Attributes WP

<p>Attributes User Access is a lightweight and flexible authentication solution for WordPress. It empowers site administrators with detailed control over login processes, enhancing user authentication and access experience with a focus on security and performance.</p>
<h4>Core Features</h4>
<p><strong>Custom Login Page Creation</strong></p>
<ul>
<li>Generate fully integrated login pages with WordPress</li>
<li>Use shortcode-based forms for easy theme compatibility</li>
<li>Automatically adapts to WordPress core updates</li>
<li>Template override system for complete customization</li>
</ul>
<p><strong>Flexible Login Redirection</strong></p>
<ul>
<li>Redirect native WordPress login requests</li>
<li>Define role-based and context-aware redirection rules</li>
<li>Custom redirect URLs per user role</li>
</ul>
<p><strong>Developer-Focused Architecture</strong></p>
<ul>
<li>PSR-4 autoloading and object-oriented design</li>
<li>Extensible with action and filter hooks</li>
<li>Modular components for easy customization</li>
<li>Comprehensive API for extensions</li>
</ul>
<p><strong>Security & Performance</strong></p>
<ul>
<li>WordPress.org compliant security practices</li>
<li>Nonce verification on all forms and AJAX requests</li>
<li>Transient-based error handling (no PHP sessions)</li>
<li>Optimized asset loading</li>
<li>Minified CSS and JavaScript for production</li>
</ul>
<h4>Shortcode Usage</h4>
<p><strong>Basic login form:</strong><br />
    [attributes_login_form]</p>
<p><strong>With parameters:</strong><br />
    [attributes_login_form redirect=”/dashboard” remember=”false”]</p>
<p><strong>Available parameters:</strong></p>
<ul>
<li><code>redirect</code> – Target URL after login (default: Dashboard)</li>
<li><code>remember</code> – Show “Remember Me” checkbox (default: true)</li>
<li><code>form_id</code> – Custom form identifier (default: attributes_login_form)</li>
<li><code>label_username</code> – Custom username field label</li>
<li><code>label_password</code> – Custom password field label</li>
<li><code>label_remember</code> – Custom remember me label</li>
<li><code>label_log_in</code> – Custom login button text</li>
</ul>
<h4>Template System</h4>
<h4>Template System</h4>
<p>Override templates in your theme for complete customization.</p>
<p><strong>Template location in theme:</strong><br />
    your-theme/attributes/front/forms/login-form.php</p>
<p><strong>Original template location:</strong><br />
    wp-content/plugins/attributes-user-access/templates/front/forms/login-form.php</p>
<p>Copy the original template to your theme and customize as needed. The plugin automatically uses your theme’s template when available.</p>
<h4>Developer Hooks</h4>
<p><strong>Actions:</strong></p>
<ul>
<li><code>attrua_before_login_form</code> – Fires before rendering the login form wrapper</li>
<li><code>attrua_after_login_form</code> – Fires after rendering the login form</li>
<li><code>attrua_login_form_fields</code> – Hook for adding custom fields to login form</li>
<li><code>attrua_login_failed</code> – Fires when a login attempt fails</li>
<li><code>attrua_successful_login</code> – Fires after successful authentication</li>
<li><code>attrua_before_page_creation</code> – Fires before creating authentication pages</li>
<li><code>attrua_after_page_creation</code> – Fires after creating authentication pages</li>
</ul>
<p><strong>Filters:</strong></p>
<ul>
<li><code>attrua_login_redirect_url</code> – Customize login redirection</li>
<li><code>attrua_login_error_message</code> – Modify login error messages</li>
<li><code>attrua_login_credentials</code> – Filter login credentials before authentication</li>
<li><code>attrua_action_links</code> – Modify plugin action links</li>
<li><code>attrua_row_meta</code> – Modify plugin row meta links</li>
</ul>
<h3>Privacy Policy</h3>
<p>Attributes User Access does not:</p>
<ul>
<li>Collect any user data</li>
<li>Send data to external servers</li>
<li>Use cookies for tracking</li>
<li>Store sensitive information</li>
</ul>
<p>The plugin only stores:</p>
<ul>
<li>Plugin settings in WordPress options table</li>
<li>Temporary error messages in WordPress transients (auto-expire)</li>
<li>Page IDs for custom authentication pages</li>
</ul>
<p>All data is stored locally in your WordPress database and is completely removed upon plugin uninstallation.</p>
<h3>Support & Contributing</h3>
<p><strong>Documentation:</strong> <a href="https://attributeswp.com/docs" rel="nofollow ugc">https://attributeswp.com/docs</a><br />
<strong>Support Forum:</strong> <a href="https://wordpress.org/support/plugin/attributes-user-access" rel="ugc">https://wordpress.org/support/plugin/attributes-user-access</a><br />
<strong>GitHub Repository:</strong> <a href="https://github.com/attributeswp/attributes-user-access" rel="nofollow ugc">https://github.com/attributeswp/attributes-user-access</a><br />
<strong>Report Issues:</strong> <a href="https://github.com/attributeswp/attributes-user-access/issues" rel="nofollow ugc">https://github.com/attributeswp/attributes-user-access/issues</a></p>
<p>Contributions are welcome! Please feel free to submit pull requests or open issues on GitHub.</p>


Attributes User Access

Lightweight WordPress authentication with custom login pages, role-based redirections, and secure user access control.

Mohamed Shili

<p>🔐 Block or allow visitors by country. Track access attempts. View analytics. Stay in control — effortlessly.</p>
<h3>🧠 Description</h3>
<p><strong>Geo Blocker</strong> gives you full control over who can access your WordPress site — based on visitor country and IP. Whether you’re protecting content, reducing attack surface, or managing regional access, this plugin does it with precision and clarity.</p>
<p>🎯 Designed for performance, security, and ease of use.<br />
📊 Built-in analytics and access logs.<br />
🧭 Never get locked out — admin-safe bypass included.</p>
<h3>🚀 Features</h3>
<h3>✅ Access Control That Makes Sense</h3>
<ul>
<li><strong>Block Selected Countries</strong> – deny access to specific regions  </li>
<li><strong>Allow Selected Countries</strong> – restrict site only to approved countries  </li>
</ul>
<h3>🧩 Smart Blocking Actions</h3>
<ul>
<li>📜 Show custom message  </li>
<li>🔁 Redirect to a URL  </li>
<li>🚫 Send HTTP 403 Forbidden response  </li>
</ul>
<h3>🌐 Visual Country Selector</h3>
<ul>
<li>Flag icons & search bar for quick targeting  </li>
<li>Filter by continent (Africa, Asia, Europe, etc.)  </li>
<li>One-click select/deselect all  </li>
</ul>
<h3>📈 Analytics Dashboard</h3>
<ul>
<li>Summary cards: total visits, blocks, IPs  </li>
<li>Hourly charts for real-time insights  </li>
<li>Filter by date range & data type (accesses, unique IPs, etc.)  </li>
</ul>
<h3>📋 Detailed Logs</h3>
<ul>
<li>See IP, country, URL, status, user agent  </li>
<li>Filters out common junk (favicon, robots.txt)  </li>
<li>Admin visits are auto-ignored to reduce noise  </li>
</ul>
<h3>🛠️ Admin-Proof Bypass URL</h3>
<ul>
<li>Special URL with bypass parameter to access login anytime  </li>
<li>Prevents accidental lockouts  </li>
</ul>
<h3>🔄 Data Export & Log Management</h3>
<ul>
<li>Export logs in CSV or JSON  </li>
<li>Clear logs with a single click  </li>
<li>Sort & search logs in the UI</li>
</ul>
<h3>🌐 External Services</h3>
<p>This plugin uses a third-party API to determine the visitor’s country based on their IP address.</p>
<ul>
<li><strong>Service used:</strong> <a href="https://ipwho.is" rel="nofollow ugc">IPWho.is</a>  </li>
<li><strong>Purpose:</strong> To perform IP geolocation and detect the country of each visitor, allowing the plugin to block or allow access accordingly.  </li>
<li><strong>Data sent:</strong> The visitor’s IP address is sent to the IPWho.is API on page load when geo-blocking is active.  </li>
<li><strong>Terms of Service:</strong> <a href="https://ipwhois.io/terms" rel="nofollow ugc">https://ipwhois.io/terms</a>  </li>
<li><strong>Privacy Policy:</strong> <a href="https://ipwhois.io/privacy" rel="nofollow ugc">https://ipwhois.io/privacy</a></li>
</ul>
<h3>🖥️ Screenshots</h3>
<ol>
<li><strong>📊 Dashboard Overview</strong> – See country blocks, allowed hits & total attempts   </li>
<li><strong>🔧 Blocking Rules</strong> – Choose block mode, action type, and targets. Enable or disable countries visually</li>
<li><strong>📉 Analytics Graphs</strong> – View access by time, state, and IP 5. <strong>📑 Logs Table</strong> – Deep insights with full logs of visitor attempts. Export CSV/JSON logs with one click</li>
</ol>
<h3>📦 Installation</h3>
<ol>
<li>Upload the plugin folder to <code>/wp-content/plugins/geo-blocker</code>  </li>
<li>Activate via <strong>Plugins <span aria-hidden="true" class="wp-exclude-emoji">→</span> Installed Plugins</strong>  </li>
<li>Go to <strong>Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Geo Blocker</strong>  </li>
<li>Enable Geo Blocking using the toggle  </li>
<li>Choose between <strong>block</strong> or <strong>allow</strong> mode  </li>
<li>Select countries using the visual interface  </li>
<li>Pick your blocking action (message, redirect, or 403)  </li>
<li>Save settings — done!</li>
</ol>
<h3>❓ Frequently Asked Questions</h3>
<h3>How does Geo Blocker detect country?</h3>
<p>It uses the reliable <strong>IpWhoIs API</strong> to fetch country data based on the visitor’s IP.</p>
<h3>Will it slow down my site?</h3>
<p>Nope. It’s optimized with <strong>transient caching</strong> and smart triggers — no unnecessary lookups.</p>
<h3>Can I lock myself out?</h3>
<p>No. There’s a <strong>login bypass URL</strong> generated for administrators — shown right on the dashboard.</p>
<h3>Can I block specific pages?</h3>
<p>Not yet — current version works site-wide. Per-page rules may come in a future update.</p>
<h3>Can I export visitor logs?</h3>
<p>Yes. Logs can be exported in <strong>CSV or JSON</strong> format directly from the Logs tab.</p>
<h3>Does it work with caching plugins?</h3>
<p>Yes, but you may need to <strong>exclude the plugin’s logic</strong> from caching. Dynamic geo checks should not be cached.</p>
<h3>🗂️ Changelog</h3>
<h4>1.0.0</h4>
<ul>
<li>🎉 Initial release with all core features</li>
</ul>
<h3>🛡️ Additional Notes</h3>
<h3>Emergency Bypass</h3>
<p>Every admin gets a custom bypass link to avoid accidental lockouts. It’s always visible in the dashboard.</p>
<h3>Blocking Actions</h3>
<p>Choose the experience blocked users receive:<br />
– Custom message<br />
– Redirect to another URL<br />
– Send 403 Forbidden header</p>
<h3>Logs & Privacy</h3>
<p>Logs are stored locally in your WordPress database. The plugin sends only the visitor’s IP to IPWho.is — no personally identifiable information is shared or stored externally.</p>
<h3>💡 Enjoying Geo Blocker? Try Our Other Free Plugins</h3>
<p>Looking for even more control and peace of mind? Check out our other tools:</p>
<p>🔕 <strong><a href="https://wordpress.org/plugins/notification-blocker/" rel="ugc">Notification Blocker</a></strong> – Hide annoying plugin notices from your dashboard without hacking core files.</p>
<p>🛡️ <strong><a href="https://wordpress.org/plugins/fortress-login-pro/" rel="ugc">Fortress Login Pro</a></strong> – Obscure your login page, add brute-force protection, and block unauthorized access attempts with ease.</p>
<p>If you like Geo Blocker, you’ll probably find these just as helpful. Try them out!</p>


Geo Blocker – Control Site Access by Region and IP

🔐 Block or allow visitors by country. Track access attempts. View analytics. Stay in control — effortlessly.

Attributes User Access vs Geo Blocker – Control Site Access by Region and IP