• alexlii

    (@alexlii)


    Hi

    Please check this url of wordpress official:
    https://codex.ww.wp.xz.cn/Editing_wp-config.php#Moving_wp-content_folder

    Block External URL Requests
    Block external URL requests by defining WP_HTTP_BLOCK_EXTERNAL as true and this will only allow localhost and your blog to make requests. The constant WP_ACCESSIBLE_HOSTS will allow additional hosts to go through for requests. The format of the WP_ACCESSIBLE_HOSTS constant is a comma separated list of hostnames to allow, wildcard domains are supported, eg *.ww.wp.xz.cn will allow for all subdomains of ww.wp.xz.cn to be contacted.

    define( ‘WP_HTTP_BLOCK_EXTERNAL’, true );
    define( ‘WP_ACCESSIBLE_HOSTS’, ‘api.ww.wp.xz.cn,*.github.com’ );

    What I mean is that some external connections seems no related to function working, it is quite suspicious…

    for security consideration, it would be great clearfy can detect and optionally block it.

    Alex

    • This topic was modified 8 years ago by alexlii.
Viewing 5 replies - 1 through 5 (of 5 total)
  • webcraftic

    (@webcraftic)

    Hi,
    Please explain what kind of problem you are talking about.

    How does this relate to the Clearfy plugin? Do you want to see these settings in the plugin?

    Best regards, Alex

    Thread Starter alexlii

    (@alexlii)

    yes.

    There are always external connections in some plugins, these connections are no related to the plugin function, and only purpose of these connections are advertising or tracking and collecting data.

    They cause site delay and insecurity.

    That means there are no effects on the function of these plugins if disable these external connections, maybe white and black list would be great for adminitrator to check.

    Maybe set block rules by the number connecting per day/ hour.

    webcraftic

    (@webcraftic)

    Hi,

    The idea is quite interesting, I added it to the list of interesting ideas to disable the not needed in WordPress.

    I’m currently working on a very interesting update for WordPress privacy, maybe I’ll use your idea in this part of the project.

    Thank you!

    Best regards, Alex

    Thread Starter alexlii

    (@alexlii)

    Hi Alex,

    I am glad that you like this idea.

    and here is a plugin for your reference:
    https://ww.wp.xz.cn/plugins/snitch/

    Alex

    Blocking external connections/hosts is a native WordPress function.

    define('WP_HTTP_BLOCK_EXTERNAL', true);
    define( 'WP_ACCESSIBLE_HOSTS', 'api.ww.wp.xz.cn,*.github.com' );

    see wp-config Codex

    hope this helps

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘block external connection’ is closed to new replies.