该插件尚未通过WordPress的最新3个主要版本进行测试。 当与较新版本的WordPress一起使用时,可能不再受到维护或支持,并且可能会存在兼容性问题。

LH HSTS

描述

This plugin send the proper headers for full ssl security. For more information on what this is and why it is important visit: http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

The options are preset to enable browsers to preload the HSTS directive but can be overwritten by filters which are clearly documented in the code.

Did you find this plugin helpful? Please consider writing a review.

To update the max-age settings, add the following code to your functions.php

add_filter('lh_hsts_max_age', 'modify_ls_hsts_max_age_func');

function modify_ls_hsts_max_age_func( $max_age ){
    return false;
}
    `

To update the subdomain settings, add the following code to your functions.php

add_filter(‘lh_hsts_subdomain’, ‘modify_ls_hsts_subdomain_func’);

function modify_ls_hsts_subdomain_func( $subdomain ){
return false;
}
`

To update the preload setting, add the following code to your functions.php

add_filter('lh_hsts_preload', 'modify_ls_hsts_preload_func');

function modify_ls_hsts_preload_func( $preload ){
    return false;
}
    `

To update the redirect setting, add the following code to your functions.php

add_filter(‘lh_hsts_redirect’, ‘modify_ls_hsts_redirect_func’);

function modify_ls_hsts_redirect_func( $redirect ){
return false;
}
`

安装

  1. Upload the entire lh-hsts folder to the /wp-content/plugins/ directory.
  2. 通过 WordPress 的“插件”菜单以激活本插件。

常见问题

How do I change the behaviour of this plugin?

Through filters, all of which are commented in the code and will be documented below.

评价

2021 年 1 月 23 日 4 回复
Not only does this not work - YOU CANNOT DISABLE OR REMOVE HSTS after this plugin! I can't access my website anymore, because this 'author' made it impossible to remove or disable hsts - I disabled and removed the plugin, cleared cache, rebooted the server - HSTS is still on!!!!!!
2019 年 2 月 21 日 1 回复
It does what it says and its a simple process. I haven't had any issues thus far. Great job Asitha & Shaw Factor
2018 年 3 月 20 日
Using with WordPress 4.9.4 and can verify the correct header is being set. Thanks!
2017 年 9 月 26 日
Nice work! i was facing problem and this plugin fix this issue for me ,Thank you! "Not Authorized to View This Page [CFN #0004]"
2017 年 2 月 13 日
Works as advertised and can be configured via a manual edit of the code
阅读所有6条评价

贡献者及开发者

“LH HSTS” 是开源软件。 以下人员对此插件做出了贡献。

贡献者

将“LH HSTS”翻译成您的语言。

对开发感兴趣吗?

您可以浏览代码,查看SVN仓库,或通过RSS订阅开发日志

更新日志

1.00 – February 28, 2016

  • Initial release

1.10 – March 28, 2016

  • Use correct domain

1.11 – April 02, 2017

  • Added class exists check

1.20 – May 11, 2017

  • Just made everything look pretty and structured

1.21 – May 24, 2017

  • Bug fix

1.22 – January 10, 2018

  • Singleton pattern

1.23 – March 04, 2018

  • Fixed fiulter name

1.24 – August 19, 2018

  • get_home_url and other minor stuff

1.25 – May 16, 2019

  • pprevent direct access to the php file, minor security, and compatibility bump