描述
GhostLock Hide Login is a lightweight WordPress security plugin that combines login URL protection and automatic brute-force attack prevention in a single plugin.
Unlike many security plugins that require manual configuration, GhostLock Hide Login starts protecting your website immediately after activation.
Features:
- Hide wp-login.php
- Protect wp-admin access
- Change the default WordPress login URL
- Automatic brute-force attack protection
- Automatically block suspicious IP addresses
- Detect attacker countries
- Security activity logs
- Whitelist trusted IP addresses
- Redirect attackers to custom 404 pages
- Show custom blocked access pages
- Lightweight and easy to use
- No complex configuration required
GhostLock Hide Login helps reduce unauthorized login attempts and improves WordPress website security with minimal setup.
Privacy
GhostLock Hide Login uses the third-party service ipwho.is (ipwhois.io) to detect attacker countries.
Data Sent:
– Visitor IP address
Purpose:
– Country detection for security monitoring and attack logging
Service URL:
https://ipwhois.io/
Terms of Service:
https://ipwhois.io/terms
安装
Install from WordPress Admin Dashboard
- Go to Plugins Add New in your WordPress admin dashboard.
- Click Upload Plugin.
- Upload the
ghost-hide-login.zipfile. - Click Install Now.
- Activate the plugin through the Plugins screen.
- Go to Settings GhostLock Hide Login.
- Configure your custom login URL and security settings.
Manual Installation
- Upload the plugin files to the
/wp-content/plugins/ghost-hide-logindirectory. - Activate the plugin through the ‘Plugins’ screen in WordPress.
- Go to Settings GhostLock Hide Login.
- Configure your plugin settings.
常见问题
-
Will this hide wp-login.php?
-
Yes. Direct access to wp-login.php and wp-admin can be restricted and protected using your custom login URL.
-
Does the plugin automatically protect against brute-force attacks?
-
Yes. GhostLock Hide Login automatically limits suspicious login attempts and blocks malicious IP addresses after activation without additional setup.
-
Can I unblock IPs manually?
-
Yes. You can manage and remove blocked IP addresses from the plugin settings page.
-
Does this plugin use third-party services?
-
Yes. Country detection uses the ipwho.is (ipwhois.io) service over HTTPS. Results are cached for 24 hours per IP address.
评价
此插件暂无评价。
贡献者及开发者
更新日志
1.0.4
- Fix Plugin Check warnings by prefixing local variables in the admin settings page.
- Shorten the readme short description to the WordPress 150-character limit.
1.0.3
- Stop trusting spoofable forwarding headers for client IP detection.
- Use REMOTE_ADDR by default for brute-force and country-cache keys.
- Add the
ghost_login_client_ipfilter for trusted reverse-proxy integrations.
1.0.1
- Initial release
- Hide wp-login.php
- Protect wp-admin
- Custom login URL support
- Automatic brute-force protection
- Automatic IP blocking
- Country detection
- Security logs
- IP whitelist
- Custom 404 redirect page
- Custom blocked page support