{"id":188362,"date":"2024-06-03T10:34:58","date_gmt":"2024-06-03T10:34:58","guid":{"rendered":"https:\/\/ru.wordpress.org\/plugins\/nohackme-defender\/"},"modified":"2026-08-20T08:11:33","modified_gmt":"2026-08-20T08:11:33","slug":"nohackme-defender","status":"publish","type":"plugin","link":"https:\/\/id.wordpress.org\/plugins\/nohackme-defender\/","author":21194292,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.1.6","stable_tag":"1.1.6","tested":"7.0.4","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"NoHackMe Defender","header_author":"Parad0x <paraz0n3@gmail.com>","header_description":"NoHackMe Defender ensures your WordPress site's safety by blocking IP addresses upon receiving suspicious requests or too many requests from a single IP in a certain period. Keep hackers at bay with efficient real-time monitoring and security enforcement. Sponsors of plugin development: <a href=\"https:\/\/malinovsky.io\">malinovsky.io<\/a>, <a href=\"https:\/\/gloap.net\">gloap.net<\/a>, <a href=\"https:\/\/gloapm.com\">gloapm.com<\/a>, <a href=\"https:\/\/imgai.art\">imgai.art<\/a>","assets_banners_color":"9a7b7c","last_updated":"2026-08-20 08:11:33","external_support_url":"","external_repository_url":"","donate_link":"https:\/\/www.donationalerts.com\/r\/needtome","header_plugin_uri":"https:\/\/needtome.com\/nohackme\/","header_author_uri":"https:\/\/www.linkedin.com\/in\/roman-klymenko-parad0x\/","rating":0,"author_block_rating":0,"active_installs":10,"downloads":1385,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"needtome","date":"2024-06-03 10:36:05"},"1.1.0":{"tag":"1.1.0","author":"needtome","date":"2024-06-26 04:39:03"},"1.1.3":{"tag":"1.1.3","author":"needtome","date":"2026-05-26 18:12:42"},"1.1.6":{"tag":"1.1.6","author":"needtome","date":"2026-08-20 08:11:33"}},"upgrade_notice":{"1.1.6":"<p>This update prevents overly broad short payload rules from blocking normal traffic, disables existing unsafe short payload rules, and adds a bulk unblock button.<\/p>","1.1.5":"<p>This update separates payload\/body rules from suspicious URL path rules and adds per-rule Active and Delete controls.<\/p>","1.1.4":"<p>This update improves blocking for malicious API requests, raw JSON bodies, sensitive scanner paths, repeated missing-file probes, and additional SQL injection patterns.<\/p>","1.1.2":"<p>This update unifies the plugin into a single version and adds a support section to the settings page.<\/p>","1.1.1":"<p>This update improves blocked IP management, adds IPv6 support, and allows refreshing crawler IP ranges from official sources.<\/p>","1.0.0":"<p>This is the first release of the plugin. Installing this version ensures comprehensive security measures are in place to protect your WordPress site from various types of attacks.<\/p>","1.1.0":"<p>This update improves IP whitelist handling and extends the statistics section with better per-IP counters.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3096698,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3096698,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.jpg":{"filename":"banner-1544x500.jpg","revision":3096698,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.jpg":{"filename":"banner-772x250.jpg","revision":3096698,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.1.0","1.1.3","1.1.6"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3096698,"resolution":"1","location":"assets","locale":"","width":3024,"height":4057},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3096698,"resolution":"2","location":"assets","locale":"","width":1590,"height":980},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3096698,"resolution":"3","location":"assets","locale":"","width":1034,"height":1462},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3096698,"resolution":"4","location":"assets","locale":"","width":1496,"height":878},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3096698,"resolution":"5","location":"assets","locale":"","width":1472,"height":1498},"screenshot-6.png":{"filename":"screenshot-6.png","revision":3096698,"resolution":"6","location":"assets","locale":"","width":1582,"height":1654}},"screenshots":{"1":"screenshot-1.png","2":"screenshot-2.png","3":"screenshot-3.png","4":"screenshot-4.png","5":"screenshot-5.png","6":"screenshot-6.png","7":"screenshot-7.png"}},"plugin_section":[],"plugin_tags":[1179,1174,1192,1178,600],"plugin_category":[54],"plugin_contributors":[228346],"plugin_business_model":[],"class_list":["post-188362","plugin","type-plugin","status-publish","hentry","plugin_tags-anti-hack","plugin_tags-firewall","plugin_tags-ip-blocking","plugin_tags-protection","plugin_tags-security","plugin_category-security-and-spam-protection","plugin_contributors-needtome","plugin_committers-needtome"],"banners":{"banner":"https:\/\/ps.w.org\/nohackme-defender\/assets\/banner-772x250.jpg?rev=3096698","banner_2x":"https:\/\/ps.w.org\/nohackme-defender\/assets\/banner-1544x500.jpg?rev=3096698","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/nohackme-defender\/assets\/icon-128x128.png?rev=3096698","icon_2x":"https:\/\/ps.w.org\/nohackme-defender\/assets\/icon-256x256.png?rev=3096698","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/nohackme-defender\/assets\/screenshot-1.png?rev=3096698","caption":"screenshot-1.png"},{"src":"https:\/\/ps.w.org\/nohackme-defender\/assets\/screenshot-2.png?rev=3096698","caption":"screenshot-2.png"},{"src":"https:\/\/ps.w.org\/nohackme-defender\/assets\/screenshot-3.png?rev=3096698","caption":"screenshot-3.png"},{"src":"https:\/\/ps.w.org\/nohackme-defender\/assets\/screenshot-4.png?rev=3096698","caption":"screenshot-4.png"},{"src":"https:\/\/ps.w.org\/nohackme-defender\/assets\/screenshot-5.png?rev=3096698","caption":"screenshot-5.png"},{"src":"https:\/\/ps.w.org\/nohackme-defender\/assets\/screenshot-6.png?rev=3096698","caption":"screenshot-6.png"}],"raw_content":"<!--section=description-->\n<p>The NoHackMe Defender plugin ensures the security of your WordPress site by blocking IP addresses when receiving suspicious requests, or when too many requests are received from a single IP over a certain period. The plugin offers comprehensive protection mechanisms including:<\/p>\n\n<ul>\n<li>Hacking protection: Blocks IP addresses that send suspicious data.<\/li>\n<li>Parsing protection: Prevents malicious parsing attempts on your website.<\/li>\n<li>DoS protection: Stops denial-of-service attacks by limiting excessive requests.<\/li>\n<li>Password brute force protection: Prevents repeated login attempts to guess passwords.<\/li>\n<\/ul>\n\n<p>Explore our instructional videos to see the NoHackMe Defender plugin in action and learn how to configure settings and manage blocked IP addresses efficiently:<\/p>\n\n<ol>\n<li><a href=\"https:\/\/youtu.be\/l6LFvNn7RE8\">Protect Your WordPress Site for Free - Installing and Configuring NoHackMe Defender Plugin<\/a>: A thorough guide on activating and configuring the NoHackMe Defender plugin, including its free version features.<\/li>\n<li><a href=\"https:\/\/youtu.be\/DqTvUfLmmGQ\">How to Protect Your Site from Hackers, Parsing, and DoS - Testing WordPress Plugin NoHackMe Defender<\/a>: Demonstrates the plugin's effectiveness in blocking suspicious requests and securing your site.<\/li>\n<li><a href=\"https:\/\/youtu.be\/35G8wi02-70\">Premium Protection for WordPress Sites - A Breakdown of the Paid Features of NoHackMe Defender Plugin<\/a>: Explores the advanced features available in the premium version of the plugin.<\/li>\n<\/ol>\n\n<p>For more information and a live demonstration, visit our <a href=\"https:\/\/needtome.com\/nohackme\/\">Plugin Demo Page<\/a>.<\/p>\n\n<p>Special thanks to our sponsors for supporting the development of this plugin:\n- <a href=\"https:\/\/malinovsky.io\">malinovsky.io<\/a>\n- <a href=\"https:\/\/gloap.net\">gloap.net<\/a>\n- <a href=\"https:\/\/gloapm.com\">gloapm.com<\/a>\n- <a href=\"https:\/\/imgai.art\">imgai.art<\/a><\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"is%20the%20plugin%20fully%20available%20in%20one%20version%3F\"><h3>Is the plugin fully available in one version?<\/h3><\/dt>\n<dd><p>Yes. The plugin is now distributed as a single version with all functionality available without a paid upgrade.<\/p><\/dd>\n<dt id=\"how%20can%20i%20support%20the%20plugin%20developer%3F\"><h3>How can I support the plugin developer?<\/h3><\/dt>\n<dd><p>If NoHackMe Defender helps protect your site, you can support further development via the donation links listed in the plugin settings page.<\/p><\/dd>\n<dt id=\"about%20the%20plugin%20developer\"><h3>About the plugin developer<\/h3><\/dt>\n<dd><p>You can download and view my portfolio in <a href=\"https:\/\/docs.google.com\/document\/d\/141cWx986ApRqlxEIb3GUHEGQ-US1c3KutbzRqr3osm8\/edit?usp=sharing\">Google Docs<\/a>. Also, find me on <a href=\"https:\/\/www.linkedin.com\/in\/roman-klymenko-parad0x\/\">LinkedIn<\/a>.<\/p>\n\n<p>For website and WordPress plugin development inquiries, email <a href=\"mailto:paraz0n3@gmail.com\">paraz0n3@gmail.com<\/a>.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.1.6<\/h4>\n\n<ul>\n<li>Added a runtime safety guard that ignores overly broad short alphabetic payload rules such as <code>or<\/code> or <code>and<\/code>, preventing normal URLs like <code>\/sailors\/<\/code> from being blocked.<\/li>\n<li>Existing active short alphabetic payload rules are now automatically marked inactive in the stored rules file during default-rule synchronization.<\/li>\n<li>Removed the broad standalone <code>or<\/code> payload signature from default rules while keeping safer quoted SQL variants.<\/li>\n<li>Added a \"\u0420\u0430\u0437\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435\u0445\" button to the blocked IP admin page to clear all current IP blocks at once.<\/li>\n<\/ul>\n\n<h4>1.1.5<\/h4>\n\n<ul>\n<li>Split suspicious request payload patterns and suspicious URL path patterns into two separate admin sections with independent URLs and submenu entries.<\/li>\n<li>Added the Suspicious URL paths admin page for sensitive files, foreign CMS\/framework fingerprints, admin panels, and service endpoints.<\/li>\n<li>Added separate temporary protection toggles for payload\/body scanning and suspicious URL path scanning.<\/li>\n<li>Added per-rule Active checkboxes so individual rules can be temporarily disabled without deleting them.<\/li>\n<li>Added per-row Delete buttons for both rule lists, making it clear that unused rules can be removed directly.<\/li>\n<li>Disabled rules are preserved in the settings files and ignored by the runtime scanner until re-enabled.<\/li>\n<li>Updated default-list synchronization so disabled default rules are not re-added as active duplicates.<\/li>\n<\/ul>\n\n<h4>1.1.4<\/h4>\n\n<ul>\n<li>Added raw request body and decoded JSON scanning for REST, GraphQL, and other API-style POST\/PUT\/PATCH\/DELETE requests.<\/li>\n<li>Added request URI, query string, request parameters, and User-Agent scanning to close bypasses where suspicious paths or scanner signatures were not submitted as normal form parameters.<\/li>\n<li>Added immediate blocking for sensitive scanner paths such as <code>.env<\/code>, <code>wp-config.php<\/code>, <code>composer.json<\/code>, backup\/swap\/SQL dump extensions, PHP-CGI probes, and exposed debug\/runtime endpoints.<\/li>\n<li>Added immediate blocking for high-confidence foreign CMS and framework scanner paths, including Drupal, Joomla, Magento, Laravel, Symfony, TYPO3, Umbraco, and Ghost fingerprints.<\/li>\n<li>Added a missing-file probe counter that blocks IPs repeatedly requesting non-existent high-risk files such as executable script variants, backups, logs, archives, or config files.<\/li>\n<li>Added new default suspicious fragments for REST batch abuse, GraphQL probes, PHP-CGI attempts, exposed configuration\/debug paths, and additional SQL injection patterns.<\/li>\n<li>Existing suspicious-fragment lists now receive missing default security signatures without removing custom entries.<\/li>\n<\/ul>\n\n<h4>1.1.2<\/h4>\n\n<ul>\n<li>The plugin is now distributed as a single version without a separate premium\/free split.<\/li>\n<li>Added a support block with donation links to the settings page.<\/li>\n<li>Removed premium-only UI restrictions and related admin notices.<\/li>\n<\/ul>\n\n<h4>1.1.1<\/h4>\n\n<ul>\n<li>Fixed deletion of blocked IPs from the middle of the list in the admin panel.<\/li>\n<li>Added IPv6 support for blocked IPs, whitelists, range matching, and admin display.<\/li>\n<li>Added buttons to update Google and Yandex crawler IP ranges from their official sources.<\/li>\n<li>Improved admin update UX: buttons now show progress and reload the page after a successful update.<\/li>\n<li>Added safer file locking for counters and ban files to reduce race conditions under concurrent requests.<\/li>\n<li>Removed unnecessary unauthenticated AJAX actions for admin-only operations.<\/li>\n<\/ul>\n\n<h4>1.1.0<\/h4>\n\n<ul>\n<li>Fixed issue with the IP whitelist functionality.<\/li>\n<li>Added a page view counter for a single IP in 10 minutes to the Statistics section.<\/li>\n<li>Updated the logic of page view counters for a single IP in 1 minute and 50 minutes in the Statistics section.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release: Includes hacking, parsing, DoS, and password brute force protection.<\/li>\n<\/ul>","raw_excerpt":"Enhance your WordPress security by blocking IPs that send too many or suspicious requests.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/188362","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=188362"}],"author":[{"embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/needtome"}],"wp:attachment":[{"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=188362"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=188362"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=188362"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=188362"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=188362"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/id.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=188362"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}