Ukulungiswa Kwephutha Lekhukhi: Indlela Yokuxilonga Nokulungisa Izinkinga Zokungena Nezeseshini

Isibuyekezo sokugcina: 05/22/2026
  • Amakhukhi abalulekile ekungeneni ngemvume, ukwenza kube ngokwakho kanye nokuhlanganiswa kwezinkampani zangaphandle, kodwa imithetho yobumfihlo yesimanje kanye nokungalungiselelwa kahle kuvame ukuwaphula.
  • Amaphutha ekhukhi le-WordPress avame ukuvela kuma-plugin okuphepha noma e-cache, izinguquko zesizinda noma ze-SSL, futhi angalungiswa ngokuvuselela, ukusula i-cache kanye nokuhlelwa kokucushwa okuqondiwe.
  • Imikhawulo ye-Chrome kumakhukhi ezinkampani zangaphandle ithinta kakhulu izinhlelo zokusebenza ezihlukanisiwe ze-frontend/backend, ezidinga izimfanelo zamakhukhi ezibuyekeziwe kanye namasu esizinda.
  • Amakhukhi amakhulu noma onakele angabangela ngisho namaphutha e-HTTP angahluziwe, okwenza ukususwa kwamakhukhi ngesandla kanye nokuhlolwa kosayizi wekhanda kubalulekile kumasayithi azinzile.

umhlahlandlela wokulungisa amaphutha ekhukhi

Amaphutha amakhukhi angacasula ngoba aphula ukungena ngemvume, amadeshibhodi, ukusethwa kwezikhangiso kanye nokuhlanganiswa kwezinkampani zangaphandle ngenkathi engashiyi nhlobo umbono wokuthi yini engalungile ngempela. Ngolunye usuku konke kusebenza kahle, futhi ngosuku olulandelayo i-WordPress ifaka iphutha lekhukhi, i-Chrome inquma ukuvimba amakhukhi eqembu lesithathu, noma iseva yakho iqala ukubuyisa amaphutha angu-502 kanye no-522 ngoba amakhukhi ambalwa aphume ekulawuleni.

Izindaba ezinhle ukuthi cishe zonke lezi zinkinga ezihlobene namakhukhi zilandela amaphethini ambalwa avamile futhi zingalungiswa ngokuxazulula izinkinga okuhleliwe, kokubili kusiphequluli kanye nasohlangothini lweseva noma lohlelo lokusebenza. Kulo mhlahlandlela sizochaza, ngesiNgisi esilula, ukuthi amakhukhi asebenza kanjani, ukuthi kungani evinjelwa noma eziphatha kabi, ukuthi yiziphi izinkinga ezithile ezivela kuma-akhawunti e-Google, amasayithi e-WordPress, izinhlelo zokusebenza ze-Node.js/Next.js ezineziphetho zangaphambili nangemuva ezihlukene, nokuthi amakhukhi amakhulu angawaphazamisa kanjani izicelo, kanye nezindlela zesinyathelo ngesinyathelo zokubuyisela konke endleleni.

Ayini amakhukhi ngempela nokuthi kungani ebaluleke kangaka

Amakhukhi amafayela amancane ombhalo agcinwa amawebhusayithi kusiphequluli sakho ukuze akhumbule ulwazi lwesikhashana mayelana nokuvakasha kwakho kanye nobunikazi bakho kuleyo sayithi. Azithathi isikhala sediski, kodwa zibalulekile ezintweni ezifana nokuhlala ungene ngemvume, ukugcina ulimi oluthandayo, ukulandelela imicimbi yokuhlaziya kanye nokwenza okuqukethwe kube ngokwakho.

Ngokombono womsebenzisi, amakhukhi enza ukuphequlula kuzwakale kubushelelezi ngoba avumela isayithi "likukhumbule" ekubukweni kwekhasi esikhundleni sokuphatha konke ukuchofoza njengesivakashi esisha sha. Idatha evamile elondolozwe kukhukhi ingafaka phakathi ama-ID eseshini, ulwazi oluyisisekelo lwendawo, kungakhathaliseki ukuthi wamukele ibhanela lemvume, noma amafulegi athi ungumsebenzisi wokuphatha uma kuqhathaniswa nesivakashi esivamile.

Ngokombono webhizinisi nobuchwepheshe, amakhukhi ayinsika yezinhlelo eziningi zokuqinisekisa kanye nomthombo wedatha oyinhloko wokuhlaziya, ukwenza ngcono ukuguqulwa kanye nokukhangisa. Amakhukhi okungena ngemvume e-WordPress, amaseshini e-akhawunti ye-Google, izikripthi zokukhangisa ezihleliwe kanye namadeshibhodi amaningi e-SaaS konke kuncike kumakhukhi ukuze asebenze kahle. Uma amakhukhi evinjiwe, onakele noma engalungiselelwanga kahle, uqala ukubona ama-loop okungena ngemvume, ukukhiya komlawuli, imiyalezo yamaphutha mayelana namakhukhi akhutshaziwe kanye namaphutha e-HTTP angavuthiwe.

Iziphequluli zesimanje namathuluzi obumfihlo enze ukuziphatha kwamakhukhi kube nzima kakhulu ngokwethula okuzenzakalelayo okuqinile, ikakhulukazi kumakhukhi ezinkampani zangaphandle. Izici ezifana ne-Chrome's Privacy Sandbox, uhlu lokuvimbela ukulandelela, imodi yangasese, izithiyo zezikhangiso kanye nama-plugin okuphepha ngokwezifiso konke kungaphazamisa amakhukhi, ngokuvamile ngaphandle kokwenza kucace ukuthi yiwona abangela lokhu.

Amakhukhi eqembu lokuqala vs elesithathu nokuthi kungani lo mehluko manje uhlukanisa izinto

Akuwona wonke amakhukhi adalwe ngokulinganayo: iziphequluli ziphatha amakhukhi eqembu lokuqala (asethwe yisayithi olivakashelayo ngqo) ngendlela ehlukile kakhulu kumakhukhi eqembu lesithathu (asethwe ngamanye ama-domain afakwe kuleyo sayithi). Ukuqonda lo mehluko kubalulekile ekuxilongeni izimbungulu eziningi ezintsha.

Ikhukhi yeqembu lokuqala idalwe yisizinda esiqondile esivela kubha yakho yekheli. Isibonelo, uma use- isibonelo.com futhi igcina ikhukhi yeseshini, okuyikhukhi lomuntu wokuqala. Lokhu kuvame ukusetshenziselwa ukungena ngemvume, izintandokazi eziyisisekelo kanye nokusebenza okuyinhloko kwesayithi olipheqululayo ngenkuthalo.

Ikhukhi lenkampani yangaphandle libhalwa yisizinda esingeyona leso osibona ku-URL, ngokuvamile ngezinsiza ezifakiwe njengezikhangiso, izikripthi zokuhlaziya, amawijethi omphakathi, izithombe noma ama-iframes. Uma ukhona isibonelo.com kodwa isikhangiso esivela ku- i-adnetwork.com Uma isethi ikhukhi, lelo khukhi libhekwa njengeqembu lesithathu. Ngokomlando, lawa asetshenziswe ekukhangiseni, ekuhlaziyeni izindawo eziningi, ekulandeleleni nasekuzenzeni kube ngokwakho kuzo zonke izakhiwo eziningi.

Iziphequluli kanye nezinhlelo zobumfihlo ziya ngokuya zivimbela noma zivimba amakhukhi ezinkampani zangaphandle ngokuzenzakalelayo, okungaphula izinhlelo zokusebenza ngokungalindelekile lapho i-frontend kanye ne-backend zihlala khona ezizindeni ezahlukene. Isibonelo, i-frontend ye-Next.js kwesinye isizinda ekhuluma ne-Express backend kwesinye ingabona amakhukhi ayo okuqinisekisa enqatshwa, okuholela emaphutheni anjengokuthi “ikhukhi ayigcinwanga ngenxa yezintandokazi zomsebenzisi” ku-Chrome kuyilapho ukugeleza okufanayo kusebenza ku-Edge noma ku-Brave.

Ukukhishwa kwe-Chrome Privacy Sandbox ikakhulukazi sekuqalile ukukhubaza amakhukhi amaningi eqembu lesithathu, okubangele ukungena ngemvume kwesizinda noma izingcingo ze-API ezithembele kulawo makhukhi ukuthi zehluleke buthule noma zibonise amaphutha enethiwekhi adidayo. Izindlela zesikhashana zokuxazulula izinkinga zifaka phakathi ukuvumela amakhukhi enkampani yangaphandle kuzilungiselelo ze-Chrome noma ukuhlola kusiphequluli esisawamukela, kodwa isikhathi eside ufuna ukuklama kabusha isu lakho lamakhukhi (isibonelo ukusebenzisa isizinda esifanayo sezinga eliphezulu noma izimfanelo zamakhukhi zesimanje) ukuze ungalwi nesiphequluli.

Indlela amakhukhi ayithinta ngayo i-Akhawunti yakho ye-Google kanye nezinye izinsizakalo ze-Google

Izinsizakalo ze-Google zithembele kakhulu kumakhukhi ukuze zigcine iseshini ye-akhawunti yakho iphila futhi zixhumanise ubunikazi bakho be-Google nezinhlelo zokusebenza zangaphandle namasayithi asebenzisa ukungena ngemvume kwe-Google noma okunye ukuhlanganiswa. Uma amakhukhi ekhutshaziwe noma onakele, ungase ubone izixwayiso eziphindaphindwayo zokungena ngemvume, amaphutha lapho uzama ukusebenzisa i-akhawunti yakho ye-Google kumawebhusayithi ezinkampani zangaphandle, noma imiyalezo ethi amakhukhi avaliwe.

Uma uthola isexwayiso esithi amakhukhi akhutshaziwe, kufanele uwavule kabusha kusiphequluli sakho ngaphambi kokuthi usebenzise i-akhawunti yakho ye-Google ngokujwayelekile. Uma amakhukhi esevinjiwe, i-Google ayikwazi ukugcina ithokheni yeseshini efakazela ukuthi uqinisekisiwe, ngakho-ke isicelo ngasinye sibukeka njengesivakashi esisha, esingaqinisekisiwe, noma ngabe usanda kungena emizuzwaneni edlule.

Amawebhusayithi owavakashelayo adala amakhukhi awo, i-Google namanye amapulatifomu abe esewasebenzisa ukuhlinzeka ngezici ezifana nokukugcina ungene ngemvume, ukukhumbula izilungiselelo ezithile zesayithi kanye nokunikeza okuqukethwe okuhlobene nendawo. Ngaphandle kwala makhukhi, izinto ezifana nokukhethwa kolimi, izilungiselelo zesifunda noma izici zokwenza kube ngokwakho zingasethwa kabusha njalo uma uvakashela.

Uma uzama ukufinyelela iwebhusayithi yomuntu wesithathu nge-akhawunti yakho ye-Google bese ubona iphutha mayelana nokukhutshazwa kwamakhukhi, isinyathelo sokuqala esinconywayo ukunika amandla amakhukhi kusiphequluli sakho bese uzama ukungena ngemvume kabusha. Uma usuvele unike amandla amakhukhi futhi iphutha liqhubeka, khona-ke inkinga ingase ibangelwe imithetho eqinile yamakhukhi enkampani yangaphandle, izilungiselelo zobumfihlo ezenziwe ngokwezifiso, izandiso ezifana nezithiyo zokuvimba izikhangiso, noma umkhiqizo wokuphepha kwenethiwekhi ophazamisa ukushintshana kwamakhukhi.

Ukuze uqhubekele phambili, ungabheka amadokhumenti ka-Google ukuze uthole izilungiselelo zamakhukhi e-Chrome noma uhlole izinsiza zosizo zesiphequluli sakho esithile ukuze ulungise indlela amakhukhi aphathwa ngayo. Lokho kungase kuhilele ukuvumela amakhukhi kumasayithi athile, ukukhubaza ukuvikelwa kokulandelela okunamandla kwezizinda okukhulunywa ngazo, noma ukususa amakhukhi amadala abangela ukungqubuzana phakathi kwezikhathi ezindala nezintsha.

Umbuthano omubi wamakhukhi amakhulu noma onakele kumaseva

Ngezinye izikhathi izinkinga zamakhukhi azibonakali njengemiyalezo emihle enobungani nokusebenziseka kodwa njengeziphambeko ze-HTTP ezingahleliwe njenge-502 Bad Request, ukwehluleka kokuxhawulana noma ama-timeout angu-522, ikakhulukazi ngemva kokushintsha kubuchwepheshe be-ad noma izikripthi zokulandelela. La maphutha angaba khona ngezikhathi ezithile futhi avele kuphela ezinhlanganisweni ezithile zamadivayisi nesiphequluli, okwenza kube nzima ukuwaxilonga.

Isimo sangempela esibonwe kusayithi lokuqukethwe sasihilela ingxube yamakhukhi asendulo, amakhukhi amasha okukhangisa ahleliwe kanye namakhukhi ambalwa ayesevele ekhule kakhulu. Lapho iziphequluli ezithile zithumela wonke la makhukhi kuseva ndawonye, ​​inani eliphelele usayizi wekhanda (hlola amakhanda e-HTTP/2 nge-Burp Suite) kudlule lokho iseva noma omunye ummeleli ophakathi ayezimisele ukukusingatha, okwaholela emaphutheni esikhundleni sempendulo efanele.

Okuxakayo ukuthi okuwukuphela kwendlela yokutshela isiphequluli ukuthi sisuse lawo makhukhi ayinkinga ukuphakela ikhasi elifaka iziqondiso ezifanele ze-Set‑Cookie—futhi ukuze siphakele lelo khasi, isiphequluli kufanele siqale sithumele amakhukhi amakhulu asevele ephula isicelo. Lena "i-deadlock" yamakhukhi yakudala: udinga ikhasi ukuze usule amakhukhi, kodwa amakhukhi avimbela ikhasi ekulayisheni.

Kulolo hlobo lwesimo, isixazululo esisebenzayo kubasebenzisi abathintekile ukususa mathupha amakhukhi esayithi elithile ngqo kuzilungiselelo zabo zesiphequluli. Ngokuvamile lokhu kungenziwa ngokuchofoza isithonjana se-padlock noma "ulwazi lwesayithi" eduze kwe-URL, ukuvula isigaba samakhukhi noma idatha yesayithi bese ususa amakhukhi ahlobene naleso sizinda nanoma yiziphi izizinda ezingaphansi ezihlobene.

Uma lawo makhukhi esesusiwe ngesandla, ukulayisha ikhasi elilandelayo kuzophumelela futhi iseva ingaqala kusukela ku-slate ehlanzekile ngaphandle kwama-header amakhulu. Kubanikazi besayithi kanye nama-ejensi aphatha izikripthi zokukhangisa ezihleliwe, kubalulekile ukuhlola ukuthi mangaki amakhukhi asethwayo, ukuthi makhulu kangakanani, aphila isikhathi esingakanani nokuthi angahlanganiswa noma aphelelwe yisikhathi ngamandla ukuze kugwenywe ukushaya imikhawulo yesiphequluli noma ye-proxy futhi.

Iphutha lokungena ngemvume le-WordPress: “Amakhukhi avinjiwe noma awasekelwa yisiphequluli sakho”

Enye yezinkinga ezivame kakhulu ezihlobene namakhukhi ku-WordPress yiphutha lokungena ngemvume elithi amakhukhi avinjelwe noma awasekelwa yisiphequluli sakho, noma ngabe izilungiselelo zamakhukhi esiphequluli sakho zibukeka zilungile ngokuphelele. Leli phutha livela esikhundleni sedeshibhodi evamile yokuphatha ngemuva kokufaka iziqinisekiso zakho, futhi kungaba yinto ekhungathekisayo ikakhulukazi ngoba izivakashi zisengafinyelela isayithi lomphakathi ngaphandle kwezinkinga.

Leli phutha elithile lenzeka lapho i-WordPress yehluleka ukudala noma ukufunda amakhukhi okungena ngemvume ayilindele ngesikhathi senqubo yokuqinisekisa. Cabanga ngekhukhi lokungena ngemvume njengenothi elincane elithi “lo muntu ungene ngemvume futhi uvunyelwe ukubona ideshibhodi.” Uma inothi lingenakwenziwa noma lingakwazi ukufundwa kahle phakathi kokulayisha amakhasi, i-WordPress iyakhohlwa ukuthi uqinisekisiwe futhi yenqaba ukukuvumela ukuthi ungene.

Okwenza le nkinga ibe nzima ukuthi ingabonakala ngisho noma amakhukhi evuliwe kusiphequluli, akukho lutho olushintshile ngokusobala futhi isayithi belisebenza kahle ngosuku olwedlule. Lokho kungenxa yokuthi inkinga ivame ukuhlala ku-WordPress uqobo, ukucushwa kwe-hosting, ama-plugin okuphepha noma e-cache noma indlela amakhukhi ahlelwe ngayo ngemva kokufuduka—kunokuba kusethelweni lesiphequluli esiyisisekelo samakhukhi.

Izimbangela ezivamile eziyisisekelo zifaka phakathi ama-plugin okuphepha ashisekayo avimba noma abhale kabusha amakhukhi, i-caching enamandla ekhonza idatha yeseshini esiphelelwe yisikhathi noma engahambisani, izinguquko kusizinda noma iphrothokholi ngemva kokufuduka, ukulungiswa okungalungile kwe-SSL noma izandiso zesiphequluli eziphazamisa amakhukhi e-WordPress. Kwezinye izilungiselelo, izindlela zesiphequluli ezigxile kubumfihlo noma izithiyo zokulandelela ezivela eceleni nazo zingaphula amakhukhi okuphatha ngenkathi zivumela i-frontend ukuthi isebenze kahle.

Ingxenye eduduzayo ukuthi ukulungiswa okuningi kwaleli phutha lekhukhi le-WordPress akudingi ikhodi encane noma akudingi nhlobo: izinto ezifana nokuphoqa ukuvuselela okunzima, ukusula amakhukhi, ukukhubaza i-plugin noma ukulungisa umugqa owodwa ku-wp-config.php kuvame ukubuyisela ukungena ekuphileni. Kuphela ezimweni ezinamathelayo lapho udinga ukumba imithetho ye-functions.php noma eseceleni kweseva ukuze uqondise i-WordPress ngokucacile mayelana nendlela yokuphatha amakhukhi.

Izizathu eziyinhloko zokuthi kungani amakhukhi e-WordPress evinjelwa noma eziphatha kabi

Ukufuduka kwesayithi kwakamuva noma izinguquko zesizinda kungenye imbangela enkulu yenkinga yamakhukhi. Uma uthutha isayithi uye kumphathi omusha, ushintshela kusuka ku-HTTP uye ku-HTTPS noma ushintshe isizinda, umqondo we-WordPress wokuthi amakhukhi ahlala kuphi ungangqubuzana neqiniso. Izindlela zamakhukhi noma amasizinda angase angahambisani ne-URL entsha, ngakho-ke isiphequluli asizithumeli emuva noma sizithumele ngendlela engalindelekile.

Izilungiselelo zobumfihlo besiphequluli, izandiso kanye nezindlela zokuphequlula eziyimfihlo nazo zingavimba buthule amakhukhi adingwa yi-WordPress ukuze ungene ngemvume kubaphathi. Izithiyo zezikhangiso, izivikelo zobumfihlo noma izandiso zokuvikela ukulandelela ngezinye izikhathi ziphatha amakhukhi okuqinisekisa noma okuhlaziya njengokusolisayo. Kuma-incognito/ama-window ayimfihlo, isikhathi sokuphila samakhukhi singafinyezwa noma sivinjwe ngokuphelele, okwenza izikhathi zokungena zibe buthaka.

Ezinye iziphequluli manje ziphatha amakhukhi ezinkampani zangaphandle noma amasayithi ahlukene njengangathembekile ngokuzenzakalelayo, okungaba nendaba uma ukufakwa kwakho kwe-WordPress kuhilela ama-subdomain amaningi, ama-proxies angemuva noma izinsizakalo zangaphandle ezabelana ngokuqinisekiswa. Ngisho noma i-WordPress ngokwayo izama ukusetha amakhukhi afanele, inqubomgomo yesiphequluli ingawavimbela ukuthi aqhubeke noma athunyelwe ezicelweni ezilandelayo ngaphansi kwezimo ezithile.

Okokugcina, amafayela okucushwa onakele noma amafayela ayisisekelo onakele, kufaka phakathi amafayela e-.htaccess kanye netimu, angaphazamisa indlela i-WordPress ethumela ngayo izihloko namakhukhi. Ezimweni ezingavamile, itimu noma i-plugin ephukile ingaphazamisa umsebenzi we-setcookie we-PHP, iguqule ukubhafa kokukhipha endaweni engafanele noma ithumele umphumela ongalindelekile ngaphambi kwama-header, konke okungaphazamisa ukuphathwa kwamakhukhi.

Isinyathelo ngesinyathelo: izindlela ezisebenzayo zokulungisa izinkinga zamakhukhi e-WordPress

Ngaphambi kokuzama ukuhlela amakhodi noma ukulungisa iseva ejulile, qala ngezenzo ezincane nezinengozi ephansi ezivame ukususa iphutha lekhukhi le-WordPress ngokushesha. Ukuvuselelwa okuphoqelelwe kwekhasi lokungena ngemvume (isibonelo i-Ctrl + F5 ku-Windows noma i-Cmd + Shift + R ku-macOS) kulayisha kabusha ikhasi ngenkathi kudlula izimpahla eziningi ezigciniwe, okungasusa izimo ezingavamile lapho i-JavaScript noma i-HTML ephelelwe yisikhathi ingqubuzana namakhukhi amasha.

Uma ukuvuselela kabusha okunzima kungasizi, isinyathelo esilandelayo ukususa amakhukhi kanye ne-cache yesayithi elithintekile kusiphequluli sakho. Ku-Chrome, ungavula ibhokisi lengxoxo ethi Sula idatha yokuphequlula, ubeke uphawu emabhokisini amakhukhi kanye nedatha yesayithi kanye nezithombe/amafayela agciniwe, bese uqinisekisa. Ngemva kwalokho, vala isiphequluli ngokuphelele, usivule kabusha bese uzama ukungena ngemvume ku-WordPress futhi ukuze ukugeleza kokungena ngemvume kukhiqize isethi yamakhukhi amasha, ahlanzekile.

Uma lezi zenzo eziseceleni kwesiphequluli zingaphumeleli, kufanele usole ama-plugin, ikakhulukazi ukuphepha, ukugcinwa kwesikhashana kanye namathuluzi okuvuma amakhukhi. Uma usakwazi ukufinyelela umphathi, ungavala okwesikhashana lawa ma-plugin kudeshibhodi ye-WordPress. Uma uvalelwe ngaphandle ngokuphelele, ungasebenzisa i-FTP noma umphathi wakho wefayela lokusingatha, zulazula uye ku okuqukethwe kwe-wp / plugins bese uqamba kabusha amafolda ama-plugin asolwayo (isibonelo ukushintsha i-wordfence kuya i-wordfence-ingasebenzi), okuzikhubaza ngaphandle kokulahlekelwa ukucushwa.

Ngemva kokuvala i-plugin eyodwa noma ngaphezulu, hlola ukungena ngemvume futhi; uma kusebenza ngokuzumayo, usuthole i-plugin noma inhlanganisela yama-plugin ecasulayo. Ungabuyisela ukufinyelela, ubuyisele igama lefolda bese ulungisa izilungiselelo ze-plugin ukuze zingabi nzima kakhulu ngamakhukhi, noma ulishintshe ngelinye. Khumbula ukungashiyi ama-plugin abalulekile okuphepha ekhutshaziwe isikhathi eside; ayasiza uma eselungisiwe kahle.

Uma ukuxazulula izinkinga ze-plugin kungayixazululi inkinga, isinyathelo esilandelayo ukuthuthukisa indlela i-WordPress echaza ngayo izizinda zekhukhi nezindlela nge-wp-config.php. Ukwengeza umugqa obeka isizinda sekhukhi—njengokusebenzisa i-HTTP host yamanje njengesizinda sekhukhi—kusiza ukuvumelanisa okulindelwe yi-WordPress nesizinda sangempela lapho isiphequluli sisetha futhi sithumela khona amakhukhi, ikakhulukazi ngemva kokufuduka noma ukushintsha kwesizinda.

Ezimweni ezithuthukile kakhulu ungangeza i-logic yokuphatha amakhukhi ngokwezifiso kufayela le-functions.php lesihloko sakho. Isibonelo, ungasetha ngokusobala ikhukhi yokuhlola elula kokubili endleleni ejwayelekile yamakhukhi kanye nendlela yamakhukhi esayithi uma lokhu kuhlukile, uqinisekise ukuthi isiphequluli siyakwazi ukugcina nokuthumela amakhukhi kuzo zonke izindlela ezifanele i-WordPress engase izihlole ngesikhathi sokungena ngemvume.

Ngenxa yokuthi ukuhlela amafayela okucushwa okuyinhloko kanye nekhodi yetimu kungaphula isayithi lakho uma wenza iphutha, hlala ulondoloza isayithi lakho ngaphambi kokushintsha i-wp-config.php noma i-functions.php. Amathuluzi afana nama-plugin okusekelayo noma izithombe zokubamba akuvumela ukuthi ubuyele emuva ngokushesha uma iphutha lokuthayipha noma umugqa ongafanele ubangela isikrini esimhlophe noma iphutha elibulalayo.

Ukulungiselela izizinda zekhukhi ze-WordPress kanye nezindlela ngendlela efanele

Uma kuvela izinkinga zamakhukhi ngokushesha ngemva kokushintsha isizinda, ukusebenza kwe-SSL noma ukufuduka, izizinda zamakhukhi ezingaqondani kahle ziyinkinga enkulu. I-WordPress idinga ukwazi ukuthi kufanele ikhiphe amakhukhi okungena ngaphansi kwasiphi isizinda; uma leso sizinda singahambisani nalokho isiphequluli esikubonayo kubha yekheli, ikhukhi kungenzeka ingaphinde isethwe noma ingabuyiselwa ezicelweni zakamuva.

Ungatshela i-WordPress ngokucacile ukuthi iyiphi i-domain yamakhukhi okufanele isetshenziswe ngokungeza incazelo kufayela le-wp-config.php. Ukubeka umugqa obeka isizinda sekhukhi ngaphambi kokuphawula okujwayelekile "kokuyeka ukuhlela" kunikeza i-WordPress ireferensi eqondile, njengesizinda esinechashazi esihlanganisa zonke izizinda ezincane (isibonelo, ikhukhi elisebenza ku- isibonelo.com ngakho-ke kuyasebenza www.example.com kanye nezinye izizinda ezincane).

Ukuchaza isizinda samakhukhi kuxazulula izimo lapho isiphequluli sithumela amakhukhi kuphela ngesizinda esincane kuyilapho i-WordPress iwalindele kusizinda esiyinhloko, noma okuphambene nalokho. Lokhu kulungiswa kuvimbela ukuziphatha okudidayo lapho ukungena ngemvume kubonakala kuphumelele kodwa ukulayisha kwekhasi elilandelayo kukhohlwa iseshini ngoba ikhukhi ayihambisananga nobubanzi besizinda obulindelekile.

Kwezinye izilungiselelo eziyinkimbinkimbi—ikakhulukazi ukufakwa kwamasayithi amaningi, ama-proxies angemuva noma inhlanganisela ye-HTTP ne-HTTPS—kungadingeka futhi uqinisekise ukuthi izindlela zamakhukhi namafulegi avikelekile ayahambisana. Amakhukhi ahloselwe kuphela ukuxhumana okuphephile kufanele abe Kuphephile isethi yefulegi, futhi noma iyiphi ikhukhi engasetshenziswa ezimweni zesayithi eliphambene kufanele isebenzise okufanele Okufanayo isici ukuze iziphequluli zesimanje zingasilahli buthule.

Ngemva kokulungisa izilungiselelo zesizinda samakhukhi, sula amakhukhi esiphequluli sakho sesayithi ngaphambi kokuhlola kabusha, ngaphandle kwalokho isiphequluli singaqhubeka nokuthumela amakhukhi amadala angasahambisani nemithetho emisha. Ukungena ngemvume okusha ngamakhukhi asanda kukhishwa kuyindlela ethembeke kakhulu yokuqinisekisa ukuthi ukucushwa kwakho okubuyekeziwe kusebenza njengoba kuhlosiwe.

Ukuhlela i-functions.php ukuze kuxazululwe iziphazamiso zekhukhi ze-WordPress eziqhubekayo

Ezimweni ze-WordPress eziphikelelayo ngendlela engavamile, ukulungiswa okujwayelekile kokucushwa kanye nokuvalwa kwama-plugin akwanele, futhi kungadingeka ukuthi ungenelele ngekhodi yangokwezifiso ku-functions.php. Le ndlela ikuvumela ukuthi usethe amakhukhi ngokucacile, ngokulawula okugcwele indlela yawo kanye nesizinda, ukuze umboze amacala onqenqema angaphathwa kahle yi-logic ye-WordPress ezenzakalelayo endaweni yakho.

Indlela ejwayelekile yokuxazulula inkinga ukusetha ikhukhi elincane lokuhlola endleleni evamile yamakhukhi kanye nasendleleni yamakhukhi esayithi uma lawo amabili ehlukene. Ukwenza lokhu nge-logic enemibandela kuqinisekisa ukuthi, noma nini lapho isayithi lilayisha, isiphequluli sithola imiyalelo yokugcina le khukhi njalo, okufakazela ukuthi isitoreji sekhukhi sisebenza kahle futhi sanelisa ukuhlolwa okuncike kuso.

Ngenxa yokuthi ukuhlela ngqo i-functions.php kusihloko esibukhoma kungaholela kumasayithi aphukile uma wethula amaphutha, abaphathi abaningi bakhetha ukusebenzisa i-plugin yokuphatha iziqeshana. Nge-plugin enjalo, unganamathisela ikhodi efanele, uyivule noma uyivale kalula futhi ugweme ukuthinta amafayela etimu ngqo. Lokhu kuyasiza kakhulu uma udinga isixazululo okwesikhashana noma ufuna ukuzama izinhlobo eziningana.

Uma ungeza noma iyiphi ikhodi yekhukhi yangokwezifiso, hlola njalo kahle kuziphequluli eziningi namadivayisi, kufaka phakathi imodi yangasese kanye nezandiso ezivamile ezifakiwe. Ezinye izinhlanganisela zezici zobumfihlo kanye nokugcinwa kwesikhashana kungasebenza ngendlela ehlukile kunephrofayili yesiphequluli ehlanzekile, futhi ufuna ukuqiniseka ukuthi ukulungisa kwakho kusiza abasebenzisi abaningi kunokuba kubabuhlungu.

Uma ikhodi yakho yangokwezifiso ixazulula inkinga, yigcine ibhaliwe futhi ucabangele ukuthi inkinga eyisisekelo ihlobene yini netimu yakho, i-plugin noma ingqalasizinda yakho. Lokho kukusiza ukuthi unqume ukuthi uzoqhubeka yini nokuxazulula inkinga isikhathi eside, ushintshe ingxenye ebangele inkinga noma ushintshele ekucushweni okujwayelekile lapho ukuphathwa kwamakhukhi okuzenzakalelayo kwe-WordPress kwanele.

Ukulungiswa kwesizindalwazi kanye nokweseva okungavula amakhukhi e-WordPress

Ngezinye izikhathi iphutha lekhukhi liwuphawu lokungahambisani okujulile phakathi kokucushwa kwesizindalwazi sesayithi kanye nesizinda sangempela noma iphrothokholi esetshenziswayo. Lokhu kuvame ukwenzeka lapho isayithi lithuthwa noma liphinde lahlelwa kabusha, kushiywe ama-URL amadala kuthebula lezinketho noma imithetho yokuqondisa kabusha.

Isu elilodwa eliseceleni kweseva ukubuyekeza i-URL yesayithi eliyinhloko kanye nezilungiselelo ze-URL yasekhaya ngqo kusizindalwazi, ngokuvamile kuthebula lezinketho. Ukuqinisekisa ukuthi kokubili okufakiwe kufaka phakathi iphrothokholi efanele (i-HTTP noma i-HTTPS) futhi kufana ncamashi nesizinda sakho esibukhoma kuqinisekisa ukuthi i-WordPress ikhiqiza izixhumanisi kanye nezikophu zamakhukhi ezihambisana neqiniso.

Elinye icebo eliphansi ukususa okwesikhashana ifayela le-.htaccess (ngemuva kokuligcina) bese uvumela i-WordPress ukuthi ilivuselele ngezilungiselelo ze-permalink. Uma amakhukhi ephazanyiswa yimithetho yokubhala kabusha ephikisanayo noma ephelelwe yisikhathi, i-.htaccess ehlanzekile, ekhiqizwe ngokuzenzakalela ingabuyisela okuzenzakalelayo okunengqondo ngenkathi igcina isakhiwo sakho se-permalink.

Ama-plugins kanye nokuqondisa kabusha okuhlobene ne-SSL kufanele futhi kuhlolwe, njengoba ukuphoqelelwa kwe-HTTPS okungahleliwe kahle kungaholela ekudidekeni kwamakhukhi. Isibonelo, uma ezinye izingxenye zesayithi zisalayisha nge-HTTP kuyilapho amakhukhi emakwe njengaphephile kuphela, lawo makhukhi ngeke athunyelwe, aphule izikhathi ngezindlela ezicashile. Qinisekisa ukuthi wonke ama-redirect nama-plugin e-SSL asunduza abasebenzisi njalo ohlelweni olufanayo.

Uma konke okunye kwehluleka, ungaqamba kabusha okwesikhashana isiqondisi sama-plugin noma isiqondisi setimu esebenzayo ukuze uphoqe i-WordPress ukuthi ibuyele kokuzenzakalelayo. Uma uqamba kabusha isiqondisi sama-plugin, wonke ama-plugin ayavalwa ngesikhathi esisodwa; uma inkinga yamakhukhi inyamalala, ungaphinda unike amandla ama-plugin ngalinye ngalinye kuze kube yilapho ukungqubuzana kuvela. Ngokufanayo, ukuqamba kabusha isiqondisi sesihloko esisebenzayo kwenza i-WordPress ibuyele esihlokweni esizenzakalelayo, okusiza ukuqinisekisa ukuthi inkinga yayihlobene nesihloko esenziwe ngokwezifiso.

Izinguquko zobumfihlo besiphequluli sesimanje: amakhukhi ezinkampani zangaphandle, i-Chrome kanye nezinhlelo zokusebenza zesizinda esihlukile

Ngale kwe-WordPress, isigaba esikhulayo sezinkinga zamakhukhi sithinta izinhlelo zokusebenza zewebhu zesimanje ezihlukanisa i-frontend ne-backend kuzo zonke izizinda ezahlukene, ikakhulukazi uma zisebenza ezipheqululini eziqinisa imithetho yobumfihlo njenge-Chrome. Iphethini evamile i-frontend ye-Next.js efakwe ku-host eyodwa kanye ne-Express backend efakwe kwenye, kanye nokuqinisekiswa okuncike kumakhukhi athunyelwe kusuka kuseva kuya kuklayenti.

Abathuthukisi bathola amaphutha anjengokuthi “ikhukhi ivinjiwe ngenxa yezintandokazi zomsebenzisi” noma bathola ukuthi amakhukhi okuqinisekisa awafinyeleli kusiphequluli, noma ngabe ikhodi yangemuva ibiza i-res.cookie ngendlela efanele. Uma behlola ukugeleza okufanayo kuziphequluli ezifana ne-Brave noma i-Edge, amakhukhi angavela futhi konke kusebenze, okukhomba umunwe ngqo ezinqubweni ezithile zesiphequluli kunokuba kube yiziphazamisi zeseva kuphela.

Okwenzekayo ngaphansi kwe-hood ukuthi izici zobumfihlo ze-Chrome ezishintshashintshayo, njenge-Privacy Sandbox, ziyaqeda noma zikhawulela amakhukhi enkampani yangaphandle ngokuzenzakalelayo. Uma i-frontend yakho ne-backend yakho ziphila ezizindeni ezihluke ngokuphelele, amakhukhi avela ku-backend avame ukubalwa njengeqembu lesithathu uma ebukwa yi-frontend, ngakho-ke i-Chrome iyenqaba ukuwagcina buthule ngaphandle kokuthi usebenzisa izimfanelo zesimanje njengenani elifanele le-SameSite kanye namafulegi e-Secure, noma uvumelanise izizinda eduze kakhulu.

Okwesikhashana, onjiniyela bangacela abasebenzisi ukuthi banike amandla amakhukhi enkampani yangaphandle ku-Chrome noma bashintshele kwesinye isiphequluli ukuze bahlolwe, okuvame ukwenza inkinga inyamalale. Noma kunjalo, lelo akulona isu lokukhiqiza eliqhubekayo, ngoba iziphequluli eziningi ziya endaweni efanayo futhi abasebenzisi cishe ngeke bashintshe izintandokazi zabo zobumfihlo ngohlelo lokusebenza olulodwa kuphela.

Ukulungiswa okuqinile kuhilela ukuklama kabusha isu lokuqinisekisa: ukusebenzisa amakhukhi ayingxenye yokuqala ngokwabelana ngesizinda esisezingeni eliphezulu, ukuthembela kakhulu kumathokheni avikelekile kuma-header, noma ukumisa amakhukhi anezimfanelo ezicacile ze-SameSite=None kanye ne-Secure lapho ukusetshenziswa okusemthethweni kwesayithi elihlukile kudingeka. Kubalulekile futhi ukuqaphela amanothi okukhishwa kwesiphequluli kanye namadokhumenti, njengoba izinqubomgomo zamakhukhi zisashintsha futhi zingashintsha indlela uhlelo lwakho lokusebenza oluziphatha ngayo ngaphandle kokufakwa eceleni kweseva.

Ezinye izimo lapho kuvela khona amaphutha amakhukhi

Izinkinga zamakhukhi azigcini nje ngokungena ngemvume kanye nezinhlelo zokusebenza zewebhu—ngezinye izikhathi zibonakala njengamaphutha ajwayelekile ohlangothini lwamakhasimende noma ngisho nokuziphatha okungajwayelekile emidlalweni kanye nezinsizakalo ezisebenzisanayo. Isibonelo, isayithi lingabonisa umlayezo wokuthi ingxenye edingekayo yekhasi ayikwazi ukulayisha futhi likweluleke ukuthi kuhlolwe izandiso zesiphequluli, isimo senethiwekhi noma izilungiselelo. Nakuba lowo mlayezo uzwakala ujwayelekile, ngemuva kwezigcawu iskripthi esivinjiwe noma ikhukhi kungase kuvimbele ingxenye ebalulekile ukuthi iqalise.

Izithiyo zezikhangiso kanye nezandiso zobumfihlo zivame ukudlala indima lapha, njengoba zingavimba izizinda ezithile ekulayisheni izikripthi, ezibe sezisetha noma zifunde amakhukhi. Uma ingxenye yeklayenti eyisihluthulelo ivinjiwe, isayithi lingase lingakwazi ukuqinisekisa isimo sakho sokungena ngemvume, ukulanda ukucushwa noma ukulandelela isimo esidingekayo, okuholela "enseleleni yeklayenti" engacacile noma umlayezo wehlulekile wengxenye esikhundleni sesaziso esiqondile "sokuvinjelwa kwamakhukhi".

Ngisho nasezimweni zemidlalo, njengemidlalo yeselula noma yesiphequluli elandelela inqubekela phambili yomsebenzi ngokuvumelanisa kwamafu noma izikhathi eziqhubekayo, amakhukhi kanye nesitoreji esihlobene kungathonya ukuthi inqubekela phambili iyaqashelwa yini. Uma ipulatifomu yomdlalo eyisisekelo noma i-web wrapper yehluleka ukufunda isihlonzi seseshini esifanele ngenxa yamakhukhi avinjiwe noma onakele, ungase ubone imisebenzi enqabayo ukuyiqeda, izibalo zenqubekela phambili ezingabuyekezi noma imicimbi ehlala ibambekile.

Ukuthola lezi zimo ezingacaci kahle kusalandela iresiphi efanayo evamile: hlola kwesinye isiphequluli, khubaza izandiso okwesikhashana, sula amakhukhi kanye ne-cache yesizinda esithintekile, futhi uma kungenzeka, hlola amalogi enethiwekhi kanye ne-console ukuze ubone ukuthi izicelo ziyahluleka yini ngenxa yamakhukhi noma ama-header avinjelwe. Uma usuqinisekisile ukuthi amakhukhi ayabandakanyeka, ungasebenzisa amasu afanayo nalawo achazwe ku-Google, WordPress kanye nezinhlelo zokusebenza zewebhu—ukulungisa izilungiselelo, ukunciphisa amakhukhi ayinkinga noma ukulungisa kabusha izizinda.

Ngokuqonda kahle ukuthi amakhukhi asekela kanjani ukungena ngemvume, ukwenza kube ngokwakho, izikhangiso zezinhlelo kanye nezinhlelo zokusebenza zesizinda esihlukene—nokuthi izici zobumfihlo zesimanje kanye nokungalungiselelwa kahle kungazilimaza kanjani—ungalandelela ngendlela efanele amaphutha amakhukhi esikhundleni sokuqagela ebumnyameni, ukuthi inkinga iyiphutha lokungena ngemvume le-WordPress eliqinile, i-akhawunti ye-Google enqaba ukuqinisekisa kumasayithi ezinkampani zangaphandle, i-bug ye-Chrome kuphela ku-Next.js yakho kanye ne-Express stack noma isayithi eliphonsa amaphutha e-HTTP angaqondakali kuze kube yilapho amakhukhi agcwele esuliwe.

trabajar con HTTP/2 en Burp Suite
I-athikili ehlobene:
I-Trabajar ne-HTTP/2 en Burp Suite: i-pruebas, i-ajustes y ataques de alto nivel
Okuthunyelwe okuhlobene: