Branexa
| 开发者 | jexla |
|---|---|
| 更新时间 | 2026年7月30日 18:49 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
Branexa is an all-in-one white-label toolkit for WordPress agencies, developers, and site owners.
Customize the WordPress admin area, login page, dashboard, menus, plugin visibility, security controls, and optional social login from one streamlined settings panel.
Built for professionals who deliver branded WordPress websites to clients, Branexa creates a polished experience without requiring multiple separate plugins.
Features
Branding & Site Identity
- Replace the WordPress logo in the admin sidebar and admin bar.
- Add a custom favicon.
- Customize or hide the admin footer.
- Apply custom CSS across the WordPress admin area.
- Add a
branexa-elementor-activebody class when Elementor is active. - Restore Branexa settings to their defaults.
- Add a custom logo to the login form.
- Customize the background colour and image.
- Customize the submit button colour and label.
- Optionally enable “Remember me” by default.
- Link the login logo to your website instead of WordPress.org.
- Customize the welcome panel title and message.
- Restrict the welcome panel to selected user roles.
- Hide the welcome panel when it is not needed.
- Hide individual dashboard widgets, including Activity, At a Glance, and Quick Draft.
- Display an RSS feed widget with your latest updates.
- Add a second HTML dashboard panel for client notes.
- Hide selected post and page editor meta boxes.
- Hide admin menu items and plugins for non-administrators, selected roles, or everyone.
- Hide specific plugins from the Plugins screen.
- Configure the maximum number of failed login attempts per IP address.
- Configure the lockout duration.
- Store lockout information using WordPress transients—no additional database tables.
- Add 'Continue with Google' to supported login forms.
- Add 'Continue with Facebook' to supported login forms.
- Automatically create subscriber accounts for new users.
- Use a complete OAuth 2.0 flow with CSRF state-token protection.
- Use a panic URL on
wp-login.phpto clear IP lockouts and temporarily bypass rate limits. - Enable a public maintenance or “coming soon” page with a countdown and bypass password.
- WordPress agencies delivering white-label websites to clients.
- Freelance developers looking for a reusable all-in-one branding toolkit.
- SaaS and membership site owners who want a branded WordPress experience.
安装:
- Upload the
branexafolder to/wp-content/plugins/. - Activate the plugin through the Plugins menu in WordPress.
- Go to Branexa in the admin menu and configure each tab.
屏幕截图:
常见问题:
Will my settings be lost if I deactivate the plugin?
No. Settings are preserved on deactivation and only removed if you uninstall (delete) the plugin.
Do I need developer accounts for Google/Facebook login?
Yes. You will need a Google Cloud project with an OAuth 2.0 Client ID, and a Facebook App with the Facebook Login product enabled. Both are free to create.
Does the login limit apply to admins?
Yes — it applies to all IP addresses equally to prevent brute-force attacks regardless of the targeted username.
Does login limiting work behind a proxy or CDN?
If your server is behind a load balancer, X-Forwarded-For headers may be spoofed. Restrict trust to your proxy IP at the server level, or disable the header if you are not behind a proxy.
Does this plugin track visitors?
No. Branexa does not include analytics or visitor tracking. Login attempt limiting stores failed-attempt counts per IP in your site's database (WordPress transients) and does not send that data to external services. Social login only runs when enabled by the site administrator and initiated by the visitor.
更新日志:
1.1.3
- Tested up to WordPress 7.0.
- Documented Google and Facebook external services in readme (data sent, terms, privacy).
- Removed WordPress.org directory asset files from plugin package.
- Replaced inline admin/login CSS and JS with wp_enqueue_style/script APIs.
- Maintenance countdown uses external CSS/JS files instead of inline tags.
- Fix: Correct legacy options migration key for older installs.
- Fix: Uninstall cleanup now removes panic-bypass and OAuth state transients.
- Fix: Front-end login style controls now isolate form/input/button options more reliably.
- Update: Security docs clarify proxy/CDN X-Forwarded-For considerations.
- Update: Admin JS header text now uses Branexa naming.
- Removed X (Twitter) social login; Google and Facebook only. Legacy Twitter option keys are dropped when settings are saved.
- Role targeting for hidden menus, plugins, dashboard widgets, RSS, extra panel, and editor meta boxes.
- Welcome panel can be limited to selected roles; second HTML dashboard widget.
- Login: custom submit label, optional Remember-me default, preview link.
- Reset all settings to defaults; panic key URL; maintenance countdown + password bypass.
- Elementor admin body class for custom CSS.
- Fixes and documentation updates.
- Initial release.