[wordpress插件] Coin Auth硬币认证

This plugin deters brute-force attacks on the WordPress admin dashboard by implementing a “proof-of-work” authentication workflow using the Coinhive.com captcha API.

此插件通过使用Coinhive.com验证码API实施“工作量证明”身份验证工作流，来阻止WordPress管理仪表板上的暴力攻击。

This plugin requires a Coinhive.com account to mine cryptocurrency in the browser.

此插件需要一个Coinhive.com帐户才能在浏览器中挖掘加密货币。

The server will verify the amount of work completed by the client and allow a login request to wp-login.php if verification is successful.

服务器将验证客户端完成的工作量，并在验证成功后允许登录请求发送到wp-login.php。

We hope to deter brute-force attacks on WordPress sites by introducing this economic control.

我们希望通过引入这种经济控制措施来阻止对WordPress网站的暴力攻击。

To do

要做

• Logging feature
• 记录功能

• Pull additional data about coinhive account to display in admin dashboard
• 提取有关共同帐户的其他数据以显示在管理控制台中

• Assign additional work to brute-force offenders automatically
• 自动将其他工作分配给暴力犯罪者

Additional reading

其他阅读内容

• https://en.wikipedia.org/wiki/Proof-of-work_system<

• https://en.wikipedia.org/wiki/Proof-of-work_system <

  /a>

/ a>

• https://coinhive.com/documentation
• https://coinhive.com/documentation

3rd party tools used in this project & privacy

此项目和隐私中使用的第三方工具

• Coinhive API / https://coinhive.com/documentation/http-api

• Coinhive API / https://coinhive.com/documentation/http-api

  li>

  li>

• Coinhive Privacy policy / https://coinhive.com/info/privacy
• Coinhive隐私政策/ https://coinhive.com/info/privacy

• cryptocompare.com and authedmine.com are also associated with the Coihive API requests.
• cryptocompare.com和authedmine.com也与Coihive API请求相关联。

1. Upload coin-auth to the /wp-content/plugins/ directory
2. 将 coin-auth 上载到 / wp-content / plugins / 目录

3. Activate the plugin through the ‘Plugins’ menu in WordPress
4. 通过WordPress中的“插件”菜单激活插件

5. Register with coinhive.com -> Dashboard -> Sites & API Keys -> Copy API credentials (Site Key, and Secret Key)
6. 在coinhive.com中注册->仪表板->站点和API密钥->复制API凭据（站点密钥和秘密密钥）

7. In the WordPress admin dashboard, go to Settings -> Coin auth and enter your API credentials
8. 在WordPress管理控制台中，转到“设置”->“硬币身份验证”，然后输入您的API凭据

9. Click save
10. 点击保存