wp-comblock

The Comblock Login plugin implements a complete and secure authentication system on the frontend for WordPress. Through dedicated shortcodes, you can easily insert login and logout forms, user information displays, and the option to log out of all active sessions on your site’s content. The login process is strictly managed: user-entered data is sanitized, security is ensured through nonce verification to prevent CSRF attacks, and authentication is performed using native WordPress functions, with support for secure session storage and cookie management.
Logout not only allows you to securely end the current session, but also offers the advanced global logout feature, which ends all active user sessions on all devices, increasing security in case of compromise or accidental sharing of credentials. Custom dashboards, based on dedicated post types, are protected by access controls that limit visibility to authorized users only, redirecting other users to configured login pages, with failed attempts logged to improve security monitoring.
<h3>Features</h3>
<ol>
<li>Registration of the shortcode for the login form, logout button, logout button for all devices, and display of logged-in users.</li>
<li>Secure login management with nonce verification and input sanitization.</li>
<li>Custom redirects to the dashboard after login and to the login page after logout.</li>
<li>Creation of multiple dashboards by configuring which user roles can access them.</li>
<li>Logout functionality from all devices simultaneously.</li>
<li>Logging of errors related to access and permissions.</li>
</ol>
<h3>Usage</h3>
<ul>
<li>
Use the shortcode <code>[comblock_login]</code> to display the login form. You can insert this shortcode into any page or post. 
Simple example (only required attribute): 
<code>[comblock_login dashboard-post-id="8"]</code> 
Complete example (with all optional attributes): 
<code>[comblock_login id="subscriber-login" class="subscriber-form-login" dashboard-post-id="8" privacy-page-id="2"]</code> 
Where:
<ul>
<li><code>dashboard-post-id</code> is mandatory and represents the ID of a Dashboard post type created in the back office. </li>
<li><code>id</code>, <code>class</code>, and <code>privacy-page-id</code> are optional, where <code>privacy-page-id</code> refers to the privacy policy page ID.</li>
</ul>
</li>
<li>
Use the shortcode <code>[comblock_logout]</code> only within the <code>dashboard</code> post type to display the logout link. 
Simple example (without optional attributes): 
<code>[comblock_logout]</code> 
Complete example (with optional attributes): 
<code>[comblock_logout id="logout-link" class="btn-logout"]</code>
</li>
<li>
Use the shortcode <code>[comblock_disconnection]</code> within the <code>dashboard</code> post type to display the disconnection link. 
Simple example: 
<code>[comblock_disconnection]</code> 
Complete example: 
<code>[comblock_disconnection id="disconn-link" class="btn-disconnect"]</code>
</li>
<li>
Use the shortcode <code>[comblock_user_info]</code> within the <code>dashboard</code> post type to display user information. 
Simple example (only required attribute): 
<code>[comblock_user_info fields="display_name,user_email"]</code> 
Complete example (with title and all attributes): 
<code>[comblock_user_info title="my-section-title" fields="display_name,user_email"]</code> 
The <code>fields</code> attribute contains user meta fields separated by commas. Note that some meta fields cannot be used for security or privacy reasons.
To address this, the plugin provides two filters hooks:
<ul>
<li><code>comblock_login_user_ban_fields</code> allows you to add meta fields that you shouldn’t use. </li>
<li><code>comblock_login_user_info_allowed_fields</code> permits extending the list of meta fields that are allowed for searching and displaying user metadata.</li>
</ul>
These hooks enable developers to customize which user data can be displayed via the shortcode while maintaining control over security and privacy.
</li>
</ul>
<h3>Security</h3>
The plugin implements the following security mechanisms:
<ul>
<li>Nonce verification for all critical login and logout actions to protect against CSRF.</li>
<li>Sanitization of input from login forms to prevent injection.</li>
<li>Authentication via WordPress’ secure <code>wp_signon()</code> function.</li>
<li>Strict session cookie management with SSL support.</li>
<li>Granular control of access permissions based on user roles defined for each dashboard.</li>
<li>Complete destruction of user sessions upon logout from all devices.</li>
</ul>

Comblock Login

Secure frontend login/logout with user dashboards, session management, and role-based access control for WordPress sites.

miniorange

The <a href="https://plugins.miniorange.com/wordpress-login-and-user-management-plugin" rel="nofollow ugc">User and Login Management plugin</a> allows you to effortlessly handle bulk user import/export, efficiently manage user roles, redirect users based on their WordPress roles, track and manage user activity and sessions, enable time-driven users auto-logout, and control the privacy of pages or posts. Simplify your user management process and enhance the security and customization of your WordPress website with our powerful User and Login Management plugin.
<h4>Free Version Features</h4>
<ul>
<li>
Bulk User Creation: You can create multiple user accounts at once for users not registered in WordPress simply by importing them through a CSV file.
</li>
<li>
Bulk User Modification: Existing WordPress users’ information, such as their name, email, role, etc., can be modified/updated for multiple users simultaneously. Using our interactive plugin interface, you can import and manage various attributes of WordPress users in just a single step.
</li>
<li>
Bulk Users Role Management: You can assign roles to new WordPress users or modify/overwrite the existing users’ roles by importing them through a single file.
</li>
<li>
Export WordPress Users: You can export profile information of your WordPress, such as name, email, role, etc., to a CSV file.
</li>
<li>
User Activity & Session Tracking: Activity information about your WordPress users, such as session time and active/inactive status, can be easily viewed from the WordPress admin dashboard using our plugin.
</li>
<li>
Default Redirection on Login and Logout: A default redirection URL can be set for all WordPress users on login and logout.
</li>
<li>
Manage access to the website: Make your website publicly or privately accessible as per your requirements.
</li>
<li>
User profile picture management: Manage WordPress user profile pictures from the plugin and the WordPress edit profile section. These user profile pictures can be easily uploaded and deleted from the plugin interface in just one click.
</li>
</ul>
<h4>Premium Version Features (Check out the Licensing tab to know more):-</h4>
<ul>
<li>
Role-Based Redirection on Login: The admin can decide the page to which particular users will be redirected based on their role after login. The information about the URL for the page to be redirected needs to be provided. However, this is an optional feature, and the users will be redirected to the default URL if no role-based redirection is provided
</li>
<li>
 Create Custom WordPress Role : You can create and assign a custom WordPress role to all users imported through a CSV file with no preassigned roles.
</li>
<li>
 Manage all WordPress role capabilities : Manage capabilities of default as well custom WordPress roles as required apart from the administrator.
</li>
<li>
 Delete WordPress Users on Import : Delete users if not present in CSV or other file formats of your choice.
</li>
<li>
 Role-Based Restriction : Restrict users’ access to a page based on their role.
</li>
<li>
Auto Logout users: Manage the session of your WordPress users by providing the auto-logout time, after which the user session will be terminated.
</li>
<li>
Make a Page/Post Private using custom attributes: Make a particular page, post, image, etc., on a private site publicly accessible by providing a URL, Page/Post ID, Page Name, or other custom attributes.
</li>
<li>
Admin email notification: Notify the site admin on every failed login attempt through an email.
</li>
<li>
User Registration Manager: Admin can easily approve/deny user accounts from the plugin interface.
</li>
<li>
Advanced User Activity Tracking: On the WordPress website track wide range of user activities such as successful logins, unsuccessful login attempts, logouts, display user’s access status and many more.
</li>
</ul>
<h4>Use Cases Supported By Our Plugin</h4>
<ul>
<li>Manage multiple users simultaneously by importing and creating WordPress users from CSV. A new user account will be created for users not already registered in WordPress, and the existing users’ information can also be modified.</li>
<li>Bulk user roles can be managed by setting default roles that need to be assigned to all the newly created users or the existing users for which the role is not specified. The roles for existing users can also be overwritten.</li>
<li>If an admin wants to redirect the users with a specific role to a particular page, this can be done simply by providing the URL to which the user with that role needs to be redirected.</li>
<li>Information regarding the session activity, such as active and inactive WordPress users, can be viewed. The admin can use this information to delete or remove inactive users.</li>
<li>Restrict access to publicly accessible websites by making them private. This website will be accessible only to logged-in users. 
For a private website, if there is a need to make a specific page/post publicly accessible, this can be achieved by providing the URL that needs to be made public.</li>
</ul>
<h4>Other Use-Cases we support:-</h4>
<ul>
<li><a href="https://plugins.miniorange.com/wordpress-ldap-login-intranet-sites" rel="nofollow ugc">miniOrange WP LDAP/AD Login for Intranet sites plugin</a> supports LDAP login to WordPress sites using credentials stored in active directory and LDAP Directory systems. Only if you have access to <a href="https://faq.miniorange.com/knowledgebase/how-to-enable-php-ldap-extension/" rel="nofollow ugc">LDAP Extension</a> on your site.</li>
<li><a href="https://plugins.miniorange.com/wordpress-ldap-login-cloud" rel="nofollow ugc">miniOrange Active Directory/LDAP Integration for Cloud & Shared Hosting Platforms Plugin</a> supports login to WordPress sites hosted on a shared hosting platform using credentials stored in active directory and LDAP Directory systems in case you are not able to enable <a href="https://faq.miniorange.com/knowledgebase/how-to-enable-php-ldap-extension/" rel="nofollow ugc">LDAP Extension</a> on your site.</li>
<li> <a href="https://plugins.miniorange.com/wordpress-ldap-directory-search" rel="nofollow ugc">Search Staff/Employee present in your Active Directory</a>: allows you to search and display the users present in your Active Directory / LDAP Server on a WordPress page using a shortcode.</li>
<li>miniOrange supports <a href="https://apisecurity.miniorange.com" rel="nofollow ugc">API Security use cases</a> to protect and secure your APIs using our product <a href="https://apiconsole.miniorange.com" rel="nofollow ugc">XecureAPI</a> which helps you to enable Authentication methods ( like OAuth, SAML, LDAP, API Key Authentication, JWT Authentication etc ), Rate Limiting, IP restriction and much more on your APIs for complete protection.</li>
<li>miniOrange also supports <a href="https://www.miniorange.com/solutions/vpn-mfa-multi-factor-authentication" rel="nofollow ugc">VPN use cases</a> Log in to your VPN client using Active Directory /other LDAP Directory credentials and <a href="https://www.miniorange.com/products/multi-factor-authentication-mfa" rel="nofollow ugc">Multi-Factor Authentication</a>.</li>
<li>miniOrange supports <a href="https://www.miniorange.com/products/single-sign-on-sso" rel="nofollow ugc">Single-Sign-On (SSO)</a> into a plethora of applications and supports various protocols like(<a href="https://blog.miniorange.com/radius-server-authentication/" rel="nofollow ugc">RADIUS</a>, <a href="https://plugins.miniorange.com/wordpress-single-sign-on-sso" rel="nofollow ugc">SAML</a>, <a href="https://plugins.miniorange.com/wordpress-sso" rel="nofollow ugc">OAuth</a>, <a href="https://plugins.miniorange.com/wordpress-ldap-login-intranet-sites" rel="nofollow ugc">LDAP/LDAPS</a>, using various IDPs like Azure Active Directory, Microsoft On-Premise Active Directory, Octa, ADFS, etc.</li>
<li>Contact us at info@xecurify.com to know more.</li>
</ul>
<h4>Why you should go with our solution</h4>
<ul>
<li> Support: With search being one of the essential functions of a website, our priority support ensures that any issues you face on a live production site can be resolved in a timely manner.</li>
<li>Regular updates: We regularly update our plugin and ensure it is compatible with the latest WordPress versions. These updates include security and bug fixes that ensure you have the latest security fixes.</li>
<li>Ensure timely updates for new WordPress/PHP releases with our premium plugins and compatibility updates to ensure you have adequate support for smooth transitions to new versions of WordPress and PHP.</li>
<li>Reasonable pricing: Various plans are tailored to suit your needs. We provide discounts to educational and non-profit organizations and bulk discounts on large purchases.</li>
<li>Easy to set up : High-quality, easy-to-understand documentation will help you in setting up our plugin. Our developers can also help you by walking you through the setup process of the plugin.</li>
<li>High level of customization and add-ons to support specific requirements.</li>
</ul>
<h4>Need support?</h4>
Please email us at info@xecurify.com or <a href="https://xecurify.com/contact" rel="nofollow ugc">Contact us</a>
<h4>Minimum Requirements</h4>
<ul>
<li>Compatible with WordPress version 5.0 or higher</li>
<li>Compatible with PHP version 5.2.0 or higher</li>
</ul>

User and Login Management

This plugin provides bulk user import/export, users session & login activity management, page privacy & security, and user redirection in one place

Comblock Login vs User and Login Management