Secure frontend login/logout with user dashboards, session management, and role-based access control for WordPress sites.

wp-comblock

Comblock Login is a professional and secure frontend authentication system designed to provide a seamless user experience outside the WordPress admin area. Unlike standard login plugins, Comblock allows you to transform your site into a multi-level portal through dynamic Custom Dashboards assigned to specific user roles.
The standout feature of this plugin is the Global Logout (Logout from all devices): an advanced security mechanism that enables users to terminate all active sessions across all devices with a single click, ensuring total protection if credentials are compromised. Every aspect of the login process is fortified with Nonce verification (anti-CSRF) and rigorous data sanitization, utilizing native WordPress core functions for maximum reliability.
With Comblock Login, you can: 
* Create multiple private areas by assigning each dashboard to specific user roles (RBAC). 
* Manage the entire user journey through dynamic shortcodes (Login, Logout, User Info). 
* Protect data privacy by filtering which metadata to display via developer-friendly hooks. 
* Monitor site security through integrated logging of access errors and permission violations.
This plugin doesn’t just hide the backend; it creates a secure, tailored ecosystem for your members, ensuring a smooth transition between public content and private dashboards.
<h3>Features</h3>
<ol>
<li>Global Session Control: A high-end security feature allowing users to perform a simultaneous logout from all devices, instantly terminating every active session.</li>
<li>Multi-Dashboard Management: Create unlimited and dynamic restricted areas (based on Custom Post Types) by assigning granular permissions based on user roles.</li>
<li>Secure Frontend Login: A complete authentication system integrated directly into your site’s layout via shortcodes, removing the need for users to access <code>/wp-login.php</code>.</li>
<li>Smart Redirect & Access Control: Intelligent management of post-login redirects and automatic content protection, with immediate redirection for unauthorized users.</li>
<li>Bulletproof Security: Advanced protection featuring Nonce (CSRF) verification, input sanitization, and authentication through the secure <code>wp_signon()</code> native function.</li>
<li>Extensible User Info: A dedicated shortcode to display profile data, featuring developer hooks (PHP filters) to customize which meta fields are shown or hidden.</li>
<li>Security Error Logging: Integrated monitoring system that records login errors and permission breaches for total security oversight.</li>
</ol>
<h3>Usage</h3>
<ul>
<li>
Use the shortcode <code>[comblock_login]</code> to display the login form. You can insert this shortcode into any page or post. 
Simple example (only required attribute): 
<code>[comblock_login dashboard-post-id="8"]</code> 
Complete example (with all optional attributes): 
<code>[comblock_login id="subscriber-login" class="subscriber-form-login" dashboard-post-id="8" privacy-page-id="2"]</code> 
Where:
<ul>
<li><code>dashboard-post-id</code> is mandatory and represents the ID of a Dashboard post type created in the back office. </li>
<li><code>id</code>, <code>class</code>, and <code>privacy-page-id</code> are optional, where <code>privacy-page-id</code> refers to the privacy policy page ID.</li>
</ul>
</li>
<li>
Use the shortcode <code>[comblock_logout]</code> only within the <code>dashboard</code> post type to display the logout link. 
Simple example (without optional attributes): 
<code>[comblock_logout]</code> 
Complete example (with optional attributes): 
<code>[comblock_logout id="logout-link" class="btn-logout"]</code>
</li>
<li>
Use the shortcode <code>[comblock_disconnection]</code> within the <code>dashboard</code> post type to display the disconnection link. 
Simple example: 
<code>[comblock_disconnection]</code> 
Complete example: 
<code>[comblock_disconnection id="disconn-link" class="btn-disconnect"]</code>
</li>
<li>
Use the shortcode <code>[comblock_user_info]</code> within the dashboard post type to display user information. 
Complete example: 
<code>[comblock_user_info title="Profile Details" fields="display_name,user_email,billing_phone"]</code>
The <code>fields</code> attribute accepts comma-separated user meta keys. For security, you can control which fields are accessible using the following PHP filters:
<ul>
<li><code>comblock_login_user_ban_fields</code>: Add keys to this blacklist to prevent them from being displayed, even if requested in the shortcode.</li>
<li><code>comblock_login_user_info_allowed_fields</code>: Use this whitelist to explicitly permit custom meta keys (like WooCommerce or ACF fields).</li>
</ul>
Example: How to allow a custom field 
Add this to your <code>functions.php</code>: 
add_filter(‘comblock_login_user_info_allowed_fields’, function($allowed) { 
 $allowed[] = ‘billing_phone’; 
 return $allowed; 
});
These hooks enable developers to customize which user data can be displayed via the shortcode while maintaining control over security and privacy.
</li>
</ul>
<h3>Security</h3>
The plugin implements the following security mechanisms:
<ul>
<li>Nonce verification for all critical login and logout actions to protect against CSRF.</li>
<li>Sanitization of input from login forms to prevent injection.</li>
<li>Authentication via WordPress’ secure <code>wp_signon()</code> function.</li>
<li>Strict session cookie management with SSL support.</li>
<li>Granular control of access permissions based on user roles defined for each dashboard.</li>
<li>Complete destruction of user sessions upon logout from all devices.</li>
</ul>

Alternatives to Comblock Login

Top alternatives