TSO Login Organizer
| 开发者 | deadko |
|---|---|
| 更新时间 | 2026年11月8日 19:36 |
| 捐献地址: | 去捐款 |
| PHP版本: | 7.4 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv2 or later |
| 版权网址: | 版权信息 |
详情介绍:
/login, /register and /lostpassword), so visitors never see the standard WordPress login screen (wp-login.php). The pages match your theme and work with a shortcode, a widget or menu items.
On top of that you can switch on optional modules: redirect users by role after login, approve new registrations, restrict content by role, lock out brute-force attempts, add two-factor authentication (TOTP), let users edit their profile and avatar on the site, sign in with Google, Facebook or X, add favorites, and subscribe new users to Mailchimp. Every module is off until you turn it on.
Coming from Theme My Login? You can import its free settings and keep the [theme-my-login] shortcode working.
Core
- Login, register, lost password, reset password, dashboard and privacy confirmation pages
- Custom slugs, shortcode
[tso-login-organizer]and Theme My Login alias[theme-my-login] - Login with username, email, or either; email-only registration; user passwords; auto-login; AJAX
- Widget and navigation menu items
- Import settings from Theme My Login
- Bundled translations: Catalan (ca), Spanish (es_ES); English is the source language
- Redirection by role
- Moderation (email confirm / admin approval)
- Restrictions (private site / per-post roles)
- Security (brute-force lockouts, password length, hide wp-login.php) — may collide with TSO Swiss Knife Login Protect or Kadence Security
- reCAPTCHA — may collide with CleanTalk or Kadence
- Frontend profiles (optional wp-admin block)
- Custom HTML notifications
- TOTP 2FA — may collide with other 2FA plugins
- Social login (Google, Facebook, X)
- Avatar uploads under
uploads/tso-login-organizer/ - Favorites
- Mailchimp opt-in
安装:
- Upload the
tso-login-organizerfolder to/wp-content/plugins/ - Activate the plugin
- Open Tools → TSO Login Organizer
- Optionally import Theme My Login settings, then deactivate Theme My Login
- Enable only the modules you need (keep Security/Captcha/2FA off if Swiss Knife, Kadence Security or CleanTalk already cover them)
屏幕截图:
常见问题:
Will this conflict with TSO Swiss Knife?
Swiss Knife Login Protect can hide wp-login.php and lock out IPs. TSO Login Organizer Security does similar work and stays off by default. Use only one stack for hide-login / brute-force.
How do I keep Theme My Login shortcodes working?
[theme-my-login] is registered as an alias of [tso-login-organizer].
What happens when I import Theme My Login settings?
Import copies AJAX, login/registration type, passwords, auto-login, and all configured address slugs (including profile and favorites when present) into TSO Login Organizer with the same names. If Theme My Login only stored page IDs, the page slug (post_name) is used. Optional modules are not turned on automatically — if profile or favorites URLs were used, enable Profiles / Favorites under Modules after import so those addresses work. Then deactivate Theme My Login once you have verified the URLs.
Is it correct to say which plugin this migrates from?
Yes. Theme My Login is GPL, so importing its free settings and keeping the [theme-my-login] shortcode as an alias is allowed if you keep the GPL license. This plugin is independent: it is not Theme My Login and is not an official product of that project’s authors. Their name is their trademark — use it only to describe migration, not as if this were the same product.
I turned on "Hide wp-login.php" and cannot log in.
The plugin does not hide wp-login.php while the friendly login URL is not working (Permalinks set to Plain or the login rule missing). If you are still locked out, add define( 'TSOLO_ALLOW_WP_LOGIN', true ); to wp-config.php, log in, fix the settings and remove the line.
What does the CA / ES / EN switcher store?
Only the administrator’s interface language preference (Catalan, Spanish, or English) as user meta (tso_login_organizer_ui_lang). Nothing is sent to external servers for that setting. The “Support this plugin” link opens Ko-fi in a new tab.
更新日志:
- Fix: opening wp-admin on another host (for example without "www") no longer logs you out; the login page keeps a session that is still valid.
- Improvement: avatars no longer repeat the same database lookup for commenters' emails on every avatar.
- Improvement: the Google setup steps in the Social module now cover branding (no logo), the audience and publishing the app.
- Improvement: cleaner favorites button (compact pill on posts, one row per favorite with a small remove action) and a duplicate button is removed when a theme prints the post content twice.
- Fix: the personal data export no longer lists empty custom profile fields.
- Fix: branded plain-text emails (e.g. the administrator's new user notice) keep their line breaks instead of running into one paragraph.
- Fix: old wp-login.php style links (reset password, privacy confirmation, redirect_to) keep their query arguments when redirected to the friendly URLs.
- Fix: the privacy confirmation page now shows an error for invalid or expired links instead of always saying it was confirmed.
- Fix: the captcha script also loads on forms shown by the widget or by restricted content, so those logins no longer fail.
- Fix: notification emails can use basic HTML (links, bold, lists); placeholders are escaped and plain-text mode strips tags.
- Fix: social login keeps one linked account per provider (Google, Facebook and X no longer overwrite each other) and can unlink each one.
- Fix: favorites are no longer deleted when a post is a draft, private or has no title; only deleted posts are removed.
- Fix: Mailchimp does not subscribe accounts created by an administrator.
- Security: X-Forwarded-For is read from the right, skipping private proxies, so a visitor cannot spoof the address used for lockouts.
- Security: Moderation no longer reveals an account is pending approval to someone who does not know its password.
- Security: two-factor keys are stored encrypted and backup codes hashed; the key is shown only while setting up and backup codes only once.
- Security: two-factor now turns on only after a valid code from the app is confirmed, and only the user can set up their own.
- Fix: in email registration mode, usernames are built from the email only on this plugin's register form, not for users created in wp-admin or by other plugins.
- Fix: menu links to another website that use /login or /dashboard are no longer rewritten.
- Fix: module settings are sanitized on save even when the module is switched off.
- Security: social login only links to an existing account when the provider confirms the email is verified.
- Improvement: admin layout helpers moved from inline styles to the stylesheet; unused translation entries removed.
- Privacy: added the WordPress personal data exporter, eraser and suggested policy text.
- Translations: Catalan and Spanish for the new strings, plus .l10n.php files for faster loading on WordPress 6.5+.
- Admin: fixed mobile layout overflows (custom fields table, redirection and social login tabs, help boxes, header and tabs).
- Front: widgets no longer get extra bottom spacing on mobile, 2FA backup codes wrap and social buttons are easier to tap. See changelog.txt in the plugin folder for older versions.