BBQ Firewall – Fast & Powerful Firewall Security
🔥 Install, activate, and done! 🔥 Powerful protection from WP’s fastest firewall plugin. BBQ Firewall is a lightweight, blazing-fast firewall plugin that protects your site against a wide range of threats. BBQ checks all incoming traffic and quietly blocks bad requests containing nasty stuff like eval(, base64_, and excessively long request-strings. This is a simple yet solid solution for sites that are unable to use a strong Apache/.htaccess firewall. 🔥 Adds a strong firewall to ANY WordPress site 🔥 Works with all WordPress plugins and themes Powerful Protection BBQ protects your site against many threats: SQL injection attacks Executable file uploads Directory traversal attacks Unsafe character requests Excessively long requests PHP remote/file execution XSS, XXE, and related attacks Protects against bad bots Protects against bad referrers Protects against bad POST content Protects against many other bad requests 🔥 Works great with Blackhole for Bad Bots and Banhammer Awesome Features BBQ provides all the best firewall features: Rated 5 stars at WordPress.org 100% plug-&-play, zero configuration 100% focused on security and performance Blocks a wide range of malicious URL requests Fastest Web Application Firewall (WAF) for WordPress Based on the 7G/8G Firewall Scans all incoming traffic and blocks bad requests Scans all types of requests: GET, POST, PUT, DELETE, etc. Protects against known bad bots and referrers Works silently behind the scenes to protect your site Hassle-free security plugin that’s easy to use Thoroughly tested, error-free performance Extremely low rate of false positives Compatible with other security plugins Regularly updated and “future proof” Firewall < 10 kilobytes in size Lightweight, fast and flexible 🔥 For advanced protection and features, check out BBQ Pro » Exclusive Pro Features Customize firewall via plugin settings Easily add or remove firewall patterns Easily add Jeff Starr’s AI Block List Send Email Alerts for blocked requests Quickly enable/disable firewall rules Disable firewall for logged-in users Block excessively long URI requests Protect against XML-RPC exploits Block any individual IP address Block entire ranges of IP addresses Protect against user-ID phishing Redirect all blocked requests Display a custom “blocked” message Set your own response status code Complete inline documentation Statistics for blocked requests Tools to reset options and patterns Import and Export firewall patterns One-click pattern testing Whitelist IP addresses ..plus everything the free version can do and more. 🔥 Learn more and get BBQ Pro » Privacy This plugin does not collect or store any user data. It does not set any cookies, and it does not connect to any third-party locations. Thus, this plugin does not affect user privacy in any way. BBQ Firewall is developed and maintained by Jeff Starr, 15-year WordPress developer and book author. 🔥 BBQ = Block Bad Queries Support development I develop and maintain this free plugin with love for the WordPress community. To show support, you can make a donation or purchase one of my books: The Tao of WordPress Digging into WordPress .htaccess made easy WordPress Themes In Depth Wizard’s SQL Recipes for WordPress And/or purchase one of my premium WordPress plugins: BBQ Pro – Blazing fast WordPress firewall Blackhole Pro – Automatically block bad bots Banhammer Pro – Monitor traffic and ban the bad guys GA Google Analytics Pro – Connect WordPress to Google Analytics Head Meta Pro – Ultimate Meta Tags for WordPress REST Pro Tools – Awesome tools for managing the WP REST API Simple Ajax Chat Pro – Unlimited chat rooms USP Pro – Unlimited front-end forms Links, tweets and likes also appreciated. Thank you! 🙂
Remove XML-RPC Methods
Removes all WordPress methods from the XML-RPC API to increase security. It does more than just using the xmlrpc_enabled hook, because that is only used “To disable XML-RPC methods that require authentication”. Activating this plugin will also disable pingbacks, trackbacks, and Really Simple Discovery (RSD), because these rely on XML-RPC. It works with any webserver, because it does not use the .htaccess file. Testing the plugin From the command line you can test if the plugin is working correctly using curl. Replace the example.com link to match your website: curl -d ' system.listMethods ' https://example.com/xmlrpc.php This should only return the following methods: – system.multicall – system.listMethods – system.getCapabilities
