Adminvoro Toolkit – Login, Redirects & Site Controls

开发者	nexibyllc
更新时间	2026年7月11日 00:17
PHP版本:	7.4 及以上
WordPress版本:	7.0
版权:	GPLv2 or later
版权网址:	版权信息

下载

1.0.0

详情介绍:

Adminvoro Toolkit brings several practical WordPress administration tools into one lightweight settings screen. Use it to create a custom login URL, personalize the login page, manage simple redirects, apply basic security hardening, disable optional WordPress assets, and replace the default admin footer text. Custom Login URL

Replace the public WordPress login address with a custom login slug.
Block direct logged-out access to wp-login.php and protected wp-admin requests.
Choose what happens when the default login URL is visited: show a 404 response, redirect to the homepage, or redirect to a same-site page.
Keep generated WordPress login links pointed to the custom login address.
Recover access at any time with the ADMINVORO_DISABLE_CUSTOM_LOGIN constant.

Select a custom login logo from the WordPress Media Library.
Change the URL opened when the login logo is clicked.
Add formatted helper text below the logo.
Customize the login background, outside text, and outside link colors.
Control the size of the custom login message.
Reset login branding settings to their defaults.

Redirect Manager

Create and manage simple frontend redirects.
Choose permanent 301 or temporary 302 redirects.
Enable, disable, or delete individual redirect rules.
Use root-relative paths or valid absolute HTTP(S) URLs.
Skip invalid, incomplete, duplicate, and self-looping redirect rules.
Avoid redirect processing for WordPress admin, AJAX, cron, and REST requests.

Adminvoro uses WordPress safe redirect handling. Redirects to another domain work only when that destination host is permitted by WordPress. Basic Security Controls

Disable XML-RPC requests and remove the X-Pingback response header.
Reduce logged-out user enumeration through author requests and public REST API user endpoints.
Remove WordPress generator output and the core version query string from matching script and stylesheet URLs.

These controls provide basic hardening only. Adminvoro Toolkit is not a firewall, malware scanner, backup solution, or replacement for a complete WordPress security service. Performance Tweaks

Remove WordPress emoji scripts, styles, filters, TinyMCE support, and related DNS prefetch hints.
Remove frontend oEmbed discovery output and dequeue the wp-embed script.

Admin Branding

Replace the default WordPress admin footer text with your own message.
Use basic permitted HTML formatting in the custom footer text.

Lightweight and Focused Adminvoro Toolkit is intended for administrators who want a focused collection of common site controls without installing a separate plugin for every small customization. All plugin data is removed when the plugin is deleted through WordPress.

安装:

In WordPress, go to Plugins > Add New Plugin.
Search for Adminvoro Toolkit, or upload the plugin ZIP file.
Install and activate the plugin.
Open Adminvoro Toolkit from the WordPress admin menu.
Configure only the features you want to enable.

Before enabling a custom login URL, save the new login address somewhere secure.

屏幕截图:

升级注意事项:

1.0.0 Initial release of Adminvoro Toolkit.

常见问题:

How do I recover access if I forget or incorrectly configure the custom login URL?

Open your site's wp-config.php file and add the following line above the comment that says WordPress editing should stop: define( 'ADMINVORO_DISABLE_CUSTOM_LOGIN', true ); You can then sign in through the standard wp-login.php address. After correcting the plugin settings, remove the constant or change its value to false.

What happens to wp-login.php after I enable a custom login URL?

For logged-out visitors, direct requests to wp-login.php are handled using the action you selected: a 404 response, a homepage redirect, or a redirect to a same-site page. Logged-in users are not blocked.

Does the custom login URL replace two-factor authentication or limit login attempts?

No. Changing the public login address can reduce automated requests to the default endpoint, but it is not a substitute for strong passwords, two-factor authentication, login rate limiting, updates, backups, or a complete security solution.

Can I redirect visitors to another website?

Adminvoro accepts valid absolute HTTP(S) destination URLs, but it uses WordPress safe redirect handling. An off-site redirect will work only when WordPress allows that destination host. Same-site and root-relative destinations are the most reliable options.

Can I create both 301 and 302 redirects?

Yes. Choose 301 for a permanent redirect or 302 for a temporary redirect. Adminvoro also prevents a rule from redirecting a URL directly back to itself.

Will redirects run inside wp-admin or affect REST API requests?

No. Redirect rules are intended for normal frontend requests and are skipped for WordPress admin, AJAX, cron, and REST request contexts.

What does the user enumeration option block?

For logged-out visitors, it blocks common numeric author queries, author archive discovery, and public WordPress REST API user endpoints. It does not hide every possible place where a username may appear in site content, feeds, themes, or other plugins.

Does disabling XML-RPC affect other services?

It can. Applications or services that depend on XML-RPC, remote publishing, pingbacks, or XML-RPC authentication may stop working. Enable this option only when your site does not need those features.

Will disabling embeds remove existing embedded content?

The option removes WordPress frontend oEmbed discovery output and the wp-embed script. Content behavior can vary by block, theme, plugin, and embed provider, so test important embedded content after enabling it.

Does Adminvoro Toolkit collect data or connect to an external service?

No. The plugin does not include a telemetry, tracking, or external API service. Its settings are stored in your WordPress database.

What happens to the settings when I delete the plugin?

When Adminvoro Toolkit is deleted through the WordPress Plugins screen, its saved settings and redirect rules are removed from the database.

Does it support WordPress Multisite?

The plugin can be used on individual sites in a multisite installation. Settings are stored per site. Test custom login behavior carefully in a staging multisite environment before using it across a network.

更新日志: