ACW Maintenance Mode by Page
| 开发者 | lorenzof |
|---|---|
| 更新时间 | 2026年10月30日 18:09 |
| PHP版本: | 7.2 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- Logged-out visitors who open any URL are redirected to the selected page.
- You choose which user roles keep browsing the whole site and using the dashboard (administrators always can). Users with other roles, such as subscribers or customers, see the maintenance page like visitors.
- Front-end login, registration and lost password pages (e.g. Paid Memberships Pro) are detected and stay reachable. You can add other pages that must stay reachable, such as an account page.
- The maintenance page is served with an HTTP 503 Service Unavailable status and a
Retry-Afterheader, which is the correct signal for search engines during a temporary maintenance. - The page is displayed with a minimal template (content only, without the theme header, footer and menu). Choose the content width: default (inherited from the theme via
theme.jsonor$content_width, with a fallback) or full width. - XML sitemaps (such as
sitemap.xml,sitemap_index.xmlorwp-sitemap.xml) also answer 503, so the list of your URLs is not published during maintenance.robots.txtis served normally, so search engines keep crawling and see that the pause is temporary. - Optional, for staging sites and sites not online yet: do not load tracking codes (Google Analytics, Tag Manager, Facebook Pixel, cookie banner...) on the maintenance page. Styles and the scripts of WordPress, of the theme and of the blocks used in the page stay.
- Optional: hide pages, posts and other content from the REST API (
/wp-json/wp/v2/...) to visitors who are not signed in. Signed-in users and application passwords keep working. - The login page and AJAX remain reachable, so you can always sign in and turn the mode off.
- If the selected page is deleted, unpublished or password-protected, visitors get a generic 503 maintenance message (never a redirect loop) and administrators see a warning.
- Saving the settings purges the cache of SiteGround Speed Optimizer, WP Rocket, LiteSpeed Cache, W3 Total Cache, WP Super Cache and WP Fastest Cache.
安装:
- Upload the
acw-maintenance-mode-by-pagefolder to/wp-content/plugins/, or install the plugin from the WordPress dashboard. - Activate the plugin through the "Plugins" screen.
- Go to Settings → Maintenance.
- Check "Enable maintenance", choose the page to display and save.
常见问题:
Do logged-in users see the maintenance page?
It depends on their role. In Settings → Maintenance check the roles that keep browsing the site: by default these are the roles that can write content (Administrator, Editor, Author, Contributor). Users with unchecked roles see the maintenance page and cannot open the dashboard. Administrators always have access.
My site uses a front-end login page. Can users still sign in?
Yes. Login, registration and lost password pages moved to the front end by plugins such as Paid Memberships Pro are detected automatically. Other pages can be kept reachable with the "Pages always reachable" setting.
Visitors still see the normal site after enabling maintenance
A page cache is serving pages saved before maintenance was enabled. The most common caching plugins are purged automatically when you save; with other caches, a CDN or a server cache, purge it manually.
Does the maintenance page show the theme header and footer?
No, only the page content is shown through a minimal template. The theme styles (CSS/fonts) are still loaded, and so are the scripts that plugins add to every page, tracking codes included, unless you check "Tracking codes".
Which settings should I use on a staging site?
Check "Tracking codes", so visits to the maintenance page are not tracked, and "REST API", so the content cannot be read through /wp-json/. On a live site you can leave both unchecked: visits keep being counted and apps or services that read the site through the REST API keep working.
Can I use it on a live site that is already indexed by search engines?
Yes. Every page answers 503 with a Retry-After header, the signal search engines expect for a temporary maintenance, while robots.txt stays reachable. Keep the pause short, though: if the site stays closed for more than a couple of days, search engines may start dropping its pages from their results.
Something in the maintenance page stopped working after checking "Tracking codes"
The option keeps the scripts of WordPress, of the theme and of the blocks used in the page, and removes the others. A form added with a shortcode, for example, may lose its script. Uncheck the option, or keep a specific script with the acwmmbp_keep_script filter.
Is this a security feature for private content?
No. It is a maintenance mode: it blocks browser navigation of the theme-rendered pages. It does not protect direct media file URLs, and the REST API only when you check the "REST API" option. To protect truly private content you need server-level protection.
How do I turn it off if I get locked out?
The login page (wp-login.php) always remains accessible and administrators always have access to the dashboard. Sign in and disable the mode from the settings.
更新日志:
- New: "Tracking codes" option, to remove analytics, tracking pixels, cookie banners and other added scripts from the maintenance page. Styles and the scripts of WordPress, of the theme and of the blocks used in the page stay.
- New: "REST API" option, to hide pages, posts and other content from the REST API to visitors who are not signed in. Signed-in users, application passwords and the routes of other plugins keep working.
- New: XML sitemaps (WordPress, Yoast SEO and similar) answer 503 during maintenance, instead of listing the site URLs.
- Fix: robots.txt is served normally instead of being redirected to the maintenance page.
- New: choose which user roles keep browsing the site during maintenance. Users with other roles see the maintenance page and cannot open the dashboard. Administrators always have access.
- New: front-end login, registration and lost password pages (e.g. Paid Memberships Pro) stay reachable.
- New: "Pages always reachable" setting.
- New: saving the settings purges the most common page caches.
- Fix: redirect loop when the selected page is the posts page, or is deleted, trashed or unpublished. Visitors now get a generic 503 message and administrators a warning.
- Fix: a password-protected page can no longer be used as maintenance page (visitors would see the password form).
- Fix: theme content widths using clamp() or var() are no longer broken.
- Fix: the redirect is no longer cacheable.
- Tweak: the maintenance template calls wp_body_open().
- Tweak: uninstall removes the options on every site of a multisite network.
- First release.