Private! WordPress Access Control Manager

Manage easily, who is allowed to access your blog or certain parts of your blog or just improve the security of your installation

Author:Oliver Sperke (profile at wordpress.org)
WordPress version required:3.0.0
WordPress version tested:3.0.5
Plugin version:1.7.0
Added to WordPress repository:04-09-2010
Last updated:27-09-2010
Warning! This plugin has not been updated in over 2 years. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.
Rating, %:0
Rated by:0
Plugin URI:http://plugins.x-blogs.org/private/
Total downloads:30 392
Active installs:700+
plugin download
Click to start download

Private! makes it possible to build private blogs for your friends, family or your business.

But Private! can do much more for you!

Common Features

The configuration is as simple as powerful and the best of all: It's incredible fast - you will not notice any differences from your standard installation to running a fully protected blog. It does not modify your roles, capabilities and it does not need new tables or adds queries to your normal pages.

Content Restrictions

You can use Private! to protect paid content on your page. Lock down your blog and decide who can access your front page, blog page, content pages, category archive, tag archive, search, feeds and so on. You can allow full access to your blog and restrict the access to posts in single or multiple categories and/or tags. You can allow access to certain posts even, if they are in protected categories or tags. You can give your users access to restricted areas for years or seconds. It's up to you!

Security

Improve the security of your blog by customizing your login failure messages, prevent brute force, XSS, SQL, Field Truncation, Session Hijacking and more attacks, slow down attackers, force your users to use strong passwords or just add or remove RSD/WLW/Generator Tags from your blog and/or the blogs readme.html. And this is the only plugin, that can improve the security network wide. You can force every blogs in you network to use your preferred settings by default.

Multisite Enhancements

Users can now register directly on single blogs in multisite installations. Network admins can force users to stay related to the main blog. Both options must be approved in the private.php. Remember the plugin must be installed in the main blog too or you have to activate the plugin as network plugin.

Translations

English, german and brazilian portugese translations are included. This is my first wordpress plugin. Please tell me about bugs and errors or send me translations.

Features

  • Easy setup assistant - Configure the plugin with a few clicks
  • Easy to use ajax featured admin pages
  • Restrict access to your whole blog or to certain features, like archives, search or single posts
  • Allow or deny access to certain categories or tags or to single posts
  • Allow access by Roles, Capabilities or Userlevels or mix them all
  • Redirect unauthorized users to internal or external pages
  • Define how long a user can access your pages
  • Full I18n support
  • Remove all entries from the database with just one (maybe two) click(s)
  • Remove restricted posts from front page, blog home, search etc.
  • Remove categories from your sidebar

Security Features

  • Send or remove extra headers for WLW or RSD capable blog clients
  • Customizable login error messages
  • Force your users to use strong passwords
  • Prevent most common XSS/SQL/Field Truncation/File Upload Injection Attacks
  • Remove version from or the whole Generator Tag
  • Remove the readme.html from the blog root
  • Remove feeds from your blog header for non-authorized users
  • Access feeds with special generated urls
  • Encrypt (Triple DES) your password with javascript before sending login informations
  • Brute Force Protection
  • Tarpit Protection
  • Define maximum login attempts or lockout time for attackers
  • Restrict your admin to your current ip if you use a static adress

Multisite Features

  • Full multisite compatible
  • Define if all logged in users can access your pages or just those, who are related to your blog
  • Allow users to register directly to your blog without inviting them or let them subscribe to your blog in their user profile
  • Set your security settings blog network wide

Translations

  • en_US (english)
  • de_DE (deutsch)
  • pt_BT (brazilian portugese) [Thanks to Eduardo]

** This plugin requires PHP 5.1 or newer **