Code For Broke

<p>Must Login is a lightweight, user-friendly plugin that allows you to require login for your entire site with just one click. Perfect for membership sites, private blogs, intranets, or any site that needs to restrict access to registered users only.</p>
<h4>Features</h4>
<ul>
<li><strong>One-Click Toggle</strong> – Enable or disable login requirement instantly from the admin bar</li>
<li><strong>REST API Protection</strong> – Configurable authentication requirement for REST API endpoints</li>
<li><strong>Automatic Cache Clearing</strong> – Automatically clears popular caching plugins when toggling protection</li>
<li><strong>Admin Bar Status Indicator</strong> – Always see at a glance whether login is required</li>
<li><strong>Simple Settings Page</strong> – Easy-to-use settings interface</li>
<li><strong>Admin Override</strong> – Administrators always have access, even when login is required</li>
<li><strong>Smart Redirects</strong> – Users are redirected to login and then back to their intended page</li>
<li><strong>Selective Endpoint Access</strong> – Allow specific REST API endpoints for forms and authentication</li>
<li><strong>Cache Compatibility</strong> – Works with WP Super Cache, W3 Total Cache, WP Rocket, and more</li>
<li><strong>No Configuration Needed</strong> – Works perfectly out of the box</li>
<li><strong>Lightweight</strong> – Minimal impact on site performance</li>
<li><strong>Translation Ready</strong> – Fully internationalized and ready for translation</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Install and activate the plugin</li>
<li>Click the lock icon in the admin bar to toggle login requirement</li>
<li>That’s it! Your site is now protected</li>
</ol>
<p>When enabled, all visitors must log in to view any page on your site. Administrators can quickly toggle this on or off from anywhere on the site using the admin bar.</p>
<h3>Developer Documentation</h3>
<h4>Filters</h4>
<p><strong>cfb_must_login_redirect_url</strong> – Customize the login redirect URL</p>
<pre><code>add_filter('cfb_must_login_redirect_url', function($redirect_url, $redirect_to) {
    return 'https://example.com/custom-login';
}, 10, 2);
</code></pre>
<p><strong>cfb_must_login_allowed_rest_routes</strong> – Allow additional REST API endpoints</p>
<pre><code>add_filter('cfb_must_login_allowed_rest_routes', function($routes) {
    $routes[] = '/my-plugin/v1/public';
    return $routes;
});
</code></pre>
<h4>Actions</h4>
<p><strong>cfb_must_login_clear_cache</strong> – Triggered when cache is cleared</p>
<pre><code>add_action('cfb_must_login_clear_cache', function() {
    // Custom cache clearing logic
});
</code></pre>
<h4>Capabilities</h4>
<p>The plugin uses the <code>cfb_must_login_manage</code> capability, which is mapped to <code>manage_options</code> by default. You can customize this using the <code>map_meta_cap</code> filter.</p>


CFB Must Login

Require users to log in before viewing your site with easy admin toggle controls. Includes REST API protection and automatic cache clearing.

<p>Buddypress pages are public by default. This plugin allows you to restrict not logged-in users from accessing these pages.</p>
<p>If an anonymous user tries to access these pages, they will be redirected either to the login page, or to the homepage, or even to a custom page.</p>
<p>The plugin also allows to display on these pages a template with a message to log in instead of directly redirecting them elsewhere.</p>
<h3>Features</h3>
<ul>
<li>Very easy to use, you only have to choose which pages want to retrict to anonymous users (not logged-in users).</li>
<li>Small and lightweight plugin (around 10-15kb).</li>
<li>No CSS, no scripts. No requests to static files.</li>
<li>Fully translated into Spanish.</li>
</ul>
<h3>Support</h3>
<p>Need help? Any bugs to report? Any suggestions? Please contact me.</p>
<p>You can help me too either by rating this plugin or by making a donation.</p>


Buddyfence

This plugin allows you to restrict not logged-in users from accessing BuddyPress pages

CFB Must Login vs Buddyfence