webaware

Jason Cosper

<p>Biscotti is a plugin that modifies the expiration of the logged in user cookie in WordPress. Choose from the default WordPress expiration (14 days), three months (90 days), six months (180 days), or one year (365 days). Because some people hate to have to keep entering their passwords.</p>
<h4>Features</h4>
<ul>
<li>Per-user cookie expiration settings</li>
<li>Four expiration options: default, 3 months, 6 months, 1 year</li>
<li>WP-CLI support for managing settings programmatically</li>
<li>Fully translatable with i18n support</li>
<li>Secure implementation with CSRF protection</li>
<li>Clean uninstall that removes all plugin data</li>
</ul>
<h4>Security</h4>
<p>Version 3.0.0 includes critical security improvements:<br />
* CSRF protection with nonce verification<br />
* Input validation with whitelist checking<br />
* Strict type comparisons throughout<br />
* Modern PHP 8.0+ type hints</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.0 or higher</li>
<li>PHP 8.0 or higher</li>
</ul>
<h3>WP-CLI Commands</h3>
<p>As of version 2.1.0, Biscotti includes WP-CLI commands for managing a user’s logged in session cookie expiration.</p>
<h4>Get a user’s cookie expiration</h4>
<pre><code>wp biscotti get <user_id>
</code></pre>
<p>Retrieves the current cookie expiration setting for a user.</p>
<p>Example:<br />
    wp biscotti get 123</p>
<h4>Set a user’s cookie expiration</h4>
<pre><code>wp biscotti set <user_id> <expiration>
</code></pre>
<p>Sets the logged in session cookie expiration for a user.</p>
<p>Parameters:<br />
* <code><user_id></code> — The ID of the user<br />
* <code><expiration></code> — One of: <code>default</code>, <code>3 months</code>, <code>6 months</code>, <code>1 year</code></p>
<p>Examples:<br />
* Set to 1 year: <code>wp biscotti set 123 '1 year'</code><br />
* Reset to default: <code>wp biscotti set 123 default</code></p>


Biscotti

Biscotti makes your user's login cookie a little bit longer.

Ga Satrya

<p>Remove dashboard access to non-admin users and easily control who can access your WordPress dashboard with simple configuration. By default, only administrators are allowed, but you can now whitelist specific trusted users by username—perfect for developers, VAs, or contractors.</p>
<p><strong>Features include</strong>:</p>
<ul>
<li>Whitelist specific users by username</li>
<li>Session expiration controls (1-24 hours)</li>
<li>Option to apply session timeout to administrators</li>
<li>Custom redirect URL for blocked users</li>
<li>Secure, validated, and sanitized settings</li>
<li>Hide admin toolbar for non-authorized users</li>
<li>Developer-friendly filters for advanced customization</li>
</ul>
<p><strong>Why Choose UserFlow?</strong></p>
<ul>
<li><strong>Maximum Protection</strong>: Instantly block unauthorized users from accessing sensitive dashboard areas.</li>
<li><strong>Effortless Whitelisting</strong>: Grant dashboard access to trusted users (developers, VAs, contractors) without changing their roles. Just add their usernames!</li>
<li><strong>Session Security</strong>: Automatically log out users after a set period for bulletproof session management. Choose from multiple timeout intervals and apply to all users or just non-admins.</li>
<li><strong>Custom Redirects</strong>: Guide blocked users to a branded page or helpful resource instead of the generic homepage.</li>
<li><strong>Zero Configuration Needed</strong>: Works out of the box—only administrators can access the dashboard until you customize settings.</li>
</ul>
<p><strong>Perfect For:</strong></p>
<ul>
<li>Website owners who want peace of mind</li>
<li>Agencies and developers managing multiple sites</li>
<li>Teams needing granular dashboard access</li>
<li>Anyone serious about WordPress security</li>
</ul>
<p>Protect your site, empower your workflow, and deliver a professional experience—all with one lightweight plugin.</p>
<p><a href="https://www.ctaflow.com/plugins/admin-only-dashboard/" rel="nofollow ugc">Read more detail</a></p>


UserFlow – Disable Dashboard Access for Non Admin

UserFlow: Only admins can access the dashboard by default. Whitelist trusted users easily, quick setup, and secure.

Biscotti vs UserFlow – Disable Dashboard Access for Non Admin