Title: ArkHost Security Pack
Author: ArkHost
Published: <strong>2026 年 2 月 8 日</strong>
Last modified: 2026 年 2 月 19 日

---

搜索插件

![](https://ps.w.org/arkhost-security-pack/assets/icon-256x256.png?rev=3456394)

# ArkHost Security Pack

 作者：[ArkHost](https://profiles.wordpress.org/arkhost/)

[下载](https://downloads.wordpress.org/plugin/arkhost-security-pack.1.1.zip)

 * [详情](https://cn.wordpress.org/plugins/arkhost-security-pack/#description)
 * [评价](https://cn.wordpress.org/plugins/arkhost-security-pack/#reviews)
 *  [安装](https://cn.wordpress.org/plugins/arkhost-security-pack/#installation)
 * [开发进展](https://cn.wordpress.org/plugins/arkhost-security-pack/#developers)

 [支持](https://wordpress.org/support/plugin/arkhost-security-pack/)

## 描述

A complete security plugin that’s actually free. No “pro” version, no nag screens,
no made-up threat statistics.

#### Login Protection

 * Blocks IPs after failed login attempts
 * Custom login URL (hides wp-login.php)
 * Hides wp-admin from logged-out users
 * Honeypot field for bots
 * Hides login errors (stops username enumeration)
 * Email alerts for admin logins from new IPs
 * Country/IP restrictions on login page

#### IP Control

 * Whitelist and blacklist
 * Auto-blacklist after repeated lockouts
 * IPv4, IPv6, CIDR supported

#### Geo Blocking

 * Block countries
 * Uses free IP2Location LITE database
 * One-click download

#### Hardening

 * Disable XML-RPC
 * Disable dashboard file editing
 * Disable application passwords
 * Restrict REST API to logged-in users
 * Remove WordPress version
 * Block user enumeration (?author=1 and REST API)
 * Disable pingbacks/trackbacks

#### Security Headers

X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy, Permissions-
Policy, Content-Security-Policy, HSTS

#### Two-Factor Authentication

 * TOTP (Google Authenticator, Authy, etc.)
 * Backup codes
 * Enforce for admins

#### File Integrity Monitoring

 * Checks WordPress core files against official checksums
 * Daily scans
 * Email alerts on changes

#### Malware Scanner

 * Scans plugins, themes, uploads
 * Pattern-based detection
 * Quarantine suspicious files
 * Weekly scans

#### Activity Log

 * Login attempts, lockouts, blocks
 * IP, country, username, timestamp
 * Configurable retention
 * CSV export

#### Tools

 * Export/import settings
 * Force logout all users
 * Test email
 * Delete readme.html/license.txt

#### Privacy

No tracking. No analytics. No telemetry.

External connections:
 * WordPress.org API (core file checksums) * IP2Location (
database download, only when you click it)

### External services

This plugin connects to the following external services under specific circumstances:

#### WordPress.org Checksums API

 * Service: api.wordpress.org/core/checksums/1.0/
 * Used for: Verifying WordPress core file integrity by comparing local files against
   official checksums
 * Data sent: WordPress version and locale
 * When: During daily scheduled file integrity scans and when manually triggered
   by the admin
 * Privacy policy: https://wordpress.org/about/privacy/

#### IP Detection Services

 * Services: api.ipify.org, ifconfig.me, icanhazip.com
 * Used for: Detecting the server’s public IP address for the “Whitelist My IP” 
   tool
 * Data sent: Standard HTTP request (no personal data)
 * When: Only when an admin uses the “Whitelist My IP” feature in the Tools tab
 * Terms: https://www.ipify.org/ / https://ifconfig.me/ / https://icanhazip.com/

#### IP2Location

 * Service: download.ip2location.com
 * Used for: Downloading the free IP2Location LITE geolocation database for country-
   based blocking
 * Data sent: Standard HTTP request (optional: user’s download token if configured)
 * When: Only when an admin clicks “Download IP2Location Database” in the IP Control
   tab
 * Terms of service: https://www.ip2location.com/terms
 * Privacy policy: https://www.ip2location.com/privacy

## 屏幕截图

 * [[
 * Security status overview
 * [[
 * Login protection settings
 * [[
 * Activity log
 * [[
 * Two-factor authentication setup
 * [[
 * Malware scanner with quarantine
 * [[
 * [[
 * [[
 * [[

## 安装

 1. Upload the plugin files to `/wp-content/plugins/arkhost-security-pack/`
 2. Activate the plugin through the ‘Plugins’ screen
 3. Configure under the Security menu

## 常见问题

### Is there a premium version?

No. This is the complete plugin.

### Will it slow my site?

No. Checks run on login and admin access, not frontend page loads.

### I locked myself out

Connect via FTP/SSH and rename the plugin folder. Log in normally. Fix your settings.

### Does geo-blocking work without the database?

No. Download the free IP2Location LITE database from the plugin settings.

### Can I use this with other security plugins?

Possible but likely to cause conflicts. We recommend using one security plugin at
a time.

## 评价

此插件暂无评价。

## 贡献者及开发者

「ArkHost Security Pack」是开源软件。 以下人员对此插件做出了贡献。

贡献者

 *   [ ArkHost ](https://profiles.wordpress.org/arkhost/)

[帮助将「ArkHost Security Pack」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/arkhost-security-pack)

### 对开发感兴趣吗?

您可以[浏览代码](https://plugins.trac.wordpress.org/browser/arkhost-security-pack/)，
查看[SVN仓库](https://plugins.svn.wordpress.org/arkhost-security-pack/)，或通过[RSS](https://plugins.trac.wordpress.org/log/arkhost-security-pack/?limit=100&mode=stop_on_copy&format=rss)
订阅[开发日志](https://plugins.trac.wordpress.org/log/arkhost-security-pack/)。

## 更新日志

#### 1.1

 * Fixed: Custom login URL form submission redirecting to 404 page
 * Fixed: URL rewrite filters not being registered before login page render

#### 1.0

 * Initial release

## 额外信息

 *  版本 **1.1**
 *  最后更新：**3 月前**
 *  活跃安装数量 **不到10**
 *  WordPress 版本 ** 5.0 或更高版本 **
 *  已测试的最高版本为 **6.9.4**
 *  PHP 版本 ** 7.4 或更高版本 **
 *  语言
 * [English (US)](https://wordpress.org/plugins/arkhost-security-pack/)
 * 标签
 * [2FA](https://cn.wordpress.org/plugins/tags/2fa/)[firewall](https://cn.wordpress.org/plugins/tags/firewall/)
   [login](https://cn.wordpress.org/plugins/tags/login/)[malware](https://cn.wordpress.org/plugins/tags/malware/)
   [security](https://cn.wordpress.org/plugins/tags/security/)
 *  [高级视图](https://cn.wordpress.org/plugins/arkhost-security-pack/advanced/)

## 评级

尚未提交反馈。

[Your review](https://wordpress.org/support/plugin/arkhost-security-pack/reviews/#new-post)

[查看全部评论](https://wordpress.org/support/plugin/arkhost-security-pack/reviews/)

## 贡献者

 *   [ ArkHost ](https://profiles.wordpress.org/arkhost/)

## 支持

有话要说吗？是否需要帮助？

 [查看支持论坛](https://wordpress.org/support/plugin/arkhost-security-pack/)