PrimePlaced - Advanced password protection
| 开发者 | dobrzepostawieni |
|---|---|
| 更新时间 | 2026年7月28日 01:55 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPL-3.0-or-later |
| 版权网址: | 版权信息 |
详情介绍:
- Site-Wide Password Protection: Lock the public frontend of your entire WordPress site behind one primary password.
- Customizable Password Screen: Add your logo, adjust background colors, and edit the heading, field labels, button text, and error message.
- Session or Duration-Based Access: Let visitors stay signed in for one browser session or remember access for a chosen number of days.
- Live Design Preview: Review password screen changes in real time from the admin area.
- Protection Status Widget: See your site's lock status and key protection details right from the WordPress dashboard.
- Cache-Friendly Access Control: Uses cache-busting headers and integrates with common caching workflows to help prevent stale cached pages from bypassing the lock screen.
- Built-In Attempt Throttling: Slows down repeated password checks to reduce automated guessing attempts.
- Multiple Passwords: Create separate passwords, each with its own settings and access rules.
- Scheduled Passwords: Set activation and expiration dates for temporary or time-based access.
- Specific Content Protection: Protect individual posts, pages, products, categories, custom post types, and taxonomies instead of locking the whole site.
- Editor and Template Integrations: Manage protection from the Gutenberg and classic editors, and use password form blocks with branded lock screen templates.
- Role and IP Bypass: Let selected user roles or trusted IP addresses skip the password screen entirely.
- Advanced Session Controls: Configure remember-me behavior and stricter re-authentication rules per protected area.
- Bot Protection: Add Google reCAPTCHA v2 or invisible reCAPTCHA v3 to password forms when enabled by the administrator.
- Activity Logs and Reports: Review authentication attempts, configure log retention, and use export, statistics, backup, and import tools.
- WooCommerce and Custom Content Rules: Apply password protection to products, product categories, and other public content types.
安装:
- In your WordPress admin area, go to 'Plugins' > 'Add New'.
- Search for 'PrimePlaced - Advanced password protection'.
- Click 'Install Now', then click 'Activate'.
- Go to 'Settings' > 'Advanced password protection' to configure your site lock.
- Add a primary password, enable protection, and customize the password screen.
- Download the
primeplaced-advanced-password-protection.ziparchive. - Go to 'Plugins' > 'Add New' > 'Upload Plugin' in your WordPress dashboard.
- Select the ZIP file and click 'Install Now'.
- Activate the plugin through the 'Plugins' menu.
- Open 'Settings' > 'Advanced password protection' and configure the lock screen.
屏幕截图:
常见问题:
How do I password-protect my entire WordPress site?
Install and activate the plugin, open 'Settings' > 'Advanced password protection', add your primary password, enable site protection, and save the settings. Visitors will see the password screen before accessing the public frontend.
Is this a maintenance mode or coming soon plugin?
No. PrimePlaced is a password gate for private access, not a public coming-soon landing page. It's built for staging sites, development work, client previews, and private projects where visitors need to enter a password — it does not create a membership system.
Can I customize the password screen?
Yes. The free version lets you upload a logo, change background colors, and customize the heading, labels, button text, and error message. The Pro extension adds block-based forms and additional templates.
Can I choose how long visitors stay logged in?
Yes. Choose a browser session or set a duration in days for the access cookie. The free version controls how long an authenticated visitor stays signed in; automatic password activation and expiration dates are available in Pro.
Can I protect only a specific page or post?
The free version protects the whole public site with one primary password. Pro adds rules for individual posts, pages, products, categories, custom post types, and taxonomies.
Does the free version support multiple passwords?
The free version uses one primary, site-wide password. Pro adds multiple passwords with separate access rules and schedules.
Can administrators bypass the lock screen?
Yes, administrators can always manage the plugin from the WordPress admin area. Pro adds explicit role-based bypasses and IP allowlisting for frontend access.
Is it compatible with page caching systems?
Yes. The plugin sends cache-busting headers and includes integrations for common WordPress caching workflows. If a cache plugin serves old public HTML, clear its cache after enabling or changing protection settings.
Does it integrate with WooCommerce?
WooCommerce-specific protection for products and product categories is available in the Pro extension. The free version provides site-wide password protection.
What PHP version do I need?
The plugin requires PHP 7.4 or higher. For best performance and security, a PHP 8.3+ environment (the version currently recommended by WordPress core) is preferred.
Does it use external services?
The free plugin includes Freemius for optional account, licensing, upgrade, and update services. Pro can use Google reCAPTCHA when an administrator configures and enables that feature. See the privacy and third-party service sections below for details.
更新日志:
- Fixed global protection bypasses in WordPress REST responses and returned the correct authorization status for protected feeds.
- Protected sensitive settings by redacting saved passwords and session salts from standard REST responses while preserving an explicit, permission-protected password preview for authorized administrators.
- Strengthened password security with authenticated encryption, tamper detection, stricter settings validation, and race-safe throttling of parallel login attempts.
- Prevented authenticated protected pages from being stored as public cache entries and improved cache invalidation for LiteSpeed Cache and W3 Total Cache.
- Improved multisite activation, deactivation, and uninstall handling for networks with more than 100 sites, including cleanup of rate-limit data.
- Improved lock-screen and administrator accessibility with semantic landmarks, accessible color contrast, named mobile tabs, and reliable keyboard focus inside password modals.
- Corrected the password modal copy so adding a password does not incorrectly imply that site protection will be enabled automatically.
- Initial release.