scribu

Mustafa Uysal

AppThemes

By default, when a visitor accesses your site, the admin bar is not shown. This makes sense for a blog, where you’re the only one that has an account.
However, if you’re running a site where most visitors need to be logged in before doing anything useful, you probably want to make it as easy as possible for them to log in or register.
This is what this plugin is for: it shows the login form right there in the admin bar, so that users don’t need to load another page just to enter their username and password.

Admin Bar Login

Show a compact login experience in the admin bar for logged-out visitors.

wp-comblock

Comblock Login is a professional and secure frontend authentication system designed to provide a seamless user experience outside the WordPress admin area. Unlike standard login plugins, Comblock allows you to transform your site into a multi-level portal through dynamic Custom Dashboards assigned to specific user roles.
The standout feature of this plugin is the Global Logout (Logout from all devices): an advanced security mechanism that enables users to terminate all active sessions across all devices with a single click, ensuring total protection if credentials are compromised. Every aspect of the login process is fortified with Nonce verification (anti-CSRF) and rigorous data sanitization, utilizing native WordPress core functions for maximum reliability.
With Comblock Login, you can: 
* Create multiple private areas by assigning each dashboard to specific user roles (RBAC). 
* Manage the entire user journey through dynamic shortcodes (Login, Logout, User Info). 
* Protect data privacy by filtering which metadata to display via developer-friendly hooks. 
* Monitor site security through integrated logging of access errors and permission violations.
This plugin doesn’t just hide the backend; it creates a secure, tailored ecosystem for your members, ensuring a smooth transition between public content and private dashboards.
<h3>Features</h3>
<ol>
<li>Global Session Control: A high-end security feature allowing users to perform a simultaneous logout from all devices, instantly terminating every active session.</li>
<li>Multi-Dashboard Management: Create unlimited and dynamic restricted areas (based on Custom Post Types) by assigning granular permissions based on user roles.</li>
<li>Secure Frontend Login: A complete authentication system integrated directly into your site’s layout via shortcodes, removing the need for users to access <code>/wp-login.php</code>.</li>
<li>Smart Redirect & Access Control: Intelligent management of post-login redirects and automatic content protection, with immediate redirection for unauthorized users.</li>
<li>Bulletproof Security: Advanced protection featuring Nonce (CSRF) verification, input sanitization, and authentication through the secure <code>wp_signon()</code> native function.</li>
<li>Extensible User Info: A dedicated shortcode to display profile data, featuring developer hooks (PHP filters) to customize which meta fields are shown or hidden.</li>
<li>Security Error Logging: Integrated monitoring system that records login errors and permission breaches for total security oversight.</li>
</ol>
<h3>Usage</h3>
<ul>
<li>
Use the shortcode <code>[comblock_login]</code> to display the login form. You can insert this shortcode into any page or post. 
Simple example (only required attribute): 
<code>[comblock_login dashboard-post-id="8"]</code> 
Complete example (with all optional attributes): 
<code>[comblock_login id="subscriber-login" class="subscriber-form-login" dashboard-post-id="8" privacy-page-id="2"]</code> 
Where:
<ul>
<li><code>dashboard-post-id</code> is mandatory and represents the ID of a Dashboard post type created in the back office. </li>
<li><code>id</code>, <code>class</code>, and <code>privacy-page-id</code> are optional, where <code>privacy-page-id</code> refers to the privacy policy page ID.</li>
</ul>
</li>
<li>
Use the shortcode <code>[comblock_logout]</code> only within the <code>dashboard</code> post type to display the logout link. 
Simple example (without optional attributes): 
<code>[comblock_logout]</code> 
Complete example (with optional attributes): 
<code>[comblock_logout id="logout-link" class="btn-logout"]</code>
</li>
<li>
Use the shortcode <code>[comblock_disconnection]</code> within the <code>dashboard</code> post type to display the disconnection link. 
Simple example: 
<code>[comblock_disconnection]</code> 
Complete example: 
<code>[comblock_disconnection id="disconn-link" class="btn-disconnect"]</code>
</li>
<li>
Use the shortcode <code>[comblock_user_info]</code> within the dashboard post type to display user information. 
Complete example: 
<code>[comblock_user_info title="Profile Details" fields="display_name,user_email,billing_phone"]</code>
The <code>fields</code> attribute accepts comma-separated user meta keys. For security, you can control which fields are accessible using the following PHP filters:
<ul>
<li><code>comblock_login_user_ban_fields</code>: Add keys to this blacklist to prevent them from being displayed, even if requested in the shortcode.</li>
<li><code>comblock_login_user_info_allowed_fields</code>: Use this whitelist to explicitly permit custom meta keys (like WooCommerce or ACF fields).</li>
</ul>
Example: How to allow a custom field 
Add this to your <code>functions.php</code>: 
add_filter(‘comblock_login_user_info_allowed_fields’, function($allowed) { 
 $allowed[] = ‘billing_phone’; 
 return $allowed; 
});
These hooks enable developers to customize which user data can be displayed via the shortcode while maintaining control over security and privacy.
</li>
</ul>
<h3>Security</h3>
The plugin implements the following security mechanisms:
<ul>
<li>Nonce verification for all critical login and logout actions to protect against CSRF.</li>
<li>Sanitization of input from login forms to prevent injection.</li>
<li>Authentication via WordPress’ secure <code>wp_signon()</code> function.</li>
<li>Strict session cookie management with SSL support.</li>
<li>Granular control of access permissions based on user roles defined for each dashboard.</li>
<li>Complete destruction of user sessions upon logout from all devices.</li>
</ul>

Comblock Login

Secure frontend login/logout with user dashboards, session management, and role-based access control for WordPress sites.

Admin Bar Login vs Comblock Login