Title: WP Shieldon – WordPress Firewall
Author: Terry L.
Published: <strong>يونيو 18, 2019</strong>
Last modified: يونيو 21, 2023

---

Search plugins

![](https://ps.w.org/wp-shieldon/assets/banner-772x250.png?rev=2107805)

This plugin **hasn’t been tested with the latest 3 major releases of WordPress**.
It may no longer be maintained or supported and may have compatibility issues when
used with more recent versions of WordPress.

![](https://ps.w.org/wp-shieldon/assets/icon-256x256.png?rev=2194654)

# WP Shieldon – WordPress Firewall

 By [Terry L.](https://profiles.wordpress.org/terrylin/)

[Download](https://downloads.wordpress.org/plugin/wp-shieldon.2.0.2.zip)

 * [Details](https://ary.wordpress.org/plugins/wp-shieldon/#description)
 * [Reviews](https://ary.wordpress.org/plugins/wp-shieldon/#reviews)
 * [Development](https://ary.wordpress.org/plugins/wp-shieldon/#developers)

 [Support](https://wordpress.org/support/plugin/wp-shieldon/)

## Description

WP Shieldon is a WordPress security plugin based on [Shieldon](https://github.com/terrylinooo/shieldon)
library, a Web Application Firewall (WAF) for PHP.

When users or robots try to view many of your web pages within a short period of
time, they will be temporarily banned. They can get unbanned by solving a Captcha.

You can visit the plugin author – [Terry L.](https://terryl.in)‘s blog and try reloading
the pages several times to see how this plugin works. You can also try Terry’s login
page to find it protected. For more information about Shieldon, please visit [shieldon.io](https://shieldon.io/en/)

Please note that there are three important things you must understand before using
WP Shieldon:

 1. WP Shieldon is not for beginners.
 2. Turn the `Trusted Bot` component on to allow search engine crawlers such as Google,
    Bing, Yahoo, and others to smoothly crawl your website.

### Open Source Code

Plugin:
 [https://github.com/terrylinooo/wp-shieldon](https://github.com/terrylinooo/wp-shieldon)

Core library:
 [https://github.com/terrylinooo/shieldon](https://github.com/terrylinooo/shieldon)

### Features

 * Realtime statistics – See who are browsing your website and their status.
 * Beautiful and detailed statistics and dashboard.
 * Block bad bots by default – Backlink crawlers, copyright crawlers and WayBack
   machine bot.
 * IP manager – Block signle IP or IP range as you want. (IPv6 supported)
 * Online session control – You can limit just how many visitors browsing your website.
   Good for webmasters whose blog is hosted on a share hosting.
 * SEO friendly – You can allow popular search engines such as Google, Bing, Yahoo
   and others, put them in the whitelist.
 * XML RPC, Login, Signup page protection.
 * Multiple data drivers – Redis, SQLite, File system, MySQL.
 * Multiple CAPTCHA modules – Google reCAPTCHA v2, v3 and Image CAPTCHA.
 * XSS Protection.
 * Page authentication.
 * Many others you can find by yourself.

Check out my other WordPress works here:

 * [Markdown Editor](https://wordpress.org/plugins/wp-githuber-md/) – WP Githuber
   MD – an all in one Markdown editor.
 * [Cache Master](https://wordpress.org/plugins/cache-master/) – WordPress cache
   plugin.
 * [Mynote Theme](https://wordpress.org/themes/mynote/) – Theme for programmers.

### Copyright

WP Shieldon, Copyright 2019 TerryL.in
 WP Shieldon is distributed under the terms
of the GNU GPL

This program is free software: you can redistribute it and/or modify
 it under the
terms of the GNU General Public License as published by the Free Software Foundation,
either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful,
 but WITHOUT ANY
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A 
PARTICULAR PURPOSE. See the GNU General Public License for more details.

## Screenshots

 * [[
 * Settings.
 * [[
 * IP manager.
 * [[
 * Statistics and dashboard.
 * [[
 * Rule table.
 * [[
 * IP log table.
 * [[
 * Session table.
 * [[
 * User has reached the limit and asked for CAPTCHA.

## Reviews

![](https://secure.gravatar.com/avatar/46e31146d1b143100e3062cf609dc785cdd46c55d51ae620561bc3441d63fcfa?
s=60&d=retro&r=g)

### 󠀁[Working](https://wordpress.org/support/topic/working-226/)󠁿

 [Vu Tru So](https://profiles.wordpress.org/vutruso/) غشت 20, 2024

Thanks

![](https://secure.gravatar.com/avatar/84c26f4b3cc423576ec0ffb33a47382b8878d1d5a308388e479bfd3f66fa3fe6?
s=60&d=retro&r=g)

### 󠀁[Very weak against other free plugins in this category](https://wordpress.org/support/topic/very-weak-against-other-free-plugins-in-this-category/)󠁿

 [Jaro](https://profiles.wordpress.org/pixtweaks/) يوليوز 7, 2024

What this plugin does it’s hard to say. I wasn’t able to trigger any of its “firewall”
although I wasn’t trying XSS it’s claiming. You should avoid this plugin. Why?1.
Useless on its own2. Poorly written code3. Doesn’t clean up the database after uninstall4.
For little it does, it consumes too much of the CPU power5. Long time not updated
Other well established free plugins offer much more then this, I wouldn’t trust 
it.

![](https://secure.gravatar.com/avatar/091da50764d6ed65999718df56f4893754c5955f2d2138b64c36b3d31501692c?
s=60&d=retro&r=g)

### 󠀁[Give it a try](https://wordpress.org/support/topic/give-it-a-try-12/)󠁿

 [Andrea](https://profiles.wordpress.org/aneises/) فبراير 26, 2021

Looks good, makes sense, works. Try this WAF plugin 🙂

 [ Read all 3 reviews ](https://wordpress.org/support/plugin/wp-shieldon/reviews/)

## Contributors & Developers

“WP Shieldon – WordPress Firewall” is open source software. The following people
have contributed to this plugin.

Contributors

 *   [ Terry L. ](https://profiles.wordpress.org/terrylin/)

“WP Shieldon – WordPress Firewall” has been translated into 1 locale. Thank you 
to [the translators](https://translate.wordpress.org/projects/wp-plugins/wp-shieldon/contributors)
for their contributions.

[Translate “WP Shieldon – WordPress Firewall” into your language.](https://translate.wordpress.org/projects/wp-plugins/wp-shieldon)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/wp-shieldon/), check
out the [SVN repository](https://plugins.svn.wordpress.org/wp-shieldon/), or subscribe
to the [development log](https://plugins.trac.wordpress.org/log/wp-shieldon/) by
[RSS](https://plugins.trac.wordpress.org/log/wp-shieldon/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

= 1.0.0

 * First release.

= 1.0.1

 * Fix Redis check.

= 1.0.2

 * Add CDN setting.

= 1.0.3

 * Fix setting URL in plugin page.
 * Fix SQLite check.
 * Fix daemon Enable button not working.

= 1.1.0

 * Add dashboard
 * Fix passcode not working.

= 1.2.0

 * Add report – IP log table.
 * Add report – Session table.
 * Add report – Rule table.

= 1.2.1

 * Fix variable type error.

= 1.2.2

 * Add new tabs for more period data on dashboard.
 * Fix component loading issue.

= 1.2.3

 * Update readme.
 * Fix i10n issues.
 * Imporve statistics pages.

= 1.3.0

 * Add IP management on IP rule table page.

= 1.3.1

 * Fix passcode login issue.

= 1.3.2

 * Fix JavaScript conflicts.

= 1.3.3

 * Fix passcode login issue.
 * Improve performance.

= 1.3.4

 * Exclude password-protected posts’ form.
 * Update uninstall.php

= 1.4.0

 * Update Shieldon core.
 * Add feature – XSS protection.
 * Add feature – WWW-authenticte page protection.
 * Add setting page – Overview.

= 1.4.1

 * Update localization strings. (zh_TW, zh_CN)
 * Fix typo.

= 1.4.2

 * Fix issue #6 – Issue with ‘Save Draft’ feature.

= 1.4.3

 * Update Shieldon core up to 0.1.7
 * Update translation strings.

= 1.5.0 (WordCamp Taipei version)

 * Assign language code to dialog UI.
 * Update translation strings.

= 1.6.0

 * Update Shieldon kernel.
 * Add options in settings allowing to avoid conflicts with some WordPress core 
   functions.
 * Add an option for switching Action Logger.
 * Add import/export settings feature.
 * Add page – operation status.
 * Update translation strings.

= 1.6.1

 * Fix Website Healthy Check issue.
 * Add an option for allowing only logged-in users can accesss REST API.
 * Add an option for disabling XML-RPC.

= 1.6.2

 * Add Facebook and Twitter bots into whitelist in Trusted Bot component.
 * Add current website’s IP address into whitelist by default.
 * Prevent automatic favicon requests.

= 1.6.3

 * Ignore AJAX calls.
 * Fix issue #3 – Notice appearing on PHP 7.4

= 2.0.0

 * Upgrade Sheidlon core from 0.1.7 to 2.1.0
 * Refactor code to fit with Shieldon 2.1.0
 * Test up to WordPress 6.2.2 and PHP 8.2.5

= 2.0.2

 * Check and set the reverse DNS for IP address.

## Meta

 *  Version **2.0.2**
 *  Last updated **3 سنوات ago**
 *  Active installations **100+**
 *  WordPress version ** 4.7 or higher **
 *  Tested up to **6.2.9**
 *  PHP version ** 7.1.0 or higher **
 *  Languages
 * [Chinese (Taiwan)](https://tw.wordpress.org/plugins/wp-shieldon/) and [English (US)](https://wordpress.org/plugins/wp-shieldon/).
 *  [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/wp-shieldon)
 * Tags
 * [Brute Force](https://ary.wordpress.org/plugins/tags/brute-force/)[firewall](https://ary.wordpress.org/plugins/tags/firewall/)
   [security](https://ary.wordpress.org/plugins/tags/security/)[xss protection](https://ary.wordpress.org/plugins/tags/xss-protection/)
 *  [Advanced View](https://ary.wordpress.org/plugins/wp-shieldon/advanced/)

## Ratings

 3.7 out of 5 stars.

 *  [  2 5-star reviews     ](https://wordpress.org/support/plugin/wp-shieldon/reviews/?filter=5)
 *  [  0 4-star reviews     ](https://wordpress.org/support/plugin/wp-shieldon/reviews/?filter=4)
 *  [  0 3-star reviews     ](https://wordpress.org/support/plugin/wp-shieldon/reviews/?filter=3)
 *  [  0 2-star reviews     ](https://wordpress.org/support/plugin/wp-shieldon/reviews/?filter=2)
 *  [  1 1-star review     ](https://wordpress.org/support/plugin/wp-shieldon/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/wp-shieldon/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/wp-shieldon/reviews/)

## Contributors

 *   [ Terry L. ](https://profiles.wordpress.org/terrylin/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/wp-shieldon/)

## Donate

Would you like to support the advancement of this plugin?

 [ Donate to this plugin ](https://www.paypal.com/cgi-bin/webscr?cmd=_donations&business=donate%40terryl.in&item_name=WordPress+Plugin+-+WP+Shieldon&currency_code=USD&source=url)