Title: Delete All Comments Author: osolutions Published: 2013 年 6 月 12 日 Last modified: 2016 年 9 月 16 日 --- 搜索插件 ![](https://s.w.org/plugins/geopattern-icon/delete-all-comments.svg) # delete-all-comments 作者：[osolutions](https://profiles.wordpress.org/osolutions/) * [详情](https://cn.wordpress.org/plugins/delete-all-comments/#description) * [评价](https://cn.wordpress.org/plugins/delete-all-comments/#reviews) * [开发进展](https://cn.wordpress.org/plugins/delete-all-comments/#developers) [支持](https://wordpress.org/support/plugin/delete-all-comments/) ## 描述 此插件已于 2017 年 11 月 28 日 关闭，无法下载。 原因：未知。 ## 评价 ![](https://secure.gravatar.com/avatar/323129c7df166f8cb620034689d819d6982ec758f4456d335b1a35f02e8b56ab? s=60&d=retro&r=g) ### 󠀁[Was Hacked Twice](https://wordpress.org/support/topic/was-hacked-twice/)󠁿 [ubound](https://profiles.wordpress.org/ubound/) 2016 年 11 月 20 日 I am sorry to the author that I have to give this one star review, but I feel it’s important to warn others about potential dangers of using this plugin. Truth be told: I used this plugin for a long time and it was perfect. Then something happened after last update. The plugin stopped working, but I was too busy to figure that out. So I left it without deleting and forgot about it. Then after some time Wordfence alerts me about admin login from another country with an administrative username I never created. Hacked! I was alerted only one hour after they broke into my site, so I it wasn’t hard to undo the damage. That’s when I began to suspect that “Delete All Comments” was used as a backdoor to my site. I have a similar set up across several sites, but only the one with “Delete All Comments” was hacked. I cleaned up their files and deleted “Delete All Comments”. For about 3 weeks I lived peacefully. But today again, Wordfence alerted me about administrator’s login but this time with MY username but from India! (I am not in India and I just woke up when I was alerted). Thankfully, it happened so that only two minutes passed since their login and till I noticed the problem. Again, I rushed to create a new administrator and deleted the old one. They had not much time to do the damage, but they were fast enough because in my cPanel the latest modified file was in plugins folder and belonged to “Delete All Comments” (which was definitely deleted, so they installed it again!). I cleaned up everything again but still need to spend some time figuring out how they were able to enter again this time. It must be that simply deleting “Delete All Comments” doesn’t remove everything that needs to be removed and leaves some type of a backdoor. So no, don’t install it. Thanks to the author for all the type( about two years) that I was able to use it without problems, but now I wouldn’t recommend this plugin. ![](https://secure.gravatar.com/avatar/62dc988cfbd2325fb6948880d17aa2294b02433b82f568dc4b2e5415d570d975? s=60&d=retro&r=g) ### 󠀁[DO NOT USE](https://wordpress.org/support/topic/do-not-use-20/)󠁿 [rixorcizm](https://profiles.wordpress.org/rixorcizm/) 2016 年 11 月 8 日 Sadly I can’t endorse this plugin. I work for a UK based host that actively tracks compromises on customer based sites and the number of compromises that relate to this plugin is steadily growing. It’s entirely exploitable, allowing (people who know what they’re doing) the ability to upload unverified files that could do pretty much anything within reason. I’ve had an instance recently where a file was uploaded via a POST request to the plugins main file (delete-all-comments.php), and that’s then injected a user into the DB, allowing someone to login to the relevant admin area. Until this has been verified fixed, or at least updated in some manner – do yourself a favour and stay the hell away. ![](https://secure.gravatar.com/avatar/ae4c8d43d817e23537269d61105015c2aff0e1cd9fab376a895b5d7349b46414? s=60&d=retro&r=g) ### 󠀁[ALERT! THIS PLUGIN HACK MI SITE!!!!](https://wordpress.org/support/topic/alert-this-plugin-hack-mi-site/)󠁿 [krola](https://profiles.wordpress.org/krola/) 2016 年 10 月 13 日 After Installing, someone install a php in my site and delete my theme. ![](https://secure.gravatar.com/avatar/9149875a8cf2875474223005576f7c412e7b4d07df82160adc687a8252227a5d? s=60&d=retro&r=g) ### 󠀁[Great plugin](https://wordpress.org/support/topic/great-plugin-10013/)󠁿 [Hareesh S](https://profiles.wordpress.org/hareesh-pillai/) 2016 年 9 月 3 日 Deleted about 10,000 comments in a second. Thanks! ![](https://secure.gravatar.com/avatar/4a23ff7e2e2b8dfb4301b43dc5d8e53a834a3ee4f94f175df4734723742eaa56? s=60&d=retro&r=g) ### 󠀁[DELETED! Very happy about that.](https://wordpress.org/support/topic/deleted-very-happy-about-that/)󠁿 [carricdesign](https://profiles.wordpress.org/carricdesign/) 2016 年 9 月 3 日 Had to delete over 50,000 comments. Worked in seconds. Thanks! ![](https://secure.gravatar.com/avatar/1a9c1c1a355b321d96df41401a828b782f0def4295c56b1da5be769e1195169e? s=60&d=retro&r=g) ### 󠀁[Internal error occured. Please try again later.](https://wordpress.org/support/topic/internal-error-occured-please-try-again-later/)󠁿 [rolandaa](https://profiles.wordpress.org/rolandaa/) 2016 年 9 月 3 日 Got 24k comments to get rid off! This plugin is not working on two of our sites, the rest 38 sites it works ok tough! Regards / Roland [ 阅读所有51条评价 ](https://wordpress.org/support/plugin/delete-all-comments/reviews/) ## 贡献者及开发者 「Delete All Comments」是开源软件。 以下人员对此插件做出了贡献。 贡献者 * [ Ganesh Chandra ](https://profiles.wordpress.org/osolutions/) [帮助将「Delete All Comments」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/delete-all-comments) ### 对开发感兴趣吗? 您可以[浏览代码](https://plugins.trac.wordpress.org/browser/delete-all-comments/)， 查看[SVN仓库](https://plugins.svn.wordpress.org/delete-all-comments/)，或通过[RSS](https://plugins.trac.wordpress.org/log/delete-all-comments/?limit=100&mode=stop_on_copy&format=rss) 订阅[开发日志](https://plugins.trac.wordpress.org/log/delete-all-comments/)。 ## 额外信息 * 版本 **2.0** * 最后更新：**9 年前** * 活跃安装数量 **N/A** * WordPress 版本 ** 4.0 或更高版本 ** * 已测试的最高版本为 **4.6.30** * 语言 * [English (US)](https://wordpress.org/plugins/delete-all-comments/) * [高级视图](https://cn.wordpress.org/plugins/delete-all-comments/advanced/)