Title: AphoniX Author: aphonicsolutions Published: 15 octombrie 2026 Last modified: 15 octombrie 2026 --- Caută module ![](https://s.w.org/plugins/geopattern-icon/aphonix.svg) # AphoniX De [aphonicsolutions](https://profiles.wordpress.org/aphonicsolutions/) [Descarcă](https://downloads.wordpress.org/plugin/aphonix.1.0.0.zip) * [Detalii](https://ro.wordpress.org/plugins/aphonix/#description) * [Recenzii](https://ro.wordpress.org/plugins/aphonix/#reviews) * [Instalare](https://ro.wordpress.org/plugins/aphonix/#installation) * [Dezvoltare](https://ro.wordpress.org/plugins/aphonix/#developers) [Suport](https://wordpress.org/support/plugin/aphonix/) ## Descriere **AphoniX** is a lightweight, high-performance WordPress security plugin that protects your WordPress login page from brute force attacks, bot attempts, and unauthorized credential stuffing. AphoniX strengthens your site without bloated external services or heavy database queries. Everything is processed cleanly on your server, ensuring privacy, lightning- fast performance, and rock-solid defense. ### Main Features * **Custom SVG CAPTCHA on Login**: Adds an interference-resistant, bot-blocking SVG CAPTCHA challenge directly onto the login form. * **Two-Factor Authentication (2FA)**: Adds a secure second verification factor after successful password verification. * **Google Authenticator & Authy Support**: Supports standard TOTP authentication apps (Google Authenticator, Authy, Microsoft Authenticator) with local QR code generation in your browser. * **Email One-Time Password (OTP)**: Delivers 6-digit verification codes straight to verified user emails. * **Emergency Recovery Codes**: Generates 8 one-time backup recovery codes to prevent administrator lockouts. * **Email Delivery Verification Test**: Ensures your WordPress email/SMTP configuration delivers 2FA OTP codes properly before enforcing 2FA. * **Role-Based 2FA Enforcement**: Selectively require 2FA only for sensitive user roles like Administrators and Editors. * **Login Attempt IP Blocking**: Automatically blocks IP addresses after too many failed login, CAPTCHA, or 2FA attempts. * **Rapid Attempt Detection**: Detects and throttles automated bot attacks submitting bursts of login requests. * **REST API User Enumeration Hardening**: Stops unauthenticated hackers and bots from discovering author usernames via `/wp-json/wp/v2/users`. * **Hide Login URL**: Customize your `wp-login.php` URL slug (e.g. `/my-login/`) and redirect direct attempts to a 404 or custom page. * **Security Activity Log**: Records security events with timestamps, event types, IP addresses, and user IDs with one-click CSV export. * **Generic Login Error Messages**: Prevents username enumeration by hiding detailed login failure notices. * **100% Private & Self-Contained**: No external CAPTCHA or QR-code service is used. Email OTP messages use your configured WordPress mail provider. ### Third-party source and license QRCode.js by davidshimjs, including QR Code for JavaScript by Kazuhiko Arase, is distributed under the MIT license. Source: https://github.com/davidshimjs/qrcodejs The readable source and MIT license are included in assets/js/qrcode.js and assets/ js/qrcode-LICENSE.txt. No build step is required. ### Privacy CAPTCHA challenges and authentication checks are processed locally. Authenticator QR codes are generated in the browser using the bundled library. Email OTP messages are sent using wp_mail() and your configured mail provider, which processes recipient addresses and message contents. Security logs store IP addresses, user IDs, timestamps and event details locally, with a maximum of 500 entries. Authenticator secrets and hashed recovery codes are stored in WordPress user metadata. Uninstall removes plugin settings and authentication metadata. ## Capturi ecran [⌊WordPress login page protected with AphoniX SVG CAPTCHA.⌉⌊WordPress login page protected with AphoniX SVG CAPTCHA.⌉[ WordPress login page protected with AphoniX SVG CAPTCHA. [⌊Two-Factor Authentication (2FA) verification screen.⌉⌊Two-Factor Authentication( 2FA) verification screen.⌉[ Two-Factor Authentication (2FA) verification screen. ## Instalare 1. Upload the `aphonix` folder to the `/wp-content/plugins/` directory, or install the plugin directly through the WordPress Plugins dashboard. 2. Activate **AphoniX** through the **Plugins** screen in WordPress. 3. Navigate to **Settings -> AphoniX Settings** to configure your security rules. 4. If you enable the **Hide Login URL** feature, make sure to bookmark your new login URL before logging out. ## Întrebări frecvente ### Does AphoniX transmit any user secrets to third-party services? No. AphoniX is 100% self-contained. Two-Factor Authentication secrets and QR codes are generated locally and offline on your site. Email OTP messages are sent through your configured WordPress mail system; the mail provider processes the recipient address and message. No external CAPTCHA or QR-code service is used. ### What happens if my email server fails and I cannot receive the 2FA OTP? AphoniX allows administrators to generate and download 8 Emergency One-Time Recovery Codes from the settings screen. Any of these codes can be entered on the 2FA prompt to gain access. ### Can I enforce 2FA only for Administrators? Yes. Under **Settings -> AphoniX Settings -> Role-Based 2FA Enforcement**, you can select which roles require two-factor verification. ### What should I do if I forget my custom Login URL slug? If you lose access, connect to your server using SFTP, FTP, or your hosting file manager, and temporarily rename the `/wp-content/plugins/aphonix/` folder. This deactivates the plugin so you can log in at `/wp-login.php`. Once logged in, rename the folder back to `aphonix` and update your settings. ### Is IP blocking permanent? No. AphoniX blocks IPs temporarily to mitigate active brute force and credential- stuffing attacks while preventing legitimate users from being locked out indefinitely. ## Recenzii Nu există nicio verificare pentru acest modul. ## Contributori și dezvoltatori „AphoniX” este un software open-source. La acest modul au contribuit următoarele persoane. Contributori * [ aphonicsolutions ](https://profiles.wordpress.org/aphonicsolutions/) [Tradu „AphoniX” în limba ta.](https://translate.wordpress.org/projects/wp-plugins/aphonix) ### Te interesează dezvoltarea? [Răsfoiește codul](https://plugins.trac.wordpress.org/browser/aphonix/), vezi [depozitarul SVN](https://plugins.svn.wordpress.org/aphonix/), sau abonează-te la [jurnalul de dezvoltare](https://plugins.trac.wordpress.org/log/aphonix/) prin [RSS](https://plugins.trac.wordpress.org/log/aphonix/?limit=100&mode=stop_on_copy&format=rss). ## Istoric modificări #### 1.0.0 * Initial release of AphoniX. ## Meta * Versiunea **1.0.0** * Ultima actualizare **Acum 2 zile** * Instalări active: **Mai puțin de 10** * Versiune WordPress ** 6.0 sau mai recentă ** * Testat până la **7.1.3** * Versiune PHP ** 7.4 sau mai recentă ** * Limbă * [English (US)](https://wordpress.org/plugins/aphonix/) * Etichete * [captcha](https://ro.wordpress.org/plugins/tags/captcha/)[hide login](https://ro.wordpress.org/plugins/tags/hide-login/) [ip block](https://ro.wordpress.org/plugins/tags/ip-block/)[login security](https://ro.wordpress.org/plugins/tags/login-security/) [two factor authentication](https://ro.wordpress.org/plugins/tags/two-factor-authentication/) * [Vizualizare avansată](https://ro.wordpress.org/plugins/aphonix/advanced/) ## Evaluări Nu a fost trimisă nicio recenzie până acum. [Recenzia ta](https://wordpress.org/support/plugin/aphonix/reviews/#new-post) [Vezi toate recenziile](https://wordpress.org/support/plugin/aphonix/reviews/) ## Contributori * [ aphonicsolutions ](https://profiles.wordpress.org/aphonicsolutions/) ## Suport Ai ceva de zis? Ai nevoie de ajutor? [Vezi forumul pentru suport](https://wordpress.org/support/plugin/aphonix/) ## Donează Vrei să sprijini dezvoltarea acestui modul? [ Donează pentru acest modul ](https://aphonicsolutions.com/)