Title: OptimizeSho
Author: ishayanabad
Published: <strong>2026 年 7 月 21 日</strong>
Last modified: 2026 年 8 月 7 日

---

搜索插件

![](https://ps.w.org/optimizesho/assets/banner-772x250.png?rev=3620375)

![](https://ps.w.org/optimizesho/assets/icon-256x256.png?rev=3618967)

# OptimizeSho

 作者：[ishayanabad](https://profiles.wordpress.org/ishayanabad/)

[下载](https://downloads.wordpress.org/plugin/optimizesho.1.2.0.zip)

 * [详情](https://cn.wordpress.org/plugins/optimizesho/#description)
 * [评价](https://cn.wordpress.org/plugins/optimizesho/#reviews)
 *  [安装](https://cn.wordpress.org/plugins/optimizesho/#installation)
 * [开发进展](https://cn.wordpress.org/plugins/optimizesho/#developers)

 [支持](https://wordpress.org/support/plugin/optimizesho/)

## 描述

OptimizeSho boosts your WordPress site speed, strengthens security, and cleans your
database. It provides fine-grained control over outgoing HTTP requests, resource
loading order, lazy loading, Google Fonts removal, jQuery Migrate removal, and much
more – all from a single admin panel.

**Key Features:**

 * HTTP Request Management: Monitor and block external requests to slow third-party
   services.
 * Resource Loading Optimization: Preconnect, preload, and reorder CSS/JS in the`
   <head>` for faster rendering.
 * Google Fonts Control: Disable Google Fonts globally or per context (admin/frontend).
 * Lazy Loading: Add native `loading="lazy"` to images, iframes, and videos.
 * Minification: Minify HTML, inline CSS, and inline JS; remove HTML comments.
 * Brotli Compression: Serve pages compressed with Brotli (requires PHP extension).
 * JavaScript Tweaks: Remove jQuery Migrate, add async/defer to scripts.
 * Heartbeat Control: Adjust Heartbeat API interval or disable it completely.
 * Security Hardening: Disable XML-RPC, REST API restrictions, file editor, user
   enumeration, and add security headers.
 * Firewall: Advanced security layer with rate limiting, pattern scanning (XSS, 
   SQLi, etc.), upload scanning, User-Agent blocking, and Referer check. Fully configurable
   with whitelist options.
 * Firewall Auto-unblock: Automatically unblock IPs after a configurable duration;
   administrators are exempt from rate limits.
 * Blocked IP Management: View and manually unblock blocked IPs from the admin UI.
 * Blocked Pattern Management: View and remove manually added block patterns.
 * WP2Shell Protection: Extra scanning for remote code execution patterns (system,
   exec, eval, base64_decode, etc.) to block exploit attempts.
 * Database Cleanup: Remove revisions, auto-drafts, trashed posts/comments, transient
   data, and optimize database tables.
 * Elementor Optimization: Disable Font Awesome and load assets only on Elementor
   pages.
 * Import/Export Settings: Easily transfer your configuration between sites.
 * Debug Logging: Track outgoing request times to identify slow external calls.

## 屏幕截图

[[

[[

[[

[[

[[

[[

[[

[[

## 安装

 1. Upload the `optimizesho` folder to the `/wp-content/plugins/` directory.
 2. Activate the plugin through the ‘Plugins’ menu in WordPress.
 3. Navigate to **OptimizeSho** in the admin sidebar to configure settings.

## 常见问题

### Does Brotli compression work on all servers?

No. Brotli requires the `brotli` PHP extension. If absent, the option remains available
but will not function.

### Will disabling Google Fonts break my theme?

Some themes heavily rely on Google Fonts; test on a staging site first. You can 
limit disabling to admin or frontend only.

### Can I use this alongside caching plugins?

Yes, but avoid enabling overlapping features (like minification) to prevent conflicts.

### What does the Firewall do?

The firewall adds an extra layer of security by limiting request rates, scanning
for malicious patterns (XSS, SQLi, etc.), blocking dangerous file uploads, blocking
known malicious User-Agents, and verifying Referer headers for POST requests. All
features can be toggled individually and you can whitelist IPs and paths. Administrators
are automatically excluded from rate limiting, and blocked IPs are automatically
unblocked after a configurable duration.

### What is WP2Shell Protection?

WP2Shell Protection is a dedicated security toggle that scans incoming requests 
for common remote code execution payloads (e.g., `system(`, `exec(`, `eval(`, `base64_decode(`,
etc.) and blocks them immediately. This works independently of the regular pattern
scanner for an extra layer of defense.

## 评价

此插件暂无评价。

## 贡献者及开发者

「OptimizeSho」是开源软件。 以下人员对此插件做出了贡献。

贡献者

 *   [ ishayanabad ](https://profiles.wordpress.org/ishayanabad/)

「OptimizeSho」插件已被翻译至 1 种本地化语言。 感谢[所有译者](https://translate.wordpress.org/projects/wp-plugins/optimizesho/contributors)
为本插件所做的贡献。

[帮助将「OptimizeSho」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/optimizesho)

### 对开发感兴趣吗?

您可以[浏览代码](https://plugins.trac.wordpress.org/browser/optimizesho/)，查看[SVN仓库](https://plugins.svn.wordpress.org/optimizesho/)，
或通过[RSS](https://plugins.trac.wordpress.org/log/optimizesho/?limit=100&mode=stop_on_copy&format=rss)
订阅[开发日志](https://plugins.trac.wordpress.org/log/optimizesho/)。

## 更新日志

#### 1.2.0

 * **Improvement:** Removed unused `render_*` methods from the main class to reduce
   code bloat and improve maintainability.
 * **Improvement:** Enhanced the `scan_upload` method in the Firewall class to use`
   WP_Filesystem` instead of `file_get_contents` for better security and compatibility.
 * **Improvement:** Added a proper check for the `brotli_compress` function in the`
   final_output_handler` method to prevent errors on servers without the Brotli 
   extension.
 * **Improvement:** Added a data size limit (1 MB) in the `check_wp2shell` method
   to prevent excessive memory usage.
 * **Security/Standards:** Fixed all WordPress Coding Standards violations reported
   by the Plugin Review team, including nonce verification issues and missing translators
   comments.
 * **Update:** Bumped version to 1.2.0 and updated stable tag in readme.

#### 1.1.3

 * **New:** WP2Shell Protection – toggleable security check that blocks remote code
   execution patterns in all incoming requests.
 * Updated version and readme.

#### 1.1.2

 * Bug fixed.

#### 1.1.1

 * Fixed coding standards issues (nonce verification, direct DB queries, file system
   operations) to comply with WordPress.org guidelines.
 * Replaced direct file operations (`fopen`, `fread`, `fclose`) with WP_Filesystem.
 * Added `phpcs:ignore` annotations where bypass is necessary and safe.
 * Bumped version and tested up to WP 7.0.

#### 1.1.0

 * **Merge:** Security and Firewall tabs combined into one unified tab.
 * **New:** List of blocked patterns with delete button in the UI.
 * **New:** List of currently blocked IPs with expiration time and unblock button.
 * **New:** Configurable auto-unblock duration (seconds) for rate-limited IPs.
 * **New:** Firewall module with rate limiting, pattern scanning, upload scanning,
   User-Agent blocking, and Referer check.
 * **New:** Whitelist options for IPs and paths in Firewall.
 * **New:** Admin UI for Firewall settings.
 * **Improvement:** Administrators (manage_options) are now excluded from rate limiting
   to prevent self-lockout.
 * **Improvement:** Blocked IPs are stored persistently and automatically cleaned
   up when expired.
 * **Improvement:** Added AJAX actions for unblocking IPs and saving block duration.
 * Updated translations and minor improvements.
 * Bug fixed.

#### 1.0.0

 * Initial release on WordPress.org.
 * Complete rewrite for modern PHP 7.4+ and WordPress 6.7.
 * Added Brotli support, Elementor conditional assets, REST API link removal, import/
   export.

## 额外信息

 *  版本 **1.2.0**
 *  最后更新：**3 周前**
 *  活跃安装数量 **不到10**
 *  WordPress 版本 ** 5.8 或更高版本 **
 *  已测试的最高版本为 **7.0.4**
 *  PHP 版本 ** 7.4 或更高版本 **
 *  语言
 * [English (US)](https://wordpress.org/plugins/optimizesho/) 和 [Persian](https://fa.wordpress.org/plugins/optimizesho/).
 *  [翻译成简体中文](https://translate.wordpress.org/projects/wp-plugins/optimizesho)
 * 标签
 * [database](https://cn.wordpress.org/plugins/tags/database/)[optimization](https://cn.wordpress.org/plugins/tags/optimization/)
   [performance](https://cn.wordpress.org/plugins/tags/performance/)[security](https://cn.wordpress.org/plugins/tags/security/)
   [speed](https://cn.wordpress.org/plugins/tags/speed/)
 *  [高级视图](https://cn.wordpress.org/plugins/optimizesho/advanced/)

## 评级

尚未提交反馈。

[您的评价](https://wordpress.org/support/plugin/optimizesho/reviews/#new-post)

[查看全部评论](https://wordpress.org/support/plugin/optimizesho/reviews/)

## 贡献者

 *   [ ishayanabad ](https://profiles.wordpress.org/ishayanabad/)

## 支持

有话要说吗？是否需要帮助？

 [查看支持论坛](https://wordpress.org/support/plugin/optimizesho/)

## 捐助

您愿意支持这个插件的发展吗?

 [ 捐助此插件 ](https://my.mizbanfa.net/aff.php?aff=4909)