Loginizer — это плагин для WordPress, который помогает бороться с атаками типа «брутфорс», блокируя вход для IP-адреса после того, как он достигнет максимально допустимого количества повторных попыток. С помощью Loginizer можно составлять черные или белые списки IP-адресов для входа в систему. Для повышения безопасности вашего сайта вы можете использовать и другие функции, такие как двухфакторная авторизация, reCAPTCHA, вход без пароля и т.д.
Loginizer активно используется более чем 1000000+ WordPress-сайтами.
Вы можете найти нашу официальную документацию по адресу https://loginizer.com/docs. Мы также активно участвуем в форумах поддержки сообщества на сайте wordpress.org, если вы один из наших бесплатных пользователей. Наша система заявок на премиальную поддержку находится по адресу https://loginizer.deskuss.com
Бесплатные функции :
- Защита от » брутфорса». IP-адреса, пытающиеся выполнить «грубую силу» на вашем сайте, будут заблокированы на 15 минут после 3 неудачных попыток входа. После многократной блокировки IP блокируется на 24 часа. Данная конфигурация используется по умолчанию и может быть изменена со страницы Loginizer -> Brute force в панели администратора WordPress.
- Журнал неудачных попыток входа в систему.
- Чёрный список IP адресов
- Белый список IP-адресов
- Пользовательские сообщения об ошибках при неудачном входе в систему.
- Проверка прав доступа к важным файлам и папкам.
- Allow only Trusted IP.
- Blocked Screen in place of the Login page.
- Email Notification on successful login.
Get Support and Pro Features
Get professional support from our experts and pro features to take your site’s security to the next level with Loginizer-Security.
Pro Features :
- MD5 Checksum — of Core WordPress Files. The admin can check and ignore files as well.
- PasswordLess Login — At the time of Login, the username / email address will be asked and an email will be sent to the email address of that account with a temporary link to login.
- Two Factor Auth via Email — On login, an email will be sent to the email address of that account with a temporary 6 digit code to complete the login.
- Two Factor Auth via App — The user can configure the account with a 2FA App like Google Authenticator, Authy, etc.
- Login Challenge Question — The user can setup a Challenge Question and Answer as an additional security layer. After Login, the user will need to answer the question to complete the login.
- reCAPTCHA — Google’s reCAPTCHA v3/v2, Cloudflare Turnstile, hCAPTCHA can be configured for the Login screen, Comments Section, Registration Form, etc. to prevent automated brute force attacks. Supports WooCommerce as well.
- Rename Login Page — The Admin can rename the login URL (slug) to something different from wp-login.php to prevent automated brute force attacks.
- Rename WP-Admin URL — The Admin area in WordPress is accessed via wp-admin. With loginizer you can change it to anything e.g. site-admin
- CSRF Protection — This helps in preventing CSRF attacks as it updates the admin URL with a session string which makes it difficult and nearly impossible for the attacker to predict the URL.
- Rename Login with Secrecy — If set, then all Login URL’s will still point to wp-login.php and users will have to access the New Login Slug by typing it in the browser.
- Disable XML-RPC — An option to simply disable XML-RPC in WordPress. Most of the WordPress users don’t need XML-RPC and can disable it to prevent automated brute force attacks.
- Rename XML-RPC — The Admin can rename the XML-RPC to something different from xmlrpc.php to prevent automated brute force attacks.
- Username Auto Blacklist — Attackers generally use common usernames like admin, administrator, or variations of your domain name / business name. You can specify such username here and Loginizer will auto-blacklist the IP Address(s) of clients who try to use such username(s).
- New Registration Domain Blacklist — If you would like to ban new registrations from a particular domain, you can use this utility to do so.
- Change the Admin Username — The Admin can rename the admin username to something more difficult.
- Auto Blacklist IPs — IPs will be auto blacklisted, if certain usernames saved by the Admin are used to login by malicious bots / users.
- Disable Pingbacks — Simple way to disable PingBacks.
- SSO — Single Sign-on, let any user access to your WordPress Dashboard without the need to share username or password.
- Limit Concurrent Logins: It prevents user to login from different devices concurrently, you can define how many devices you want to allow, and how you want to restrict the user when concurrent limit is reached.
Features in Loginizer include:
- Blocks IP after maximum retries allowed
- Extended Lockout after maximum lockouts allowed
- Email notification to admin after max lockouts
- Blacklist IP/IP range
- Whitelist IP/IP range
- Check logs of failed attempts
- Create IP ranges
- Delete IP ranges
- Licensed under LGPLv2.1
- Safe & Secure