Brendigo

<p>BrenWP Client Safe Mode helps you troubleshoot safely and reduce risk when handing a WordPress site to clients or non-technical users.</p>
<p>Safe Mode is <em>per-user</em>: it applies only to the currently logged-in user who enabled it. Visitors and other users are not affected.</p>
<h4>Safe Mode (per-user) can optionally</h4>
<ul>
<li>Block access to risky wp-admin screens (plugin/theme management, core updates, Site Health, and update actions)</li>
<li>Disable file modifications (plugin/theme installs, updates, editors)</li>
<li>Optionally block update/install capabilities (prevents running updates/installs even via alternative flows)</li>
<li>Optionally block destructive capabilities (prevents deleting plugins/themes while Safe Mode is enabled)</li>
<li>Optionally disable the built-in plugin/theme editors (capability-based) while Safe Mode is enabled</li>
<li>Hide update notices</li>
<li>Trim selected admin bar nodes (Updates / Comments / New Content)</li>
<li>Auto-disable after a configurable number of minutes (optional)</li>
</ul>
<h4>Client restrictions (role-based + optional user targeting) can</h4>
<ul>
<li>Optionally target a specific user account (in addition to roles)</li>
<li>Hide risky menus</li>
<li>Block direct access to sensitive wp-admin screens</li>
<li>Disable file modifications</li>
<li>Hide update notices</li>
<li>Optionally limit the Media Library to a user’s own uploads (privacy on multi-author sites)</li>
<li>Optionally hide common Dashboard widgets for restricted roles (UI cleanup)</li>
<li>Optionally hide the Screen Options dropdown (independent toggle)</li>
<li>Optionally hide the Admin Bar on the front end for restricted roles</li>
<li>Optionally block Customizer access (customize.php)</li>
<li>Optionally block Users screens (Users list/Add/Edit) even if the broader screen blocklist is disabled</li>
<li>Optionally block Tools screens (Tools/Import/Export) even if the broader screen blocklist is disabled</li>
<li>Optionally lock profile email/password changes for restricted roles (prevents self-service account takeover)</li>
<li>Optionally show a dismissible 2FA security reminder notice (notice only)</li>
<li>Optionally hide the Admin Bar on the front end for restricted roles</li>
</ul>
<h4>General hardening (site-wide, optional)</h4>
<ul>
<li>Disable XML-RPC</li>
<li>Disable the built-in plugin/theme editors for all users (capability-based)</li>
<li>Optional settings export download (admin-only) via a nonce-protected endpoint (default OFF)</li>
</ul>
<p>Administrators are never restricted by client restrictions. On multisite, super-admins are also excluded.</p>
<h4>Privacy</h4>
<p>This plugin does not send data to external services. It performs <strong>no tracking, telemetry, analytics, or “phone-home” requests</strong>.</p>
<h4>Data stored on your site</h4>
<p>The plugin stores the minimum required data to provide Safe Mode and optional auditing:</p>
<ul>
<li><strong>Options (Settings)</strong>: stored in the <code>brenwp_csm_options</code> option (site option). This contains your configured settings.</li>
<li><strong>Activity log (optional)</strong>: stored in the <code>brenwp_csm_activity_log</code> option <strong>only if Activity logging is enabled</strong>. This log is bounded by <strong>Max entries</strong> and can optionally be pruned by age (Retention days).</li>
<li><strong>Operational options</strong>: internal housekeeping options such as <code>brenwp_csm_last_settings_change</code> and a short-lived lock key used to avoid concurrent log writes.</li>
<li><strong>User meta (Safe Mode)</strong>:
<ul>
<li><code>brenwp_csm_safe_mode</code> (on/off flag for a user)</li>
<li><code>brenwp_csm_safe_mode_until</code> (optional expiry timestamp if auto-off is enabled)</li>
</ul>
</li>
</ul>
<h4>Data minimization and retention</h4>
<ul>
<li>Activity logging is <strong>disabled by default</strong>.</li>
<li>The activity log does <strong>not</strong> store IP addresses and attempts to redact likely secrets from context values.</li>
<li>Retention controls:
<ul>
<li><strong>Max entries</strong> caps log size.</li>
<li><strong>Retention days</strong> can automatically prune older entries (0 = disabled).</li>
<li>The <strong>Clear log</strong> action removes all log entries immediately (admin-only, nonce protected).</li>
</ul>
</li>
</ul>
<h4>Privacy tools</h4>
<p>The plugin:<br />
* Adds suggested text to the Privacy Policy Guide (Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Privacy)<br />
* Registers a personal data exporter and eraser for the Safe Mode user meta</p>
<h4>Data deletion</h4>
<p>On uninstall (delete), the plugin removes its options, optional log option, Safe Mode user meta, and (best-effort) the optional <code>bren_client</code> role if it was created by the plugin.</p>
<h3>Security</h3>
<p>This plugin follows WordPress hardening best practices:</p>
<ul>
<li><strong>CSRF protection</strong>: all state-changing actions use <strong>POST</strong> and require a <strong>WordPress nonce</strong>.</li>
<li><strong>Authorization</strong>: privileged admin actions are gated by <strong>capability checks</strong> (<code>manage_options</code> by default, filterable).</li>
<li><strong>XSS defense</strong>: user-controlled data is sanitized on input and escaped on output.</li>
<li><strong>No remote requests</strong>: the plugin does not make outbound HTTP requests.</li>
<li><strong>Data minimization</strong>: the activity log is bounded, does not store IP addresses, and redacts likely secrets in log context values.</li>
</ul>
<p>Assumptions and scope:</p>
<ul>
<li>The plugin enforces policies inside WordPress; it does not replace server/WAF hardening.</li>
<li>Safe Mode is <strong>per-user</strong> and does not modify the site’s active plugins/themes list.</li>
</ul>
<h3>Troubleshooting</h3>
<h4>I don’t see the Safe Mode toggle in the admin bar</h4>
<ul>
<li>Confirm the WordPress admin bar is enabled for your account.</li>
<li>Confirm <strong>Enforcement</strong> is enabled in the plugin settings.</li>
<li>Confirm your role is included in <strong>Who can toggle Safe Mode</strong> (or you are an administrator / multisite super-admin).</li>
</ul>
<h4>My profile email/password cannot be changed</h4>
<p>If <strong>Restrictions <span aria-hidden="true" class="wp-exclude-emoji">→</span> Lock profile email/password</strong> is enabled and your account is restricted, you will not be able to change your own email or password. Contact an administrator.</p>
<h4>XML-RPC stopped working</h4>
<p>If you rely on legacy services that require XML-RPC (some old mobile apps / integrations), disable <strong>General <span aria-hidden="true" class="wp-exclude-emoji">→</span> Disable XML-RPC</strong>.</p>
<h4>I get redirected with an “Access blocked” notice</h4>
<p>A configured policy blocked a sensitive admin screen. Review:<br />
* <strong>Restrictions <span aria-hidden="true" class="wp-exclude-emoji">→</span> Block direct screen access</strong> (for restricted roles)<br />
* <strong>Safe Mode <span aria-hidden="true" class="wp-exclude-emoji">→</span> Block risky admin screens</strong> (for your account if Safe Mode is enabled)</p>
<h4>Safe Mode is enabled but I want to turn it off</h4>
<ul>
<li>Use the <strong>Safe Mode</strong> tab to toggle it off.</li>
<li>If auto-off is enabled, it will disable automatically after the configured time window.</li>
<li>If Enforcement is OFF, the UI provides a <strong>Clear stored Safe Mode</strong> button to remove the stored flag.</li>
</ul>
<h3>Developer Hooks</h3>
<p>Filters:<br />
* <code>brenwp_csm_required_cap</code> — change the capability required to manage this plugin (default: <code>manage_options</code>).<br />
* <code>brenwp_csm_presets</code> — customize Dashboard presets (label/description/patch arrays).<br />
* <code>brenwp_csm_create_client_role</code> — return <code>false</code> to prevent creating the <code>bren_client</code> role on activation.<br />
* <code>brenwp_csm_client_role_caps</code> — customize capabilities assigned to the <code>bren_client</code> role on activation.<br />
* <code>brenwp_csm_remove_client_role_on_uninstall</code> — return <code>false</code> to keep the <code>bren_client</code> role during uninstall cleanup.</p>


BrenWP Client Safe Mode

Per-user Safe Mode plus role-based client restrictions for safer troubleshooting and cleaner client handoff.

theme funda

<p>Restrict Payment Methods For WooCommerce lets you dynamically control which payment gateways appear at checkout.</p>
<p>Create smart conditional rules and show or hide payment methods based on cart contents, customer details, shipping options, date conditions, and more.</p>
<p>Perfect for improving checkout experience, preventing invalid orders, and applying business-specific payment logic.</p>
<p>🔗 <a href="https://www.codesmade.com/restrict-payment-methods-for-woocommerce-documentation/" rel="nofollow ugc">Documentation</a> | <a href="https://www.codesmade.com/store/restrict-payment-methods-for-woocommerce/" rel="nofollow ugc">Upgrade to Pro</a> | <a href="https://www.codesmade.com/contact-us/" rel="nofollow ugc">Support</a></p>
<p>⭐ FREE FEATURES</p>
<ul>
<li>Easy installation and setup</li>
<li>Create multiple restriction rules</li>
<li>Enable or disable specific payment gateways</li>
<li>Advanced matching logic (AND/OR conditions)</li>
<li>User-friendly grouped condition builder</li>
</ul>
<h3>Available Conditions (Free Version)</h3>
<p>✔ Cart subtotal<br />
✔ Cart quantity<br />
✔ Specific products<br />
✔ User login status (logged in / guest)<br />
✔ User roles<br />
✔ Specific users<br />
✔ Shipping method<br />
✔ Billing country, state, city<br />
✔ Shipping country, state, city<br />
✔ Day of week<br />
✔ Date range</p>
<p>🚀 PRO FEATURES</p>
<p>Upgrade to the <a href="https://www.codesmade.com/store/restrict-payment-methods-for-woocommerce/" rel="nofollow ugc">Pro version</a> to unlock advanced payment restriction controls.</p>
<h3>Additional Conditions Available in Pro</h3>
<p>✔ Shipping class (shipping_class)<br />
✔ Product type (product_type)<br />
✔ Product stock status (stock_status)<br />
✔ Billing email (billing_email)<br />
✔ Shipping email (shipping_email)<br />
✔ Product categories (product_cat)<br />
✔ Product tags (product_tag)<br />
✔ Product brands (product_brand)</p>
<h3>Why Upgrade?</h3>
<ul>
<li>More granular checkout control  </li>
<li>Advanced B2B/B2C payment logic  </li>
<li>Improved fraud prevention  </li>
<li>Powerful category & brand-based restrictions  </li>
<li>Email-based gateway control  </li>
</ul>
<p>👉 <a href="https://www.codesmade.com/store/restrict-payment-methods-for-woocommerce/" rel="nofollow ugc">Get Pro Now</a></p>
<p>💡 Example Use Cases</p>
<ul>
<li>Show PayPal only if subtotal ≥ $50  </li>
<li>Hide Cash on Delivery if cart quantity exceeds 10  </li>
<li>Allow Bank Transfer only for logged-in users  </li>
<li>Show Stripe only on Mondays  </li>
<li>Restrict PayPal for specific billing countries  </li>
<li>Hide gateways during specific date ranges  </li>
<li>Apply multiple combined conditions in a single rule  </li>
</ul>
<p>⚙ How It Works</p>
<ol>
<li>Install and activate the plugin.</li>
<li>Go to WooCommerce <span aria-hidden="true" class="wp-exclude-emoji">→</span> Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Payments Restrictions.</li>
<li>Create a rule.</li>
<li>Select payment gateway(s).</li>
<li>Add your conditions.</li>
<li>Save and test checkout.</li>
</ol>
<p>That’s it! Need help? Check out the <a href="https://www.codesmade.com/restrict-payment-methods-for-woocommerce-documentation/" rel="nofollow ugc">full documentation</a>.</p>
<p>📚 Documentation & Support</p>
<ul>
<li>📖 <a href="https://www.codesmade.com/restrict-payment-methods-for-woocommerce-documentation/" rel="nofollow ugc">Plugin Documentation</a></li>
<li>🛒 <a href="https://www.codesmade.com/store/restrict-payment-methods-for-woocommerce/" rel="nofollow ugc">Upgrade to Pro</a></li>
<li>🛠 <a href="https://www.codesmade.com/contact-us/" rel="nofollow ugc">Contact Support</a></li>
</ul>
<p>Compatibility</p>
<ul>
<li>Compatible with latest WooCommerce versions</li>
<li>Works with most WooCommerce-compatible payment gateways</li>
<li>Supports custom gateways following WooCommerce payment API</li>
</ul>


Restrict Payment Methods For WooCommerce

Restrict WooCommerce payment gateways based on flexible conditions like totals, products, user roles, shipping methods, and more.

BrenWP Client Safe Mode vs Restrict Payment Methods For WooCommerce