RGBmind Ephemere – Temporary Login & Timed Access Control
| 开发者 | rgbmind |
|---|---|
| 更新时间 | 2026年10月29日 13:46 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
- ⚡ 1-Click Quick Temporary Login: Generate temporary user accounts in seconds directly from the JIT dashboard, with email alias support (
name+1@domain.com,name+role@domain.com). - ⏱️ Precise Expiration & Timed Access: Schedule automated expiration down to the exact minute, synchronized with your WordPress site timezone.
- 🔒 Maximum Login Limits (Threshold): Limit allowed logins (e.g. allow only 3 logins). Once reached, the temporary user is automatically locked out.
- 🛡️ Instant Account Lockout (Kill-Switch): Instantly revoke access with a single checkbox toggle, without altering user passwords or deleting accounts.
- 🛑 Real-Time Active Session Invalidation: If an active temporary user is browsing the admin dashboard when their expiration arrives, their session and authentication cookies are revoked immediately.
- 👥 Role & Permission Management (RBAC): Create and customize user roles, clone capabilities from standard roles, and enforce the Principle of Least Privilege.
- 📊 Multi-Format Data Export: Export temporary accounts and access audit logs to CSV, OpenXML Excel (.xlsx), and JSON with formula injection protection.
- 📅 Registration & Creation Date Tracking: View exact registration dates and relative time elapsed (
Created: 2 hours ago) in the JIT table, user profiles, and exports. - 🔍 Search & Filter Toolbar: Filter temporary users by role, lockout status, or username directly from the administrative dashboard.
- 🌐 Translation Ready (i18n): Fully internationalized with POT template included, adhering to WordPress core localization standards.
- Zero Custom Database Tables: Uses native WordPress user metadata (
get_user_meta,update_user_meta,delete_user_meta) andwp_options. - Zero External Server Latency: 100% local execution, zero external API tracking calls, fully GDPR compliant.
- Strict Permission Checks: Only users with the
promote_userscapability (Administrators) can view or modify temporary parameters. - CSRF Protection: Every action is guarded by WordPress cryptographic nonces.
- Clean Uninstallation:
uninstall.phpcompletely wipes all created user metadata and options upon plugin deletion.
安装:
- Upload the
rgbmind-ephemerefolder to your/wp-content/plugins/directory, or install directly through Plugins > Add New searching forRGBmind Ephemereortemporary login. - Activate the plugin via the Plugins screen in WordPress.
- Use the 1-Click Quick Creation tool in RGBmind Ephemere dashboard, or go to Users > All Users and click Edit on any user account.
- Set the desired expiration date/time or maximum login count.
- Access will be automatically revoked once expiration or login limits are reached.
常见问题:
How do I create a temporary login for a developer or contractor?
You can create a temporary login in two ways:
- In the RGBmind Ephemere dashboard, use the 1-Click Quick Account Creation form to instantly generate a temporary account with an expiration timer and email alias.
- Go to Users > All Users, edit any user, check Enable temporary access restrictions, and set an expiration date or login limit.
Does RGBmind Ephemere expire users automatically?
Yes. Once the expiration date/time passes or the maximum login threshold is reached, the account is automatically locked out. Furthermore, if the user is actively logged in when access expires, their active session is terminated in real time.
Can I limit the number of logins?
Yes. You can specify the exact number of allowed logins (e.g., 1, 3, 5). The plugin increments the counter on each login and automatically blocks access once the threshold is reached.
Is RGBmind Ephemere free to use?
Yes, 100%. All core features—expiration schedules, login limits, instant lockout, real-time session termination, user table status columns, role management, and multi-format exports—are completely free and unrestricted.
How is timezone handled for expiration?
The entered date and time are converted to UTC Unix timestamps based on your site's timezone setting in Settings > General. Every login check compares the current Unix timestamp against the expiration timestamp.
What happens if a user is logged in when their expiration time arrives?
The plugin checks session validity in real time on the init hook. When an expired temporary user attempts to browse any page, their session is destroyed, cookies are cleared, and they are redirected to the login page with a notification.
Does this plugin create custom database tables?
No. RGBmind Ephemere follows WordPress core architecture standards by storing data exclusively in the standard wp_usermeta and wp_options tables.
Can temporary users alter their own restrictions?
No. All fields and handlers enforce strict current_user_can('promote_users') permission checks. Non-admin users cannot view the fields or manipulate POST requests.
What is RGBmind Ephemere PRO?
RGBmind Ephemere PRO is a separate commercial add-on plugin for agencies needing passwordless One-Click Magic Links, GDPR access audit trails, activity duration tracking, and instant email/webhook security alerts. It installs as a companion plugin alongside this free core plugin.
Do you offer 1-on-1 customer or technical support?
No. RGBmind Ephemere and RGBmind Ephemere PRO are provided "as is" under standard licensing without personalized 1-on-1 technical assistance. We actively maintain the software and welcome bug reports, regression findings, and security issues via our official Bug Report & Feedback Hub at https://rgbmind.com/bug-report/?product=rgbmind-ephemere.
更新日志:
- Fix: resolved unparsed PHP code string rendering inside the PRO companion add-on preview accordion for the free edition.
- Fix: removed orphan closing HTML tag in the settings accordion markup.
- UI & UX Polishing: Enhanced status icons with clearer visual cues and increased contrast.
- Account Details Drawer: Streamlined user info popover trigger and positioning for smoother inspection.
- Settings Accordions: Restructured Settings tab into clean, collapsible accordion panels, closed by default with intuitive titles and context summaries.
- Table Layout Optimization: Refined dashboard table structure and moved account count indicators to the table footer summary for improved layout balance.
- Live Expiration Countdown: Added real-time ticker updating remaining access time dynamically.
- 1-Click Quick Account Creation: instantly generate temporary accounts with customizable email alias patterns and JIT expirations.
- Role & Capability Management (RBAC): create, clone, customize, and manage user roles and granular permissions.
- Multi-Format Audit Export: download accounts and audit logs in CSV, OpenXML Excel (.xlsx), and JSON formats.
- Native OpenXML Engine: pure-PHP spreadsheet generator with zero external PHP extension dependencies (no ZipArchive required).
- CSV Security Hardening: formula injection mitigation across all exported files.
- Creation Date Tracking: view account registration timestamps and relative time intervals across tables, profiles, and export reports.
- Action Handling Architecture: decoupled dashboard actions to admin_init to ensure clean, header-safe redirects.
- Header UI: added compact PRO security shield indicator.
- Security Architecture: introduced clear IAM separation into JIT (Just-In-Time Access), RBAC (Role-Based Access Control), and MAC (Mandatory Access Control) sections in both user profiles and administrative dashboard.
- RBAC Matrix & Least-Privilege Protection: added visual role capability table and dynamic zero-trust warning badge when temporary accounts are granted Administrator privileges.
- Mandatory Access Control (MAC): dedicated section for instant kill-switch session revocation and global access auditing.
- Bug Report & Feedback Hub: added direct links to the official RGBmind Bug Report & Feedback Hub in the admin header, dashboard sidebar, and plugin row meta.
- Backward Compatibility: old dashboard query arguments (tab=accounts, tab=license) automatically alias to the new structure.
- Community Review Card: added dedicated feedback and 5-star review prompt in Settings & Extensions dashboard.
- Plugin Row Meta: added quick review action link in the WordPress plugins management screen.
- Initial official release on WordPress.org.
- Precise expiration scheduling fully synchronized with WordPress site timezone.
- Login count limits with automatic account lockout upon threshold.
- Instant account lockout toggle for immediate access revocation.
- Real-time active session and authentication cookie invalidation upon expiration.
- Dedicated administrative overview dashboard and user table status column.
- 100% WordPress.org compliant architecture with clean separation between free core and commercial companion add-on.
- Translation Ready (i18n): fully internationalized adhering to native WordPress localization standards (POT template included for community translations via translate.wordpress.org).
- Verified compatibility with WordPress 6.7+ and PHP 8.2+.