Beskrivning
Detta tillägg låter dig automatiskt lägga in länkar för Project Honeypot på alla dina sidor och blockera IP-adresser som finns med på listan Http:BL från Project Honeypot. Man kan välja att även blockera IP-adresser som är blockerade av Spamcop i deras svartlistning.
För att förhindra bottar från att genomföra råstyrkeattacker och att genomsöka din webbplats finns det ett alternativ där du kan blockera användare som gjort ett visst antal misslyckade inloggningsförsök eller som använder blockerade användarnamn. Du kan även blockera IP-adresser som ger upphov till många fel av typ 404. Tillägget förhindrar även listning av användarkonton i WordPress och blockerar automatiskt alla som försöker sig på detta.
Skärmdumpar
Inställningssida 
Lista över blockerat 
Åtgärdssida 
Vitlistningssida
Installation
- Extract the downloaded Zip file.
- Upload the ’honeypot-toolkit’ directory to the
/wp-content/plugins/directory - Activate the plugin through the ’Plugins’ menu in WordPress
- Use the menu item called Honeypot Toolkit to get the plugin set up.
Du bör registrera ett konto på webbplatsen för Project Honeypot på https://www.projecthoneypot.org om du vill använda Project Honeypot.
Vanliga frågor
-
Hur får jag tag på skriptet för min honungsfälla?
-
Du behöver registrera ett konto på https://www.projecthoneypot.org. Sedan går du till https://www.projecthoneypot.org/manage_honey_pots.php för att konfigurera din honungsfälla och följer instruktionerna där. När skriptet har installerats på din webbplats lägger du in URL:en för ditt skript på inställningssidan för Honeypot Toolkit.
Recensioner
Bidragsgivare och utvecklare
”Honeypot Toolkit” är programvara med öppen källkod. Följande personer har bidragit till detta tillägg.
Bidragande personer
”Honeypot Toolkit” har översatts till 2 språk. Tack till översättarna för deras bidrag.
Översätt ”Honeypot Toolkit” till ditt språk.
Intresserad av programutveckling?
Läs programkoden, kika på SVN-filförvaret eller prenumerera på utvecklarloggen via RSS.
Ändringslogg
4.2.1
Fixed call to explode that was missing the delimiter
4.2
Changed how the server variables are handled. The variables can be a comma delimited list.
Added rel=”nofollow” to honeypot links.
4.1.2
Fixed deprecated message for PHP 7.x
4.1.1
Fixed issue on multisite installs where the plugin would check for temporary whitelist entries in a database table prefixed with the current site DB prefix. Changed $wpdb->prefix to $wpdb->base_prefix
4.1
Added functionality to temporarily whitelist an IP if it has passed the Project Honeypot and Spamcop blacklist checks. This prevents the same IP being checked multiple times while a user is visiting a site.
Fix for dropdown css on IP list pages.
4.0.9
Added the ability to enter a . in the band username field.
Added functionality to automatically whitelist the web servers IP address so it doesn’t block itself while doing a health check.
4.0.8
Improved input validation and sanatization.
Added a checkbox to the IP lists so all entries can be selected.
Added functionality to submit the search query when the enter key is pressed in the search box.
Changed the way notes are stored so line breaks will not be stripped.
4.0.7
Fixing bug with login monitoring. IP v6 addresses were not properly being blocked.
Added better notes when a user is blocked.
4.0.6
Updating scripts to use my new domain name for documentation links so plugins like wordfence don’t alert users.
Updating readme to reflect compatibility with WP 5.1.
4.0.5
Fixed styling issue with jQuery UI dialog.
Changed IP links in the admin to go to domaintools.com since they can handle IPv6 addresses.
4.0.4
Changed from using wp_get_sites to get_sites to remove a deprecated message and stop using a deprecated function.
Changed functionality when updating the check interval for Project Honeypot and Spamcop lists. Now it will reset the timeout when a new interval is set.
4.0.3
Improved functionality to check blocked IP addresses on the SPamcop and Project Honeypot lists.
4.0.2
Fixed typo to correct DB prefix in activate function
4.0.1
Made change to ensure the activate function is called when a new version is released.
4.0
Added support for blocking IPv6 addresses.
Added better support for blocking proxy addresses.
Changed validation functionality to use filter_var for IP addresses.
3.2.3
Added temporary patch for IP v6 addresses.
3.2.2
Fixed bug with transient set and get for blacklist check.
3.2.1
Fixed bug that prevented IPs on the blacklist from being removed if they weren’t on the Spamcop or Project Honeypot lists anymore.
Fixed a bug that moved the dialog box above the top of the screen during an ajax call.
3.2
Changed the process to hide usernames so that it processes 100 at a time. This way it doesn’t fail if there is a large number of users.
Hid the option to show IP lists on individual sites from the settings page if the site is not a multisite install.
3.1
Forced user nicenames to be md5 hashed when usernames are hidden regardless of whether they match the user login or not.
3.0
Added option to change an authors user nicename to an md5 hash to hide their real username.
Changed the plugin to be a network only plugin. Now all IP lists are managed at the network level for multisite installs.
2.2
Fixed a bug that left details of the IP list entries escaped for MySQL when displaying them on the admin page.
Fixed a bug that prevents the user from selecting Project Honeypot or Spamcop Entry when editing an entry in the blocked list.
2.1
Moved the code to sanitize server variables for use in determining the visitors IP so that it will not throw an undefined index warning.
2.0
Added search functionality to search the different IP lists and make it easier to find an entry.
Fixed a bug that stopped the loading indicator from displaying when data was submitted.
1.2
Added indicator to show sorting direction in ip lists.
Added tabs to the settings page.
1.1
Added options to paging so you can go to any page in the list and change the type of records in the lists.
1.0
Added paging to the ip list pages.
0.2
Adding sanitization to the server keys used to prevent injection from request headers.
Ensuring that the IP being checked is an IP 4 address.
Fixed typo in the spamcop check function that checked the address of the visitor and not the address on the blocked list.
0.1
Första versionen.