iziphumo zovavanyo, iplagi yeWordfence yaqalwa ngempumelelo.

Indlela yokuseta i-Wordfence?

Ngokuqhelekileyo, unokulandela useto olungagqibekanga lweplagi yeWordfence.

Indlela yokuseta Wordfence plugin scan?

Cofa ukuSkena → iiKhetho zokuSkena kunye neeShedyuli → IiKhetho zoNxibelelwano oluSiseko ▼

• Iisetingi ezicetyiswayo ze "Standard Scan":Iingcebiso zethu kuzo zonke iiwebhusayithi.Ibonelela ngezona zakhono zokubona kakuhle kushishino.
• Khetha ukuseta ubuntununtunu obuphezulu kuphela ukuba iwebhusayithi yakho igqekeziwe:Kubanikazi besiza abacinga ukuba bagqekeziwe.Ngokucokisekileyo ngakumbi, kodwa kunokuvelisa iimpawu zobuxoki.

Ndingenza ntoni ukuba kukho impazamo kwi-Wordfence scanning?

Ukuba usebenzisa iplagin ye-Wordfence ukuskena, lo myalezo wemposiso ulandelayo uyavela:

Iiseva ze-Wordfence zokuskena: impazamo ye-cURL 28: Uqhagamshelwano luphelelwe lixesha emva kwe-10000 millisecond

Ukuseta indlela yokusombulula impazamo yokuskena kwe-Wordfence:

Inyathelo 1: Kwi-Wordfence → "Izixhobo" → "I-Diagnostics" → "Ukhetho lokulungisa ingxaki":
Zama ukwenza okanye ukukhubaza "Qala zonke izikena ukude (zama oku ukuba izikena zakho aziqalwanga kwaye indawo yakho iyafikeleleka esidlangalaleni)"

Inyathelo lesi-2: Qala kwakhona inkonzo ye-Apache ▼

systemctl restart httpd

Emva kokuqalisa kwakhona inkonzo ye-Apache, ihlala isombulula"Wordfence scanning servers: cURL error 28: Connection timed out after 10000 milliseconds" ayilunganga.

Ndingenza ntoni ukuba iskeni se-Wordfence asiphumelelanga?

Yintoni endimele ndiyenze ukuba iplagi ye-Wordfence ngequbuliso iyasilela ukuskena kwaye inqumame ngexesha lenkqubo yokuskena, kwaye oku kulandelayo ukusilela kokuskena kuvela?

Kubonakala ngathi iskeni yangoku ayiphumelelanga. Uhlaziyo lwayo lokugqibela lwemeko belukwimizuzu esi-8 eyadlulayo. Ungaqhubeka ulinde ukuba ibuyele esiqhelweni okanye uyeke kwaye uqalise kwakhona iskeni. Ezinye iisayithi zinokufuna uhlengahlengiso ukuze zisebenzise iskeni ngokuthembekileyo. Cofa apha ukuze ufumane amanyathelo onokuwazama.

Okanye lo myalezo ulandelayo ongaphumeleliyo wokuskena:

Kubonakala ngathi iskeni yangoku ayiphumelelanga. Uhlaziyo lwayo lokugqibela lwemeko belukwimizuzu emi -5 eyadlulayo. Ungaqhubeka ulinde ukuba ibuyele esiqhelweni okanye uyeke kwaye uqalise kwakhona iskeni. Ezinye iisayithi zinokufuna uhlengahlengiso ukuze zisebenzise iskeni ngokuthembekileyo. Cofa apha ukuze ufumane amanyathelo onokuwazama.

Isisombululo:

1. Cofa "Rhoxisa Scan";
2. Zama ukuqalisa kwakhona iplagi ye-Wordfence;
3. kwakhonaZama nje ukuskena ukhuseleko.

Wordfence Plugin Notes

Amanqaku okusebenzisa i-Wordfence Security Plugin:

• Ukuqinisekisa ukuskena okuzinzile, kukulungele ukukhubaza zonke ezinye iiplagi (ukuvumela kuphela iplagi yokhuseleko ye-Wordfence) ngaphambi kokuqala "ukuskena".
• Ekubeni i-Wordfence Security Plugin scans ingabangela i-CPU yomncedisi ophezulu, kuyacetyiswa ukuba uhlolisise kusasa okanye xa i-traffic site incinci.
• Sisebenzisa kuphela umthetho we-Wordfence Security "scan" wekhowudi ekhohlakeleyo, ngoko ke nikela ingqalelo kwindlela yeefayile ezikrokrelayo zephp ezikhuthazwa kwiziphumo zokuskena, ukuze kube lula ukwenza i-backup ngesandla kwaye emva koko ucoce kwaye ucime.

Esi sifundo kwibhlog kaChen Weiliang sixoxa ngohlalutyo lwekhowudi olunobungozi kwiindidi zeWordPress ▼

🔗Zeziphi iikhowudi ezinobungozi kwimixholo yeWordPress? Uhlalutyo lweKhowudi ekhohlakeleyo yeWebhusayithi

Izixhobo zeqela lesithathu Fumana iTrojan ngasemva

Ngapha koko, kukho esinye isixhobo somthonyama esiyeyona ndlela ilungileyo yokufumana ikhowudi ekhohlakeleyo kwiifayile ze-PHP-Microsoft's MSE.

• Sinokukhuphela ifayile ye-PHP yecala leseva ekuhlaleni, ukuze iMicrosoft MSE iskena kunye nokubhaqwa kunokufumana "ikhowudi ekhohlakeleyo", "ihashe leTrojan", kunye ne "backdoor".
• Oku akunamandla ngaphezu kwe-China yasekhaya "i-360 yoKhuseleko loKhuseleko", "Umphathi weKhompyutha yeTencent", kunye ne "Kingshan Drug Bully".
• Sinezixhobo ezininzi zomntu wesithathu esinokukhetha kuzo, nceda ukhethe ngokwemeko yakho.

I-ecosystem ye-WordPress yeyona ilungileyo:

• Ubukho beeplagi zokhuseleko ezifana ne-Wordfence Security, inokusombulula ingxaki yekhowudi enobungozi ye-WordPress.

Ukuqukumbela

Okokugqibela, uChen Weiliang uza kugxininisa kwakhona:

1. Iseti etyebileyo ye-WordPress yeeplagi kunye nemixholo nayo "ikrele elintlangothi-mbini".
2. Wonke umntu kufuneka alumke xa ekhetha kwaye esebenzisa iiplagi kunye nemixholo.
3. Ngenxa yokuba eyona nto iphambili yokungakhuseleki kwe-WordPress iiplagi kunye neengqungquthela, ezingalawulwa ngamagosa e-WordPress.
4. Ingeniswe ngumphuhlisi weqela lesithathu emva kwayo yonke loo nto.
5. Kunconywa ukuba uqhubeke usebenzisa i-plugin yokhuseleko ye-Wordfence ngokusisigxina.
6. Ukucwangcisa ukusebenzisa iwebhusayithiIntengiso ye-IntanethiAbantu, kuyacetyiswa ukuba bathenge iiplagi ze-WordPress zokwenyani kunye nemixholo.
7. Ngenxa yokuba, iinguqulelo zasimahla zinokufihla ingozi "yekhowudi ekhohlakeleyo".