Title: WP-Sentinel
Author: evilsocket
Published: <strong>28. September 2010</strong>
Last modified: 3. Februar 2012

---

Plugins suchen

Dieses Plugin wurde **nicht mit den 3 neuesten Hauptversionen von WordPress getestet**.
Es wird möglicherweise nicht mehr gepflegt oder unterstützt und kann bei der Verwendung
mit neueren WordPress-Versionen zu Kompatibilitätsproblemen führen.

![](https://s.w.org/plugins/geopattern-icon/wp-sentinel.svg)

# WP-Sentinel

 Von [evilsocket](https://profiles.wordpress.org/evilsocket/)

[Herunterladen](https://downloads.wordpress.org/plugin/wp-sentinel.2.0.3.zip)

 * [Details](https://de.wordpress.org/plugins/wp-sentinel/#description)
 * [Rezensionen](https://de.wordpress.org/plugins/wp-sentinel/#reviews)
 *  [Installation](https://de.wordpress.org/plugins/wp-sentinel/#installation)
 * [Entwicklung](https://de.wordpress.org/plugins/wp-sentinel/#developers)

 [Support](https://wordpress.org/support/plugin/wp-sentinel/)

## Beschreibung

WP-Sentinel, is a plugin for the WordPress platform which will increase the security
of your blog against attacks
 from crackers, lamers, black hats, h4x0rs, etc . The
plugin will be loaded by wordpress before every other installed plugin and will 
execute some security checks upon incoming http requests and, when one of more requests
turn on the system alarm, they will be blocked, the sentinel then will show a warning
message to the user and send a notification email to the blog administrator with
the whole attack details. Furthermore wp-sentinel will communicate with a centralized
server to collect attackers data and build a ip address blacklist.

This plugin is able to block those kind of attacks :

 * Cross Site Scriptings
 * HTML Injections
 * Remote File Inclusions
 * Remote Command Executions
 * Local File Inclusions
 * SQL Injections
 * Integer & string overflows
 * Cross Site Request Forgery
 * Login bruteforcing
 * Flooding
 * … and so on 🙂

WP-Sentinel will NOT check requests from the user logged in as administrator, so
if you want to check the installation you have to log out first.

## Installation

 1. Upload `wp-sentinel` folder to the `/wp-content/plugins/` directory.
 2. Activate the plugin through the ‚Plugins‘ menu in WordPress.
 3. Configure the plugin through the settings panel.

## FAQ

  How can i check if the plugin is installed and working properly?

If you are logged in as administrator, perform a logout, go to the index of your
blog and open an url such as :

http://your-blog-url/?s=../../this/is/just/a/test

To activate the local file inclusion block for instance.

  Some bot is launching an high number of attacks to my blog, will the plugin be
flooded with logs?

No, the plugin has an anti-flood mechanism that can be configured through the settings
menu.

## Rezensionen

Für dieses Plugin gibt es keine Rezensionen.

## Mitwirkende und Entwickler

„WP-Sentinel“ ist Open-Source-Software. Folgende Menschen haben an diesem Plugin
mitgewirkt:

Mitwirkende

 *   [ evilsocket ](https://profiles.wordpress.org/evilsocket/)

[Übersetze „WP-Sentinel“ in deine Sprache.](https://translate.wordpress.org/projects/wp-plugins/wp-sentinel)

### Interessiert an der Entwicklung?

[Durchstöbere den Code](https://plugins.trac.wordpress.org/browser/wp-sentinel/),
sieh dir das [SVN-Repository](https://plugins.svn.wordpress.org/wp-sentinel/) an
oder abonniere das [Entwicklungsprotokoll](https://plugins.trac.wordpress.org/log/wp-sentinel/)
per [RSS](https://plugins.trac.wordpress.org/log/wp-sentinel/?limit=100&mode=stop_on_copy&format=rss).

## Änderungsprotokoll

#### 2.0.3

 * Fixed a bug in email reporting.

#### 2.0.2

 * Added whitelisted variable to make JetPack work properly.

#### 2.0.1

 * Implemented a full set of rules, tnx to PHPIDS guys.
 * Fixed routine which checks if the user is an admin.
 * Fixed issue that caused many other plugins such as JetPack, WP Stats and so on
   not to work.
 * Fixed issue that caused the admin to be banned.
 * Fixed minor issues that caused php notices.
 * Fixed admin html.

#### 2.0.0

 * Complete rewriting of the engine.
 * Big performance boost.
 * Implemented pre rules hooks and alarm hooks.
 * Configuration and rules are now json encoded.
 * Fixed bug when short tags support is off.
 * Fixed value flattening bug.
 * Fixed value decoding.

#### 1.3.0

 * Implemented centralized log server safe comunication.

#### 1.2.0

 * Little fixes.

#### 1.1.0

 * Fixed a bug when a variable is an array.
 * Fixed interaction with caching plugins.

#### 1.0.9

 * Small graphical restyle.
 * Added small banner.
 * Implemented ip manual and automatic banning.
 * Ban management.

#### 1.0.8.3

 * Fixed a query in ipdetails.php

#### 1.0.8.2

 * Fixed ipdetails.php

#### 1.0.8.1

 * Update php/settings.php

#### 1.0.8

 * Graphics fixes.
 * Updated screenshots.
 * Daily count fix.
 * New IP details and statistics dialog.
 * RFI vectors are now linked in alarm dialog.
 * Full history tab with paging.

#### 1.0.7.3

 * Same as 1.0.7.2 -.-

#### 1.0.7.2

 * Same as 1.0.7.1 -.-

#### 1.0.7.1

 * Fixed svn mess.

#### 1.0.7

 * Implemented user editable HTML tags whitelist.
 * Better log summary with facebox details display.
 * User now can delete a single log entry.
 * Other minor fixes.

#### 1.0.6.1

 * Fixed a bug upon plugin update from 1.0.5 to 1.0.6

#### 1.0.6

 * Porting to MySQL.
 * Better CSV log export.
 * Fixed readme typo.
 * Some minor fixes and code restyle.

#### 1.0.5

 * Fixed minor bug on php/settings.php.

#### 1.0.4

 * Implemented anti login brute forcing engine.
 * Implemented ip address geo localization.

#### 1.0.3

 * Settings panel little code restyle.
 * Now, upon RFI matching, the plugin attempts to classify the remote file (caching
   is handled) as allowed or not.

#### 1.0.2

 * Implemented log downloading and wipeing.

#### 1.0.1

 * Better default alarm layout in english language.
 * Fixed initialization hook with a better wp action.
 * Added file permission checking on admin panel.

#### 1.0

 * First implementation of anti-flood mechanism.
 * Layout manager.

## Meta

 *  Version **2.0.3**
 *  Zuletzt aktualisiert **vor 14 Jahren**
 *  Aktive Installationen **60+**
 *  WordPress-Version ** 2.8 oder höher **
 *  Getestet bis **3.3.2**
 *  Sprache
 * [English (US)](https://wordpress.org/plugins/wp-sentinel/)
 * Schlagwörter
 * [exploit](https://de.wordpress.org/plugins/tags/exploit/)[hack](https://de.wordpress.org/plugins/tags/hack/)
   [ids](https://de.wordpress.org/plugins/tags/ids/)[ips](https://de.wordpress.org/plugins/tags/ips/)
   [security](https://de.wordpress.org/plugins/tags/security/)
 *  [Erweiterte Ansicht](https://de.wordpress.org/plugins/wp-sentinel/advanced/)

## Bewertungen

 2.6 von 5 Sternen.

 *  [  2 5-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/wp-sentinel/reviews/?filter=5)
 *  [  0 4-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/wp-sentinel/reviews/?filter=4)
 *  [  0 3-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/wp-sentinel/reviews/?filter=3)
 *  [  0 2-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/wp-sentinel/reviews/?filter=2)
 *  [  3 1-Sterne-Rezensionen     ](https://wordpress.org/support/plugin/wp-sentinel/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/wp-sentinel/reviews/#new-post)

[Alle Rezensionen anzeigen](https://wordpress.org/support/plugin/wp-sentinel/reviews/)

## Mitwirkende

 *   [ evilsocket ](https://profiles.wordpress.org/evilsocket/)

## Support

Möchtest du etwas mitteilen? Brauchst du Unterstützung?

 [Support-Forum anzeigen](https://wordpress.org/support/plugin/wp-sentinel/)

## Spenden

Möchtest du die Weiterentwicklung dieses Plugins unterstützen?

 [ Für dieses Plugin spenden ](http://www.evilsocket.net/)