diff --git a/internal/web/actions/default/log/settings.go b/internal/web/actions/default/log/settings.go
index 928b5bbd..dd928428 100644
--- a/internal/web/actions/default/log/settings.go
+++ b/internal/web/actions/default/log/settings.go
@@ -33,6 +33,7 @@ func (this *SettingsAction) RunPost(params struct {
 	CanClean     bool
 	CapacityJSON []byte
 	Days         int
+	CanChange    bool
 
 	Must *actions.Must
 	CSRF *actionutils.CSRF
@@ -49,10 +50,13 @@ func (this *SettingsAction) RunPost(params struct {
 		this.ErrorPage(err)
 		return
 	}
-	config.CanDelete = params.CanDelete
-	config.CanClean = params.CanClean
-	config.Days = params.Days
+	if config.CanChange {
+		config.CanDelete = params.CanDelete
+		config.CanClean = params.CanClean
+		config.Days = params.Days
+	}
 	config.Capacity = capacity
+	config.CanChange = params.CanChange
 	err = configloaders.UpdateLogConfig(config)
 	if err != nil {
 		this.ErrorPage(err)
diff --git a/web/views/@default/log/settings.html b/web/views/@default/log/settings.html
index e5bda586..e9ad7060 100644
--- a/web/views/@default/log/settings.html
+++ b/web/views/@default/log/settings.html
@@ -5,32 +5,39 @@
 	<csrf-token></csrf-token>
 
 	<table class="ui table definition selectable">
-		<tr>
+		<tr v-show="logConfig.canChange">
 			<td class="title">是否可以手动删除日志</td>
 			<td>
 				<checkbox name="canDelete" v-model="logConfig.canDelete"></checkbox>
 			</td>
 		</tr>
-		<tr>
+		<tr v-show="logConfig.canChange">
 			<td>是否可以手动清理</td>
 			<td>
 				<checkbox name="canClean" v-model="logConfig.canClean"></checkbox>
 			</td>
 		</tr>
-		<tr>
-			<td>日志保留天数</td>
+		<tr v-show="logConfig.canChange">
+			<td class="title">日志保留天数</td>
 			<td>
 				<input type="text" name="days" v-model="logConfig.days" style="width:5em" maxlength="3"/>
 				<p class="comment">超过此天数的日志将会被自动清理，0表示不自动清理。</p>
 			</td>
 		</tr>
 		<tr>
-			<td>最大容量限制</td>
+			<td class="title">最大容量限制</td>
 			<td>
 				<size-capacity-box :v-name="'capacityJSON'" :v-value="logConfig.capacity"></size-capacity-box>
 				<p class="comment">超出此容量限制后将会发送提醒。</p>
 			</td>
 		</tr>
+		<tr v-show="logConfig.canChange">
+			<td>是否允许修改清除配置</td>
+			<td>
+				<checkbox name="canChange" v-model="logConfig.canChange"></checkbox>
+				<p class="comment">选中后，不能再次修改删除、清理相关设置，防止出现安全问题。</p>
+			</td>
+		</tr>
 	</table>
 
 	<submit-btn></submit-btn>