Title: GhostGate Author: codegee0958 Published: 2025 年 8 月 28 日 Last modified: 2026 年 1 月 21 日 --- 搜索插件 ![](https://ps.w.org/ghostgate/assets/banner-772x250.jpg?rev=3351716) ![](https://ps.w.org/ghostgate/assets/icon-256x256.png?rev=3351716) # GhostGate 作者：[codegee0958](https://profiles.wordpress.org/codegee0958/) [下载](https://downloads.wordpress.org/plugin/ghostgate.1.3.3.zip) * [详情](https://cn.wordpress.org/plugins/ghostgate/#description) * [评价](https://cn.wordpress.org/plugins/ghostgate/#reviews) * [安装](https://cn.wordpress.org/plugins/ghostgate/#installation) * [开发进展](https://cn.wordpress.org/plugins/ghostgate/#developers) [支持](https://wordpress.org/support/plugin/ghostgate/) ## 描述 **GhostGate** is a lightweight yet powerful WordPress security plugin that eliminates the login page as an attack surface. Instead of just defending, it **erases the entrance** entirely with dynamic login URLs and multi-layer access verification. * 🔒 Hide your login URL with a custom slug and time-based code * 🔑 Built-in 2FA via email verification * 🚫 Auto-block brute force attacks by IP * 🧱 Disable/limit unused endpoints like XML-RPC and REST API * 👤 Prevent user enumeration via REST, RSS, and author queries * 🔍 Visualize security status and detect conflicts * 📜 Activity logs with optional file rotation GhostGate doesn’t just defend — it disappears. Invisible to bots. Intuitive for users. 👉 **Full features / screenshots / pricing / docs**: https://arce-experience.com/ product/ ### Privacy GhostGate can store the following data locally on your site to provide rate-limiting and security auditing: – IP addresses (for temporary throttling / block lists) – Timestamps and event metadata (login attempts, REST/XML-RPC hits) – Optional log files under `wp-content/uploads/ghostgate/logs` (if enabled) No data is sent to third-party services. Site owners are responsible for informing users/visitors where required by local laws. You can clear blocks/logs from the admin UI or by deleting the log files. ## 屏幕截图 [⌊Admin settings page with tabbed UI⌉⌊Admin settings page with tabbed UI⌉[ Admin settings page with tabbed UI [⌊Security status diagnostics⌉⌊Security status diagnostics⌉[ Security status diagnostics [⌊IP block log and unblock controls⌉⌊IP block log and unblock controls⌉[ IP block log and unblock controls [⌊Access code input screen for login URL (e.g., date-based code)⌉⌊Access code input screen for login URL (e.g., date-based code)⌉[ Access code input screen for login URL (e.g., date-based code) [⌊Security explanation tab⌉⌊Security explanation tab⌉[ Security explanation tab ## 安装 1. Upload the plugin folder to `/wp-content/plugins/ghostgate` 2. Activate the plugin via the Plugins menu 3. Go to **GhostGate > Settings** and configure your gate logic 4. Optionally enable 2FA, IP blocking, REST/API controls, and more Need help with setup? See the installation & setup video: https://arce-experience. com/product/ ## 常见问题 ### Is GhostGate compatible with other security plugins? Yes. It detects common conflicts and shows visual warnings. You can use it alongside plugins like Wordfence or iThemes. ### What happens if I forget my login code or get locked out? You can always access your site via recovery mode or disable the plugin via FTP if needed. ### Does it affect performance? GhostGate is built for speed. It only runs at login and admin hooks, keeping overhead minimal. ## 评价 此插件暂无评价。 ## 贡献者及开发者 「GhostGate」是开源软件。 以下人员对此插件做出了贡献。 贡献者 * [ codegee0958 ](https://profiles.wordpress.org/codegee0958/) [帮助将「GhostGate」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/ghostgate) ### 对开发感兴趣吗? 您可以[浏览代码](https://plugins.trac.wordpress.org/browser/ghostgate/)，查看[SVN仓库](https://plugins.svn.wordpress.org/ghostgate/)， 或通过[RSS](https://plugins.trac.wordpress.org/log/ghostgate/?limit=100&mode=stop_on_copy&format=rss) 订阅[开发日志](https://plugins.trac.wordpress.org/log/ghostgate/)。 ## 更新日志 #### 1.3.3 – 2026-01-21 * Compatibility: Verified support for WordPress 6.9. * Fix: Enhanced PHP 8.x compatibility (stricter type casting in internal key generation). * Fix: Improved login slug detection to strictly handle trailing slashes, preventing 404 errors in some server configurations. #### 1.3.2 – 2025-09-24 * Fix – Resolved “Undefined variable $user_login / $errors” warnings on the login screen. * Fix – Prevented potential “headers already sent” issues. * Improvement – Hardened login flow compatibility with core. * Improvement – Minor internal refactors around request path normalization. #### 1.3.0 – 2025-09-22 * Security: Strengthened “Hide wp-json structure”. * Fix: Route allowlist UI now correctly preserves selections for regex endpoints. * Fix: Resolved rare fatal error on “Unblock IP” admin action. * Tested: Confirmed compatibility with WordPress 6.8. #### 1.2.1 * Tweak: Added brand header (logo + subtitle) to the code entry screen. * Tweak: Minor CSS polish. #### 1.2.0 * New: Added an option to block direct access to preview URLs. #### 1.1.1 * Maintenance and compliance improvements. #### 1.1.0 * REST/JSON structure stealth options. #### 1.0.0 * Initial public release. ## 额外信息 * 版本 **1.3.3** * 最后更新：**5 月前** * 活跃安装数量 **20+** * WordPress 版本 ** 5.8 或更高版本 ** * 已测试的最高版本为 **6.9.4** * PHP 版本 ** 7.4 或更高版本 ** * 语言 * [English (US)](https://wordpress.org/plugins/ghostgate/) * 标签 * [limit login attempts](https://cn.wordpress.org/plugins/tags/limit-login-attempts/) [rest-api](https://cn.wordpress.org/plugins/tags/rest-api/)[security](https://cn.wordpress.org/plugins/tags/security/) [two factor authentication](https://cn.wordpress.org/plugins/tags/two-factor-authentication/) [xml-rpc](https://cn.wordpress.org/plugins/tags/xml-rpc/) * [高级视图](https://cn.wordpress.org/plugins/ghostgate/advanced/) ## 评级 尚未提交反馈。 [Your review](https://wordpress.org/support/plugin/ghostgate/reviews/#new-post) [查看全部评论](https://wordpress.org/support/plugin/ghostgate/reviews/) ## 贡献者 * [ codegee0958 ](https://profiles.wordpress.org/codegee0958/) ## 支持 有话要说吗？是否需要帮助？ [查看支持论坛](https://wordpress.org/support/plugin/ghostgate/)