Linux 软件免费装

在这里免费安装WordPress以及其他软件

Banner图

ncdLabs Site Access Policies

开发者 ncdlou
更新时间 2026年8月18日 12:06
PHP版本: 8.2 及以上
WordPress版本: 7.0
版权: GPLv2 or later
版权网址: 版权信息

标签

access-control staging content-restriction private-site password-protection

下载

1.0.8 1.0.9 1.0.3 1.0.4 1.0.2 1.0.5 1.0.6 1.0.7

详情介绍:

Control access to a whole WordPress site or only the parts that need protection. Create ordered policies for domain names and URL paths, then decide whether visitors can enter with a shared password, a WordPress login, or both. Everything is managed in WordPress — no web-server rules required. A practical fit for How policies work Each request is checked against your enabled policies in order. The first matching policy decides what access is required, so broad rules and narrow exceptions can live together without custom code.
  1. Choose what to protect: the entire site, an exact or wildcard domain name, or a URL path.
  2. Choose how visitors enter: a shared password, their WordPress login, or both.
  3. For WordPress users, optionally allow only selected accounts, roles, or capabilities.
  4. Use the simulator and analyzer to check which policy will apply, then review activity in the audit log.
Included in Free Premium is optional Premium is a separate companion plugin for organizations that need passkeys, access groups, custom sign-in screens, SSO/identity providers, SCIM, agency multisite tools, and other advanced controls. The Free plugin is fully usable on its own and does not lock included features behind a license key. Compare Free and Premium Privacy and external services By default, the plugin does not contact external services. WordPress handles its normal translation updates. Optional integrations that you configure, such as identity providers, SIEM webhooks, and cloud backups, send only the data needed for that service. Password hashes and private keys are never sent to cloud backups. The plugin supports WordPress’s personal-data export and erasure tools. Audit events are anonymized rather than deleted so the security record remains useful. Shared policies and credentials belonging to other users are not erased. Read the full privacy notice

安装:

  1. In WordPress, go to Plugins → Add New.
  2. Search for “ncdLabs Site Access Policies”, then select Install Now and Activate.
  3. Open Access Policies in WP Admin and follow the setup guide.
  4. Create a policy and use the simulator to confirm which requests it will match.
For a manual installation, upload the ncdlabs-site-access-policies folder to /wp-content/plugins/, then activate the plugin.

屏幕截图:

  • Policies — realistic ordered rules for a client preview, team area, and documentation path.
  • Policy wizard — choose scope, sign-in methods, authorized visitors, and behavior in one guided flow.
  • Policy Simulator — test a visitor request and see the matched policy and outcome before changing live access.
  • Security Dashboard — review protection health, recommendations, and recent activity from WordPress.

常见问题:

Does Free require a license key?

No. Every feature included in the Free plugin works without payment or a license key. Premium is a separate download.

What happens when more than one policy matches?

The first enabled policy that matches the request is used. You can drag policies into the order you want, place specific exceptions above broader rules, and use the simulator to confirm the result.

Can I use the same password for several policies?

Yes. Save a named password once in the password vault and assign it to as many policies as needed. If you rotate that password, every assigned policy uses the replacement.

Does the plugin protect images, downloads, and other files?

The plugin protects requests processed by WordPress. A web server or storage service may deliver static files, including files in the uploads directory, without loading WordPress. Protect sensitive files separately at the server or storage layer.

Does full-page caching affect access policies?

It can. A cached page may be served before WordPress runs the access check. Exclude protected domain names and paths from full-page caching, then clear any existing cached copies. Object caching does not bypass the request check.

How do I unlock Premium after purchase?

Install the Premium companion zip, then add define('WPAPM_PREMIUM_SKU', 'pro'); (or agency / enterprise) to wp-config.php. The plugin does not contact a licensing server. Your purchase confirmation email includes the exact line for your edition.

Does the plugin contact external servers?

Not by default. WordPress handles its normal translation updates. Optional Premium features that you configure, such as identity providers, SIEM webhooks, and cloud backups, send data only to the endpoints you choose.

Where is the source for the admin JavaScript?

Unminified sources live in resources/js/. Build with npm install && npm run build. Development repository: https://git.ncdlabs.com/ncdlabs/ncdlabs-site-access-policies

Is this plugin GPLv2 compatible?

Yes. The plugin is licensed GPLv2 or later. Bundled production libraries are GPL-compatible (MIT/BSD). Self-hosted IBM Plex fonts use the SIL Open Font License.

更新日志:

1.0.9 1.0.8 1.0.7 1.0.6 1.0.5 1.0.4 1.0.3 1.0.2 1.0.1 1.0.0