Title: SiteGuard WP Plugin Author: jp-secure Published: Hydref 22, 2014 Last modified: Mehefin 29, 2026 --- Search plugins ![](https://ps.w.org/siteguard/assets/banner-772x250.png?rev=1011863) ![](https://ps.w.org/siteguard/assets/icon-256x256.png?rev=1011863) # SiteGuard WP Plugin Gan [jp-secure](https://profiles.wordpress.org/jp-secure/) [Llwytho i lawr](https://downloads.wordpress.org/plugin/siteguard.1.8.6.zip) * [Details](https://cy.wordpress.org/plugins/siteguard/#description) * [Reviews](https://cy.wordpress.org/plugins/siteguard/#reviews) * [Installation](https://cy.wordpress.org/plugins/siteguard/#installation) * [Development](https://cy.wordpress.org/plugins/siteguard/#developers) [Cefnogaeth](https://wordpress.org/support/plugin/siteguard/) ## Disgrifiad SiteGuard WP Plugin helps protect WordPress sites by strengthening login and admin- area security. It helps reduce brute-force login attacks, password list attacks, comment spam, and unauthorized access to `/wp-admin/`. #### Main Features * Admin Page IP Filter: Restricts wp-admin access to IP addresses that have successfully logged in. * Rename Login: Changes the URL of the login page from `wp-login.php` to a custom path. * CAPTCHA: Adds CAPTCHA to login, comment, password reset, and user registration forms. * Login Lock: Temporarily locks out IP addresses after repeated failed login attempts. * Login Alert: Sends email notifications when users log in. * Fail Once: Intentionally rejects the first valid login attempt and requires the user to try again shortly after. * Protect XML-RPC: Disables pingbacks or all XML-RPC access to help prevent abuse. * Block Author Query: Helps prevent username leakage through `/?author=` requests. * Update Notifications: Sends email notifications when updates are available for WordPress core, plugins, or themes. * WAF Tuning Support: Creates exclusion rules to help prevent false positives when SiteGuard Server Edition WAF is installed. #### Requirements and Compatibility * WordPress multisite is not supported. * Apache 1.3, Apache 2.x, and Nginx are supported. * CAPTCHA requires the PHP extensions `mbstring` and `gd`. * WAF Tuning Support requires SiteGuard Server Edition on Apache. #### Documentation Documentation, FAQs, and more details are available in [English](https://www.jp-secure.com/siteguard_wp_plugin_en/) and [Japanese](https://www.jp-secure.com/siteguard_wp_plugin/). #### Translations This plugin is translated by the community. We appreciate your help with translations on the [WordPress translation platform](https://translate.wordpress.org/projects/wp-plugins/siteguard/). ## Lluniau Sgrin [⌊SiteGuard WP Plugin dashboard.⌉⌊SiteGuard WP Plugin dashboard.⌉[ SiteGuard WP Plugin dashboard. ## Gosod #### From the WordPress Dashboard 1. In the WordPress dashboard, go to Plugins > Add New. 2. Search for “SiteGuard WP Plugin”. 3. Install and activate the plugin. #### Manual Installation 1. Search for and download “SiteGuard WP Plugin”. 2. In the WordPress dashboard, go to Plugins > Add New > Upload Plugin. 3. Upload the downloaded ZIP file. 4. Install and activate the plugin. ## Cwestiynau Cyffredin For FAQs, see the [English](https://www.jp-secure.com/siteguard_wp_plugin_en/faq.html) or [Japanese](https://www.jp-secure.com/siteguard_wp_plugin/faq.html) documentation. ## Adolygiadau ![](https://secure.gravatar.com/avatar/ee823466c87bf43768dd597aaa33920bbf3ea8db2b79af68fb0f759a45734f4a? s=60&d=retro&r=g) ### 󠀁[Unsafe](https://wordpress.org/support/topic/unsafe-7/)󠁿 [alexbrowp](https://profiles.wordpress.org/alexbrowp/) Tachwedd 27, 2024 When you log out, the session is not closed and you can still go to wp-admin. Also, redirecting wp-admin to the custom login page doesn’t help with security ![](https://secure.gravatar.com/avatar/3546620ab46070b37c36542678c8ccbefebd0ea79f4d00fe0ccb1a0aa851a32e? s=60&d=retro&r=g) ### 󠀁[.](https://wordpress.org/support/topic/%e6%97%a5%e6%9c%ac%e3%81%ae%e4%bc%81%e6%a5%ad%e3%81%aa%e3%81%ae%e3%81%ab%e6%97%a5%e6%9c%ac%e8%aa%9e%e8%a8%80%e8%aa%9e%e3%81%aa%e3%81%97/)󠁿 [wpuserjp202306t](https://profiles.wordpress.org/wpuserjp202306t/) Gorffennaf 27, 2023 . ![](https://secure.gravatar.com/avatar/bce40e97210b52eae7cd03c41e160d2e971fedea0dc4264f1d2da077ac3e9a96? s=60&d=retro&r=g) ### 󠀁[ログイン保護に利用しています](https://wordpress.org/support/topic/%e3%83%ad%e3%82%b0%e3%82%a4%e3%83%b3%e4%bf%9d%e8%ad%b7%e3%81%ab%e5%88%a9%e7%94%a8%e3%81%97%e3%81%a6%e3%81%84%e3%81%be%e3%81%99/)󠁿 [Fumiki Takahashi](https://profiles.wordpress.org/takahashi_fumiki/) Mehefin 23, 2023 誰でもユーザーを登録できるサイトを作っているのですが、ログイン保護機能を利用してい ます。スパムアカウントが減りました。 ![](https://secure.gravatar.com/avatar/35cbcb591e6ef4013bbd838ea1cb93cbfb26afd446df2946f7a1824692aa88c5? s=60&d=retro&r=g) ### 󠀁[解決済/ループバックリクエストでの問題(サイトヘルス)](https://wordpress.org/support/topic/%e3%83%ab%e3%83%bc%e3%83%97%e3%83%90%e3%83%83%e3%82%af%e3%83%aa%e3%82%af%e3%82%a8%e3%82%b9%e3%83%88%e3%81%a7%e3%81%ae%e5%95%8f%e9%a1%8c-%e3%82%b5%e3%82%a4%e3%83%88%e3%83%98%e3%83%ab%e3%82%b9%e3%82%88/)󠁿 [tsutlnps149](https://profiles.wordpress.org/tsutlnps149/) Chwefror 6, 2021 管理ページアクセス制限を有効にすると、サイトヘルスで「サイトでループバックリクエスト が完了できませんでした」という文字が出るが、この問題、site-health.phpを除外設定にし てもなお出続ける。 制限をOFFにすると、出なくなる。 バージョン「1.5.1」でのアップデート で、この問題は解決したようです。ありがとうございました。 ![](https://secure.gravatar.com/avatar/5b307318f224d2c4b2c4cfec4a8e5b7a6ef31cbba0ffc18402b239ff45020c7f? s=60&d=retro&r=g) ### 󠀁[Multisite is not supported](https://wordpress.org/support/topic/multisite-is-not-supported/)󠁿 [T. Sagawa](https://profiles.wordpress.org/tscontenna/) Medi 15, 2020 Nothing work in multi-site mode. ![](https://secure.gravatar.com/avatar/ca98a7dd96386ac18e0eea67de2cf6a1521783218a137069b6753cb7f1331818? s=60&d=retro&r=g) ### 󠀁[Good Support](https://wordpress.org/support/topic/good-support-372/)󠁿 [lw53](https://profiles.wordpress.org/lw53/) Awst 31, 2020 All the features I require with easy to follow instructions of how to correctly set-up. [ Read all 15 reviews ](https://wordpress.org/support/plugin/siteguard/reviews/) ## Contributors & Developers “SiteGuard WP Plugin” is open source software. The following people have contributed to this plugin. Cyfranwyr * [ jp-secure ](https://profiles.wordpress.org/jp-secure/) “SiteGuard WP Plugin” has been translated into 10 locales. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/siteguard/contributors) for their contributions. [Translate “SiteGuard WP Plugin” into your language.](https://translate.wordpress.org/projects/wp-plugins/siteguard) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/siteguard/), check out the [SVN repository](https://plugins.svn.wordpress.org/siteguard/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/siteguard/) by [RSS](https://plugins.trac.wordpress.org/log/siteguard/?limit=100&mode=stop_on_copy&format=rss). ## Cofnod Newid #### 1.8.6 * Rename Login: when the login URL falls back to the .php (stub) form, the settings screen now explains why .htaccess could not be used. * Rename Login: fixed the .htaccess self-test so it works when WordPress has been given its own directory (the WordPress Address differs from the Site Address). * Block Author Query: the “Disable REST API” exclusion list now uses REST API namespaces instead of plugin names. Special thanks to abcdrew and miwarock777 for their contributions to this release. #### 1.8.5 * Fixed a security issue affecting the login URL protection on some server configurations. Special thanks to goto5656 for the report. #### 1.8.4 * Fixed a security issue affecting the login URL protection on some server configurations. Special thanks to goto5656 for the report. #### 1.8.3 * Fixed an issue where the cleanup of legacy .htaccess rules (which could lock administrators out of /wp-admin/) did not run on sites that had already updated to 1.8.0 or 1.8.1. #### 1.8.2 * Fixed an issue where upgrading from 1.7.x to 1.8.x could leave legacy .htaccess rules in place, locking administrators out of /wp-admin/. Special thanks to t.inoue for the report. #### 1.8.1 * Fixed a security issue affecting the login URL protection. #### 1.8.0 * Added support for Nginx and Apache environments that do not use an .htaccess file. * Improved Login Lock to apply to authentication attempts via XML-RPC. * Fixed several security issues affecting login URL protection. * Reviewed and updated the English strings. Special thanks to abcdrew. Special thanks to Daiki Honda and Daishi Kuroki for their contributions to this release. Special thanks to Helena Media Research Corporation for the report. #### 1.7.12 * Fixed an authorization vulnerability in the login history. Special thanks to Ficus Inc. * Mitigated CAPTCHA authentication failures in some environments. #### 1.7.11 * Fixed an issue where a syntax error occurred in PHP 5.6 or earlier. #### 1.7.10 * Fixed a Guessable CAPTCHA vulnerability (CVE-2026-27411). Special thanks to Patchstack. #### 1.7.9 * Fixed a deprecated notice for the get_currentuserinfo() function. #### 1.7.8 * Fixed a warning that occurred in version 1.7.7. #### 1.7.7 * Fixed a bug where the renamed login URL was leaked when wp-register.php was accessed. #### 1.7.6 * Fixed an issue where a warning occurred on the login screen in PHP 8.x environments. #### 1.7.5 * Fixed an issue where a fatal error occurred on the Update Notifications screen in PHP 8.x environments. #### 1.7.4 * Changed the directory for storing CAPTCHA image files to wp-content/siteguard/. * Fixed some bugs. #### 1.7.3 * Fixed an issue where password reset emails could not be sent from the admin page when CAPTCHA was enabled. #### 1.7.2 * Reviewed and modified source code related to security. #### 1.7.1 * Fixed an issue where a syntax error occurred in PHP 5.6 or earlier. #### 1.7.0 * Removed the ability to get the client IP address from X-Forwarded-For due to IP spoofing risk. ## Meta * Version **1.8.6** * Last updated **1 diwrnod yn ôl** * Active installations **500,000+** * WordPress version ** 6.0 neu uwch ** * Tested up to **7.0** * Languages * [Dutch](https://nl.wordpress.org/plugins/siteguard/), [English (US)](https://wordpress.org/plugins/siteguard/), [Japanese](https://ja.wordpress.org/plugins/siteguard/), [Persian](https://fa.wordpress.org/plugins/siteguard/), [Russian](https://ru.wordpress.org/plugins/siteguard/), [Spanish (Argentina)](https://es-ar.wordpress.org/plugins/siteguard/), [Spanish (Chile)](https://cl.wordpress.org/plugins/siteguard/), [Spanish (Colombia)](https://es-co.wordpress.org/plugins/siteguard/), [Spanish (Mexico)](https://es-mx.wordpress.org/plugins/siteguard/), [Spanish (Spain)](https://es.wordpress.org/plugins/siteguard/), a [Spanish (Venezuela)](https://ve.wordpress.org/plugins/siteguard/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/siteguard) * Tags * [captcha](https://cy.wordpress.org/plugins/tags/captcha/)[Login Alert](https://cy.wordpress.org/plugins/tags/login-alert/) [login lock](https://cy.wordpress.org/plugins/tags/login-lock/)[pingback](https://cy.wordpress.org/plugins/tags/pingback/) [security](https://cy.wordpress.org/plugins/tags/security/) * [Advanced View](https://cy.wordpress.org/plugins/siteguard/advanced/) ## Graddau 4.3 out of 5 stars. * [ 11 5-star reviews ](https://wordpress.org/support/plugin/siteguard/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/siteguard/reviews/?filter=4) * [ 2 3-star reviews ](https://wordpress.org/support/plugin/siteguard/reviews/?filter=3) * [ 2 2-star reviews ](https://wordpress.org/support/plugin/siteguard/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/siteguard/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/siteguard/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/siteguard/reviews/) ## Cyfranwyr * [ jp-secure ](https://profiles.wordpress.org/jp-secure/) ## Cefnogaeth Issues resolved in last two months: 8 out of 9 [Gweld y fforwm cefnogi](https://wordpress.org/support/plugin/siteguard/)