I-plugin yokuphepha ye-Wordfence Security ihlola amasayithi e-WordPress ukuthola ikhodi enonya

Ukuskena nokuxazulula izinkingaWordPressAma-plugin/amathuluzi enkampani yangaphandle ekhodi enonya (ama-trojans/backdoors).

U-Chen WeiliangUkusetshenziswa OkunconyiweI-plugin ye-WordPress- I-plug-in yokuvikela ukuphepha kwe-Wordfence.

• Kuyi-plugin yezokuphepha ye-WordPress esekelwe ku-firewall kanye nokuskena kwekhodi enonya.
• Yakhiwe futhi inakekelwa yiqembu elikhulu, i-100% egxile ekuvikelekeni kwe-WordPress.

Ukulanda i-plugin ye-Wordfence Security

Nakuba kunemojuli ekhokhelwayo, singasebenzisa imojula yamahhala ethi "Skena" ukuskena isayithi lethu le-WordPress lamafayela e-PHP "ngekhodi enobungozi".

Nakuba kunezinga elithile elingelona iqiniso:

• Ikakhulukazi ngenxa yezinzuzo ezingamanga zamanye ama-plugin akhokhelwayo kanye nezingxenye zokubethela zetimu.
• Nokho, ukuthola "ikhodi enonya" nge Wordfence Security nakanjani indlela ephumelelayo.
• Ukuvulwa njalo kwe-plugin ye-Wordfence Security akunconywa.
• Ngenxa yokuvikela i-firewall nokuvikela, kuzodala umthwalo othile kusizindalwazi, okuzothinta ukusebenza okuphelele kwewebhusayithi.

Ngokuvamile, uma udinga ukunika amandla i-plugin, sebenzisa ukuhlola kokuthi "Skena".

Uma usuqedile, vala i-plugin futhi uyigcine ukuze uyisebenzise esikhathini esizayo.

Kungani ngithola ukwaziswa "Ukufakwa okungaphelele kwe-Wordfence"?

Ngenxa yokuthi amanye ama-plug-in okuvikela afanayo afakiwe, kukhona "ukungqubuzana" okudalwe, vele ukhubaze amanye ama-plug-in okuvikela.

Yini okufanele ngiyenze uma i-plug-in ye-Wordfence ingakwazi ukuqaliswa ngempumelelo ngemva kokukhubaza amanye ama-plug-in okuphepha?

Ungazama umyalo we-SSH ukuze uqale kabusha izinsiza ezilandelayo ▼

systemctl restart httpd
systemctl restart nginx
systemctl restart mariadb
systemctl restart memcached

Imiphumela yokuhlolwa, i-plug-in ye-Wordfence iqalwe ngempumelelo.

Indlela yokusetha i-Wordfence?

Ngokuvamile, ungakwazi ukulandela izilungiselelo ezizenzakalelayo ze-plugin ye-Wordfence.

Indlela yokusetha i-plugin ye-Wordfence scan?

Chofoza okuthi Skena → Izinketho zokuskena namashejuli → Izinketho Zohlobo Lweskena Eziyisisekelo ▼

• Izilungiselelo ezinconyiwe ze-"Standard Scan":Izincomo zethu zawo wonke amawebhusayithi.Ihlinzeka ngamakhono okuthola angcono kakhulu embonini.
• Khetha ukusetha ukuzwela okuphezulu kuphela uma iwebhusayithi yakho itshontshiwe:Kubanikazi besayithi abacabanga ukuthi bagqekeziwe.Okuningiliziwe, kodwa kungase kuveze imibono engamanga.

Yini okufanele ngiyenze uma kunephutha ekuskeneni kwe-Wordfence?

Uma usebenzisa i-plugin ye-Wordfence ukuskena, umlayezo wephutha olandelayo uyavela:

Amaseva wokuskena we-Wordfence: iphutha le-cURL 28: Ukuxhumeka kuphelelwe yisikhathi ngemva kwama-millisecond angu-10000

Indlela yokusetha yokuxazulula iphutha lokuskena i-Wordfence:

Isinyathelo 1: Ku-Wordfence → "Amathuluzi" → "Ukuxilongwa" → "Izinketho Zokulungisa Amaphutha":
Zama ukunika amandla noma ukukhubaza "Qala konke ukuskena ukude (zama lokhu uma ukuskena kwakho kungakaqalwa futhi isayithi lakho lifinyeleleka esidlangalaleni)"

Isinyathelo sesi-2:Qala kabusha isevisi ye-Apache ▼

systemctl restart httpd

Ngemva kokuqala kabusha insizakalo ye-Apache, ngokuvamile iyaxazulula"Wordfence scanning servers: cURL error 28: Connection timed out after 10000 milliseconds"akulungile.

Yini okufanele ngiyenze uma ukuskena kwe-Wordfence kwehluleka?

Yini okufanele ngiyenze uma i-plug-in ye-Wordfence ihluleka ngokuzumayo ukuskena futhi ima kancane phakathi nenqubo yokuskena, futhi kuvela umyalo olandelayo wokuhluleka ukuskena?

Ukuskena kwamanje kubonakala kwehlulekile.Ukubuyekezwa kwesimo sayo kokugcina bekuyimizuzu engu-8 edlule.Ungaqhubeka nokulinda ukuthi iqalise kabusha noma ime futhi uqale kabusha ukuskena.Amanye amasayithi angase adinge ukushunwa ukuze aqalise ukuskena ngokwethembeka.Chofoza lapha ukuze uthole izinyathelo ongazizama.

Noma umlayezo olandelayo wokungaphumeleli kokuskena:

Ukuskena kwamanje kubonakala kwehlulekile.Isimo sayo sokugcina sibuyekeziwe 5 imizuzu Ngaphambili.Ungaqhubeka nokulinda ukuthi iqalise kabusha noma ime futhi uqale kabusha ukuskena.Amanye amasayithi angase adinge ukushunwa ukuze aqalise ukuskena ngokwethembeka. Chofoza lapha ukuze uthole izinyathelo ongazizama.

Isixazululo:

1. Chofoza "Khansela Scan";
2. Zama ukuqala kabusha i-plugin ye-Wordfence;
3. kwaphinda lokhoVele uzame ukuskena kwezokuvikela.

I-Wordfence Plugin Notes

Amanothi ngokusebenzisa i-Wordfence Security Plugin:

• Ukuze uqinisekise ukuskena okuzinzile, kungcono ukukhubaza wonke amanye ama-plugin (ama-plugin okuvikela e-Wordfence kuphela anikwe amandla) ngaphambi kokuqala "Skena".
• Njengoba ukuskena kwe-Wordfence Security Plugin kungabangela ukulayisha kwe-CPU yesiphakeli esiphezulu, kunconywa ukuskena ekuseni kakhulu noma lapho ukugcwala kwesayithi kukuncane.
• Sisebenzisa kuphela umthetho we-Wordfence Security "wokuskena" wekhodi enonya, ngakho-ke qaphela indlela yamafayela asolisayo we-php afakwe emiphumeleni yokuskena, ukuze kube lula ukwenza isipele ngesandla bese uwahlanza futhi uwasuse.

U-Chen WeiliangLesi sifundo sebhulogi sishiwo, ukuhlaziywa kwekhodi enonya kwetimu ye-WordPress ▼

Ithini ikhodi enonya yetimu ye-WordPress?Ukuhlaziya ikhodi enonya yewebhusayithi

Cishe u-90% ubangelwa "ikhodi enonya". Ngaphezu kwe-80% yamasayithi we-WordPress angama-plugin aletha ikhodi enonya kuma-akhawunti wewebhusayithi (kunama-plugin ewebhusayithi asemthethweni, ama-plugin okusakaza ku-inthanethi, njll.).Enye ukuthi itimu (inguqulo eqhekekile, itimu ephikisiwe) ithi "ikhodi enonya" noma "ngemuva...

Amathuluzi Enkampani Yangaphandle Thola I-Trojan Backdoors

Eqinisweni, kukhona elinye ithuluzi lendabuko eliyindlela engcono kakhulu yokuthola ikhodi enonya kumafayela e-PHP - i-MSE ye-Microsoft.

• Singadawuniloda ifayela le-PHP eseceleni kweseva endaweni, ukuze ukuskena kwe-Microsoft MSE nokutholwa kungathola "ikhodi enonya", "i-Trojan horse", kanye "nomnyango ongemuva".
• Lokhu akunamandla nje kuphela kune-China "360 Security Guard", "Tencent Computer Manager", kanye "ne-Kingshan Drug Bully".
• Sinamathuluzi amaningi ezinkampani zangaphandle ongakhetha kuwo, sicela ukhethe kuye ngesimo sakho.

I-ecosystem ye-WordPress ihamba phambili ngempela:

• Ukuba khona kwama-plugin okuphepha afana ne-Wordfence Security, kungaxazulula inkinga yekhodi enonya ye-WordPress.

Isiphetho

Ekugcineni,U-Chen WeiliangKuzogcizelelwa futhi:

1. Isethi ecebile ye-WordPress' yama-plugin nezindikimba nayo "iyinkemba esika nhlangothi zombili".
2. Wonke umuntu kufanele aqaphele lapho ekhetha futhi esebenzisa ama-plugin nezindikimba.
3. Ngoba isici esiyinhloko sokungavikeleki kwe-WordPress ama-plugin nezindikimba, ezingalawulwa ngokusemthethweni yi-WordPress.
4. Ithunyelwe unjiniyela wenkampani yangaphandle phela.
5. Kunconywa ukuthi uqhubeke usebenzisa i-plugin yezokuphepha ye-Wordfence unomphela.
6. Ukuze uhlele ukusebenzisa iwebhusayithiI-Internet MarketingBantu, kunconywa ukuthi uthenge ama-plugin wangempela we-WordPress nezindikimba.
7. Ngoba izinguqulo zamahhala zingafihla ingozi "yekhodi enonya".