Title: WP-Sentinel
Author: evilsocket
Published: <strong>28. september, 2010</strong>
Last modified: 3. februar, 2012

---

Søk i utvidelser

Denne utvidelsen **har ikke blitt testet mot noen av de siste 3 hovedutgivelsene
av WordPress**. Den er kanskje ikke lenger holdt vedlike eller støttet, og den kan
ha kompatibilitetsproblemer med nyeste versjoner av WordPress.

![](https://s.w.org/plugins/geopattern-icon/wp-sentinel.svg)

# WP-Sentinel

 Av [evilsocket](https://profiles.wordpress.org/evilsocket/)

[Last ned](https://downloads.wordpress.org/plugin/wp-sentinel.2.0.3.zip)

 * [Detaljer](https://nb.wordpress.org/plugins/wp-sentinel/#description)
 * [Omtaler](https://nb.wordpress.org/plugins/wp-sentinel/#reviews)
 *  [Installering](https://nb.wordpress.org/plugins/wp-sentinel/#installation)
 * [Utvikling](https://nb.wordpress.org/plugins/wp-sentinel/#developers)

 [Brukerstøtte](https://wordpress.org/support/plugin/wp-sentinel/)

## Beskrivelse

WP-Sentinel, is a plugin for the WordPress platform which will increase the security
of your blog against attacks
 from crackers, lamers, black hats, h4x0rs, etc . The
plugin will be loaded by wordpress before every other installed plugin and will 
execute some security checks upon incoming http requests and, when one of more requests
turn on the system alarm, they will be blocked, the sentinel then will show a warning
message to the user and send a notification email to the blog administrator with
the whole attack details. Furthermore wp-sentinel will communicate with a centralized
server to collect attackers data and build a ip address blacklist.

This plugin is able to block those kind of attacks :

 * Cross Site Scriptings
 * HTML Injections
 * Remote File Inclusions
 * Remote Command Executions
 * Local File Inclusions
 * SQL Injections
 * Integer & string overflows
 * Cross Site Request Forgery
 * Login bruteforcing
 * Flooding
 * … and so on 🙂

WP-Sentinel will NOT check requests from the user logged in as administrator, so
if you want to check the installation you have to log out first.

## Installasjon

 1. Upload `wp-sentinel` folder to the `/wp-content/plugins/` directory.
 2. Activate the plugin through the ‘Plugins’ menu in WordPress.
 3. Configure the plugin through the settings panel.

## Ofte stilte spørsmål

  How can i check if the plugin is installed and working properly?

If you are logged in as administrator, perform a logout, go to the index of your
blog and open an url such as :

http://your-blog-url/?s=../../this/is/just/a/test

To activate the local file inclusion block for instance.

  Some bot is launching an high number of attacks to my blog, will the plugin be
flooded with logs?

No, the plugin has an anti-flood mechanism that can be configured through the settings
menu.

## Vurderinger

Det er ingen omtaler av denne utvidelsen.

## Bidragsytere og utviklere

«WP-Sentinel» er programvare med åpen kildekode. Følgende personer har bidratt til
denne utvidelsen:

Bidragsytere

 *   [ evilsocket ](https://profiles.wordpress.org/evilsocket/)

[Oversett “WP-Sentinel” til ditt språk.](https://translate.wordpress.org/projects/wp-plugins/wp-sentinel)

### Interessert i utvikling?

[Bla gjennom koden](https://plugins.trac.wordpress.org/browser/wp-sentinel/), sjekk
ut [SVN-repositoriet](https://plugins.svn.wordpress.org/wp-sentinel/), eller abonner
på [utviklingsloggen](https://plugins.trac.wordpress.org/log/wp-sentinel/) med [RSS](https://plugins.trac.wordpress.org/log/wp-sentinel/?limit=100&mode=stop_on_copy&format=rss).

## Endringslogg

#### 2.0.3

 * Fixed a bug in email reporting.

#### 2.0.2

 * Added whitelisted variable to make JetPack work properly.

#### 2.0.1

 * Implemented a full set of rules, tnx to PHPIDS guys.
 * Fixed routine which checks if the user is an admin.
 * Fixed issue that caused many other plugins such as JetPack, WP Stats and so on
   not to work.
 * Fixed issue that caused the admin to be banned.
 * Fixed minor issues that caused php notices.
 * Fixed admin html.

#### 2.0.0

 * Complete rewriting of the engine.
 * Big performance boost.
 * Implemented pre rules hooks and alarm hooks.
 * Configuration and rules are now json encoded.
 * Fixed bug when short tags support is off.
 * Fixed value flattening bug.
 * Fixed value decoding.

#### 1.3.0

 * Implemented centralized log server safe comunication.

#### 1.2.0

 * Little fixes.

#### 1.1.0

 * Fixed a bug when a variable is an array.
 * Fixed interaction with caching plugins.

#### 1.0.9

 * Small graphical restyle.
 * Added small banner.
 * Implemented ip manual and automatic banning.
 * Ban management.

#### 1.0.8.3

 * Fixed a query in ipdetails.php

#### 1.0.8.2

 * Fixed ipdetails.php

#### 1.0.8.1

 * Update php/settings.php

#### 1.0.8

 * Graphics fixes.
 * Updated screenshots.
 * Daily count fix.
 * New IP details and statistics dialog.
 * RFI vectors are now linked in alarm dialog.
 * Full history tab with paging.

#### 1.0.7.3

 * Same as 1.0.7.2 -.-

#### 1.0.7.2

 * Same as 1.0.7.1 -.-

#### 1.0.7.1

 * Fixed svn mess.

#### 1.0.7

 * Implemented user editable HTML tags whitelist.
 * Better log summary with facebox details display.
 * User now can delete a single log entry.
 * Other minor fixes.

#### 1.0.6.1

 * Fixed a bug upon plugin update from 1.0.5 to 1.0.6

#### 1.0.6

 * Porting to MySQL.
 * Better CSV log export.
 * Fixed readme typo.
 * Some minor fixes and code restyle.

#### 1.0.5

 * Fixed minor bug on php/settings.php.

#### 1.0.4

 * Implemented anti login brute forcing engine.
 * Implemented ip address geo localization.

#### 1.0.3

 * Settings panel little code restyle.
 * Now, upon RFI matching, the plugin attempts to classify the remote file (caching
   is handled) as allowed or not.

#### 1.0.2

 * Implemented log downloading and wipeing.

#### 1.0.1

 * Better default alarm layout in english language.
 * Fixed initialization hook with a better wp action.
 * Added file permission checking on admin panel.

#### 1.0

 * First implementation of anti-flood mechanism.
 * Layout manager.

## Meta

 *  Versjon **2.0.3**
 *  Sist oppdatert **14 år siden**
 *  Aktive installasjoner **60+**
 *  WordPress-versjon ** 2.8 eller nyere **
 *  Testet opp til **3.3.2**
 *  Språk
 * [English (US)](https://wordpress.org/plugins/wp-sentinel/)
 * Stikkord
 * [exploit](https://nb.wordpress.org/plugins/tags/exploit/)[hack](https://nb.wordpress.org/plugins/tags/hack/)
   [ids](https://nb.wordpress.org/plugins/tags/ids/)[ips](https://nb.wordpress.org/plugins/tags/ips/)
   [security](https://nb.wordpress.org/plugins/tags/security/)
 *  [Avansert visning](https://nb.wordpress.org/plugins/wp-sentinel/advanced/)

## Vurderinger

 2.6 av 5 stjerner.

 *  [  2 5-star reviews     ](https://wordpress.org/support/plugin/wp-sentinel/reviews/?filter=5)
 *  [  0 4-star reviews     ](https://wordpress.org/support/plugin/wp-sentinel/reviews/?filter=4)
 *  [  0 3-star reviews     ](https://wordpress.org/support/plugin/wp-sentinel/reviews/?filter=3)
 *  [  0 2-star reviews     ](https://wordpress.org/support/plugin/wp-sentinel/reviews/?filter=2)
 *  [  3 1-star reviews     ](https://wordpress.org/support/plugin/wp-sentinel/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/wp-sentinel/reviews/#new-post)

[Se alle omtalene](https://wordpress.org/support/plugin/wp-sentinel/reviews/)

## Bidragsytere

 *   [ evilsocket ](https://profiles.wordpress.org/evilsocket/)

## Brukerstøtte

Har du noe å si? Trenger du hjelp?

 [Vis brukerstøtteforumet](https://wordpress.org/support/plugin/wp-sentinel/)

## Donér

Vil du støtte videreutviklingen av denne utvidelsen?

 [ Doner til denne utvidelsen ](http://www.evilsocket.net/)