SafeTemp Login - Temporary Access with Approval

开发者	cyferweb
更新时间	2025年12月7日 03:39
捐献地址:	去捐款
PHP版本:	7.4 及以上
WordPress版本:	6.8
版权:	GPL-2.0-or-later
版权网址:	版权信息

下载

1.0.0

详情介绍:

SafeTemp Login allows you to create temporary users with any role. Perfect for contractors, auditors, or anyone who needs limited-time access to your WordPress site. Key Features:

Create temporary users with any role (subscriber, editor, administrator, etc.)
Automatic expiration with configurable behavior (block login or delete user)
Intercept sensitive actions when temporary administrator tries to perform them
Approval system via admin dashboard or secure email links
Email notifications to administrators
Configurable restricted actions list
Log only mode for testing
Secure token-based approval system

How It Works: When a temporary user with administrator role tries to perform a restricted action (like deleting a post, switching themes, installing plugins, etc.), the action is blocked and a request is created. Real administrators receive an email with secure one-time links to approve or deny the action. Security Features:

Nonce verification on all actions
Secure token-based approval links (expire in 30 minutes)
User capability checking
Automatic logout on expiration
One-time use tokens

Supported Actions for Approval (Configurable):

Delete Posts
Edit/Publish Posts
Switch Themes
Install Plugins
Activate Plugins
Deactivate Plugins
Delete Users
Update Core Settings

Open-source, donation-supported. Developed by Cyfer.

安装:

Upload the plugin files to the /wp-content/plugins/safetemp-login directory, or install the plugin through the WordPress plugins screen directly.
Activate the plugin through the 'Plugins' screen in WordPress
Navigate to Tools → SafeTemp Login to configure settings
Create temporary users via Tools → Create Temp User

屏幕截图:

升级注意事项:

1.0.0 Initial release. SafeTemp Login is now available!

常见问题:

Can I create temporary users with any role?

Yes! You can create temporary users with any WordPress role, including administrator.

What happens when a temporary administrator tries to delete a post?

The action is intercepted, blocked, and a request is created. Real administrators receive an email with secure links to approve or deny the action.

What happens when a temporary user expires?

The behavior is configurable. You can either block their login (default) or automatically delete the user account.

Can I customize which actions require approval?

Yes! In the settings page, you can check/uncheck which actions require approval.

How secure are the approval links?

Approval links use one-time tokens with 30-minute expiration. Each link can only be used once.

Can I test without blocking actions?

Yes! Enable "Log Only Mode" in settings. This will create requests and send emails but won't actually block the actions.

Does this work with WordPress Multisite?

Yes! Options are saved per-site. The plugin is multisite-compatible.

What data is stored?

Temporary users are regular WordPress users with special metadata. Action requests are stored as custom post types. All data can be removed on uninstall if configured.

更新日志: