{"id":14957,"date":"2024-08-23T11:50:03","date_gmt":"2024-08-23T03:50:03","guid":{"rendered":"https:\/\/www.simcentric.com\/uncategorized-tc\/how-to-secure-wordpress-site-from-litespeed-cache-issues\/"},"modified":"2024-08-23T12:00:04","modified_gmt":"2024-08-23T04:00:04","slug":"how-to-secure-wordpress-site-from-litespeed-cache-issues","status":"publish","type":"post","link":"https:\/\/www.simcentric.com\/tc\/hong-kong-dedicated-server-tc\/how-to-secure-wordpress-site-from-litespeed-cache-issues\/","title":{"rendered":"\u5982\u4f55\u4fdd\u8b77\u60a8\u7684WordPress\u7db2\u7ad9\u514d\u53d7LiteSpeed\u5feb\u53d6\u554f\u984c\uff1f"},"content":{"rendered":"

[vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n

\u5728\u4e0d\u65b7\u8b8a\u5316\u7684\u7db2\u8def\u5b89\u5168\u74b0\u5883\u4e2d\uff0cWordPress<\/a><\/strong>\u4f7f\u7528\u8005\u9762\u81e8\u8457\u4e00\u500b\u65b0\u7684\u6311\u6230\uff1aLiteSpeed Cache\u6f0f\u6d1e\uff08CVE-2023-40000\uff09<\/a><\/strong>\u3002\u9019\u500b\u5b89\u5168\u6f0f\u6d1e\u5f15\u8d77\u4e86\u7db2\u7ad9\u6240\u6709\u8005\u7684\u64d4\u6182\uff0c\u5c24\u5176\u662f\u5c0d\u4f3a\u670d\u5668\u79df\u7528<\/a><\/strong>\u4f7f\u7528\u8005\u4f86\u8aaa\uff0c\u4fc3\u4f7f\u4eba\u5011\u958b\u59cb\u5c0b\u627eWordPress\u5b89\u5168\u89e3\u6c7a\u65b9\u6848\u3002\u8b93\u6211\u5011\u6df1\u5165\u63a2\u8a0e\u9019\u500b\u554f\u984c\uff0c\u4e26\u63a2\u7d22\u5168\u9762\u7684\u7b56\u7565\u4f86\u52a0\u5f37\u60a8\u7684WordPress\u7db2\u7ad9against\u5404\u7a2e\u5a01\u8105\u3002<\/p>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n

\u4e86\u89e3LiteSpeed Cache\u6f0f\u6d1e<\/strong><\/h2>\n

\u6700\u8fd1\u5728LiteSpeed Cache\u5916\u639b\uff085.3.3\u7248\u672c\u4e4b\u524d\uff09\u4e2d\u767c\u73fe\u7684\u6f0f\u6d1e\u5728WordPress\u793e\u7fa4\u4e2d\u5f15\u8d77\u4e86\u8ed2\u7136\u5927\u6ce2\u3002\u9019\u500b\u56b4\u91cd\u7684\u7f3a\u9677\u5141\u8a31\u653b\u64ca\u8005\u7372\u5f97\u672a\u7d93\u6388\u6b0a\u7684\u5b58\u53d6\u6b0a\u9650\uff0c\u4e26\u53ef\u80fd\u5b8c\u5168\u63a7\u5236\u53d7\u5f71\u97ff\u7684WordPress\u7db2\u7ad9\u3002\u9019\u500b\u554f\u984c\u7684\u56b4\u91cd\u6027\u4e0d\u5bb9\u4f4e\u4f30\uff0c\u56e0\u70ba\u5b83\u4f7f\u7db2\u7ad9\u9762\u81e8\u5404\u7a2e\u60e1\u610f\u6d3b\u52d5\u7684\u98a8\u96aa\uff0c\u5305\u62ec\u8cc7\u6599\u7aca\u53d6\u548c\u7db2\u7ad9\u7be1\u6539\u3002<\/p>\n

\u4fdd\u8b77\u60a8\u7684WordPress\u7db2\u7ad9\u7684\u5373\u6642\u6b65\u9a5f<\/strong><\/h2>\n

\u5982\u679c\u60a8\u6b63\u5728\u4f7f\u7528LiteSpeed Cache\u5916\u639b\uff0c\u60a8\u7684\u9996\u8981\u4efb\u52d9\u61c9\u8a72\u662f\u5c07\u5176\u66f4\u65b0\u5230\u6700\u65b0\u7248\u672c\u3002\u4ee5\u4e0b\u662f\u4e00\u500b\u5feb\u901f\u6307\u5357\uff1a<\/p>\n

    \n
  1. \u767b\u5165\u60a8\u7684WordPress\u5100\u8868\u677f<\/li>\n
  2. \u5c0e\u822a\u81f3\u300c\u5916\u639b\u300d > \u300c\u5df2\u5b89\u88dd\u5916\u639b\u300d<\/li>\n
  3. \u5728\u5217\u8868\u4e2d\u627e\u5230\u300cLiteSpeed Cache\u300d<\/li>\n
  4. \u5982\u679c\u6709\u66f4\u65b0\u53ef\u7528\uff0c\u9ede\u64ca\u300c\u7acb\u5373\u66f4\u65b0\u300d<\/li>\n<\/ol>\n

    \u7136\u800c\uff0c\u66f4\u65b0\u5916\u639b\u53ea\u662f\u5168\u9762\u5b89\u5168\u65b9\u6cd5\u7684\u7b2c\u4e00\u6b65\u3002\u8b93\u6211\u5011\u63a2\u8a0e\u4e00\u4e0b\u589e\u5f37WordPress\u5b89\u5168\u6027\u7684\u5176\u4ed6\u63aa\u65bd\u3002<\/p>\n

    [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n

    WordPress\u5b89\u5168\u6700\u4f73\u5be6\u8e10<\/strong><\/h2>\n

    \u5be6\u65bd\u5f37\u5927\u7684\u5b89\u5168\u63aa\u65bd\u5c0d\u65bc\u4fdd\u8b77\u60a8\u7684WordPress\u7db2\u7ad9\u514d\u53d7\u5404\u7a2e\u5a01\u8105\u81f3\u95dc\u91cd\u8981\uff0c\u5305\u62ecLiteSpeed Cache\u6f0f\u6d1e<\/a><\/strong>\u548c\u5176\u4ed6\u6f5b\u5728\u7684\u6f0f\u6d1e\u3002<\/p>\n

    1. \u5b9a\u671f\u66f4\u65b0<\/h3>\n

    \u4fdd\u6301WordPress\u6838\u5fc3\u3001\u4e3b\u984c\u548c\u5916\u639b\u7684\u6700\u65b0\u72c0\u614b\u3002\u904e\u6642\u7684\u8edf\u9ad4\u662f\u99ed\u5ba2\u7684\u5e38\u898b\u5165\u53e3\u9ede\u3002<\/p>\n

    2. \u5f37\u5bc6\u78bc\u7b56\u7565<\/h3>\n

    \u70ba\u6240\u6709\u4f7f\u7528\u8005\u5e33\u6236\u5f37\u5236\u4f7f\u7528\u5f37\u5bc6\u78bc\u3002\u8003\u616e\u4f7f\u7528\u5bc6\u78bc\u7ba1\u7406\u5668\u4f86\u751f\u6210\u548c\u5132\u5b58\u8907\u96dc\u7684\u5bc6\u78bc\u3002<\/p>\n

    3. \u96d9\u56e0\u7d20\u8a8d\u8b49\uff082FA\uff09<\/h3>\n

    \u5be6\u65bd2FA\u4ee5\u589e\u52a0\u984d\u5916\u7684\u5b89\u5168\u5c64\u3002\u8a31\u591a\u5916\u639b\u63d0\u4f9b\u6b64\u529f\u80fd\uff0c\u5982Google Authenticator\u6216Duo Security\u3002<\/p>\n

    4. \u9650\u5236\u767b\u5165\u5617\u8a66<\/h3>\n

    \u4f7f\u7528\u50cf\u300cLimit Login Attempts Reloaded\u300d\u9019\u6a23\u7684\u5916\u639b\u4f86\u9632\u6b62\u66b4\u529b\u653b\u64ca\u3002\u4ee5\u4e0b\u662f\u4e00\u500b\u7c21\u55ae\u7684\u7a0b\u5f0f\u78bc\u7247\u6bb5\uff0c\u53ef\u4ee5\u6dfb\u52a0\u5230\u60a8\u7684functions.php<\/code>\u6a94\u6848\u4e2d\u4ee5\u5be6\u73fe\u6b64\u529f\u80fd\uff1a<\/p>\n

    \r\nfunction limit_login_attempts($user, $username, $password) {\r\n    $login_attempts = get_transient('login_attempts_' . $username);\r\n    if ($login_attempts === false) {\r\n        $login_attempts = 0;\r\n    }\r\n    if ($login_attempts > 5) {\r\n        return new WP_Error('too_many_attempts', 'Too many failed login attempts. Please try again later.');\r\n    }\r\n    $login_attempts++;\r\n    set_transient('login_attempts_' . $username, $login_attempts, 300);\r\n    return $user;\r\n}\r\nadd_filter('authenticate', 'limit_login_attempts', 30, 3);\r\n<\/code><\/pre>\n
    5. \u4f7f\u7528\u5b89\u5168\u5916\u639b<\/h3>\n
    \u5be6\u65bd\u77e5\u540d\u7684\u5b89\u5168\u5916\u639b\uff0c\u5982Wordfence\u6216Sucuri Security\uff0c\u4ee5\u7372\u5f97\u5168\u9762\u7684\u4fdd\u8b77\u3002<\/p>\n
    [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n
    \u8b58\u5225\u548c\u522a\u9664\u60e1\u610f\u8edf\u9ad4<\/strong><\/h2>\n
    \u5982\u679c\u60a8\u61f7\u7591\u60a8\u7684\u7db2\u7ad9\u5df2\u88ab\u5165\u4fb5\uff0c\u8acb\u6309\u7167\u4ee5\u4e0b\u6b65\u9a5f\u8b58\u5225\u548c\u522a\u9664\u60e1\u610f\u8edf\u9ad4\uff1a<\/p>\n
      \n
    1. \u4f7f\u7528\u5b89\u5168\u5916\u639b\u6216\u7dda\u4e0a\u6383\u63cf\u5de5\u5177\uff08\u5982Sucuri SiteCheck\uff09\u6383\u63cf\u60a8\u7684\u7db2\u7ad9<\/li>\n
    2. \u6aa2\u67e5\u60a8\u7db2\u7ad9\u7684\u6a94\u6848\uff0c\u67e5\u627e\u4e0d\u719f\u6089\u6216\u6700\u8fd1\u4fee\u6539\u7684PHP\u6a94\u6848<\/li>\n
    3. \u6aa2\u67e5\u60a8\u7684WordPress\u8cc7\u6599\u5eab\u662f\u5426\u6709\u53ef\u7591\u689d\u76ee<\/li>\n
    4. \u522a\u9664\u4efb\u4f55\u5df2\u8b58\u5225\u7684\u60e1\u610f\u8edf\u9ad4\u4e26\u91cd\u8a2d\u6240\u6709\u4f7f\u7528\u8005\u5bc6\u78bc<\/li>\n
    5. \u5982\u679c\u53ef\u7528\uff0c\u5f9e\u4e7e\u6de8\u7684\u5099\u4efd\u9084\u539f\u60a8\u7684\u7db2\u7ad9<\/li>\n<\/ol>\n
      \u70ba\u4e86\u9032\u884c\u66f4\u5fb9\u5e95\u7684\u6e05\u7406\uff0c\u8acb\u8003\u616e\u4f7f\u7528\u4ee5\u4e0bPHP\u8173\u672c\u4f86\u6383\u63cf\u6f5b\u5728\u7684\u60e1\u610f\u6a94\u6848\uff1a<\/p>\n
      \r\n<?php\r\nfunction scanDirectory($dir) {\r\n    $results = array();\r\n    $files = scandir($dir);\r\n    foreach ($files as $file) {\r\n        if ($file == '.' || $file == '..') continue;\r\n        $path = $dir . DIRECTORY_SEPARATOR . $file;\r\n        if (is_dir($path)) {\r\n            $results = array_merge($results, scanDirectory($path));\r\n        } else {\r\n            if (preg_match('\/\\.(php|js)$\/', $file)) {\r\n                $content = file_get_contents($path);\r\n                if (preg_match('\/(eval\\s*\\(|base64_decode|gzinflate)\/i', $content)) {\r\n                    $results[] = $path;\r\n                }\r\n            }\r\n        }\r\n    }\r\n    return $results;\r\n}\r\n\r\n$suspiciousFiles = scanDirectory('\/path\/to\/your\/wordpress\/installation');\r\nforeach ($suspiciousFiles as $file) {\r\n    echo \"Suspicious file found: $file\\n\";\r\n}\r\n?>\r\n<\/code><\/pre>\n
      \u8a18\u5f97\u5c07’\/path\/to\/your\/wordpress\/installation’\u66ff\u63db\u70ba\u60a8\u5be6\u969b\u7684WordPress\u76ee\u9304\u8def\u5f91\u3002<\/p>\n
      [\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text]<\/p>\n
      \u76e3\u63a7\u7db2\u7ad9\u5b8c\u6574\u6027\u548c\u6548\u80fd<\/strong><\/h2>\n
      \u5b9a\u671f\u76e3\u63a7\u60a8\u7db2\u7ad9\u7684\u5b8c\u6574\u6027\u548c\u6548\u80fd\u5c0d\u65bc\u53ca\u65e9\u767c\u73fe\u6f5b\u5728\u7684\u5b89\u5168\u6f0f\u6d1e\u81f3\u95dc\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u4e00\u4e9b\u9700\u8981\u95dc\u6ce8\u7684\u95dc\u9375\u9818\u57df\uff1a<\/p>\n