There are plenty of online scanners to check the common web vulnerabilities, but that may not be sufficient as a security risk may arise from WordPress core, plugin, theme, or misconfiguration.
For that, you need a specialized security scanner that not just detects the common but also particular WordPress vulnerabilities.
The following scanner can help you to audit your website and let you know about security risks. So you can take necessary action to prevent being hacked.
演示地址:https://files.photo.gallery/demo/?samples
下载链接：https://cdn.jsdelivr.net/npm/files.photo.gallery/index.php
设置说明：https://forum.photo.gallery/viewtopic.php?f=66&t=9964
开心补丁:https://cdn.jsdelivr.net/gh/yyingc/[email protected]/files.js
php组建需求: fileinfo exif imagemagick
配置根目录、密码访问和排除不需要显示的目录：
// 根目录配置 'root' => '根目录路径', // root path relative to script. 'start_path' => false, // start path relative to script. If empty, root is start path
// 登录账号密码配置 'username' => 'zhujizixun', 'password' => '12345678', // Add password directly or use https://tinyfilemanager.github.io/docs/pwd.html to encrypt the password (encrypted password is more secure, as it prevents your password from being exposed directly in a file).
// 排除文件或者目录 'files_exclude' => '/.(html|xml)$/i', // '/.(pdf|jpe?g)$/i' 'dirs_exclude' => '//js|/_files(/|$)/i', //'//Convert|/football|/node_modules(/|$)/i', 'allow_symlinks' => true, // allow symlinks
We run more than a dozen sites with nearly all of the configured the same way but one of our sites kept erroring out with “WordPress JetPack Error Updating Settings – FetchNetworkError” when we were trying to change settings in JetPack.