Block Profile Edits

Block Profile Edits lets administrators restrict specific user roles from editing their own profile fields. You can choose which roles and profile fields to restrict, and also show a custom message to restricted users. This plugin was originally inspired to prevent users from unauthorized redistributing or reselling account access. A common problem with unwanted abuse of GPL themes/plugins. Sites using PDF-stampers to watermark ebooks will also benefit since users cannot change their personal information. Features:

• Choose user roles to restrict - Subscriber, Customer, Student, etc. (Administrators are exempt.)
• Choose profile fields to lock - Name, Email, etc.
• Display custom message - to restricted users, e.g. "Sorry this info cannot be changed."
• Frontend/Backend restriction - works anywhere account profile fields are shown.
• Server-side enforcement - for WP-admin profile saves and WordPress user update APIs.
• Clean, modular code - lightweight, minimalist, no site-slowdown.

Technical Notes:

• Restriction only works on default WordPress profile fields. Extra fields added by plugins are not yet integrated, may be considered for future development.
• Frontend behavior may vary depending the page template. Most cases appear as normal, fields are visually blocked (greyed out) and custom message is shown. In some cases, fields appear as editable but data won't save when submitted.
• Testing shortcode - add [treeflips_bpe_test_form] to any page to test frontend restrictions for logged-in users. Locked fields should render as read-only and display the restriction message.

1.1.0

• Renamed testing shortcode to treeflips_bpe_test_form for distinct prefixing.
• Replaced inline <style> and <script> tags with wp_add_inline_style() and wp_add_inline_script().
• Removed unnecessary custom translation loader (auto-loaded in WP 5.8+).
• Updated public code identifiers and options to use the distinct treeflips_bpe prefix.
• Removed the deprecated testing shortcode alias.

1.0.6

• Updated readme descriptions and text.
• Removed domain path "/languages".

1.0.5

• Updated the frontend test shortcode to submit with AJAX and show inline success/error messages without page reloads.

1.0.4

• Updated the frontend test shortcode to visually lock restricted fields and show the configured restriction message.

1.0.3

• Added frontend restriction testing shortcode.

1.0.2

• Strengthened server-side protection for locked core profile fields across backend, frontend, AJAX, REST, and WordPress user update API requests.
• Prevented locked profile meta from being added, updated, or deleted for restricted users.
• Removed duplicate native browser tooltip on locked backend fields.

1.0.1

• Fixed profile screen asset loading for locked backend fields.
• Improved locked field message behavior for pointer and touch users.

1.0.0

• Initial release.