wp-comblock

The Comblock Login plugin implements a complete and secure authentication system on the frontend for WordPress. Through dedicated shortcodes, you can easily insert login and logout forms, user information displays, and the option to log out of all active sessions on your site’s content. The login process is strictly managed: user-entered data is sanitized, security is ensured through nonce verification to prevent CSRF attacks, and authentication is performed using native WordPress functions, with support for secure session storage and cookie management.
Logout not only allows you to securely end the current session, but also offers the advanced global logout feature, which ends all active user sessions on all devices, increasing security in case of compromise or accidental sharing of credentials. Custom dashboards, based on dedicated post types, are protected by access controls that limit visibility to authorized users only, redirecting other users to configured login pages, with failed attempts logged to improve security monitoring.
<h3>Features</h3>
<ol>
<li>Registration of the shortcode for the login form, logout button, logout button for all devices, and display of logged-in users.</li>
<li>Secure login management with nonce verification and input sanitization.</li>
<li>Custom redirects to the dashboard after login and to the login page after logout.</li>
<li>Creation of multiple dashboards by configuring which user roles can access them.</li>
<li>Logout functionality from all devices simultaneously.</li>
<li>Logging of errors related to access and permissions.</li>
</ol>
<h3>Usage</h3>
<ul>
<li>
Use the shortcode <code>[comblock_login]</code> to display the login form. You can insert this shortcode into any page or post. 
Simple example (only required attribute): 
<code>[comblock_login dashboard-post-id="8"]</code> 
Complete example (with all optional attributes): 
<code>[comblock_login id="subscriber-login" class="subscriber-form-login" dashboard-post-id="8" privacy-page-id="2"]</code> 
Where:
<ul>
<li><code>dashboard-post-id</code> is mandatory and represents the ID of a Dashboard post type created in the back office. </li>
<li><code>id</code>, <code>class</code>, and <code>privacy-page-id</code> are optional, where <code>privacy-page-id</code> refers to the privacy policy page ID.</li>
</ul>
</li>
<li>
Use the shortcode <code>[comblock_logout]</code> only within the <code>dashboard</code> post type to display the logout link. 
Simple example (without optional attributes): 
<code>[comblock_logout]</code> 
Complete example (with optional attributes): 
<code>[comblock_logout id="logout-link" class="btn-logout"]</code>
</li>
<li>
Use the shortcode <code>[comblock_disconnection]</code> within the <code>dashboard</code> post type to display the disconnection link. 
Simple example: 
<code>[comblock_disconnection]</code> 
Complete example: 
<code>[comblock_disconnection id="disconn-link" class="btn-disconnect"]</code>
</li>
<li>
Use the shortcode <code>[comblock_user_info]</code> within the <code>dashboard</code> post type to display user information. 
Simple example (only required attribute): 
<code>[comblock_user_info fields="display_name,user_email"]</code> 
Complete example (with title and all attributes): 
<code>[comblock_user_info title="my-section-title" fields="display_name,user_email"]</code> 
The <code>fields</code> attribute contains user meta fields separated by commas. Note that some meta fields cannot be used for security or privacy reasons.
To address this, the plugin provides two filters hooks:
<ul>
<li><code>comblock_login_user_ban_fields</code> allows you to add meta fields that you shouldn’t use. </li>
<li><code>comblock_login_user_info_allowed_fields</code> permits extending the list of meta fields that are allowed for searching and displaying user metadata.</li>
</ul>
These hooks enable developers to customize which user data can be displayed via the shortcode while maintaining control over security and privacy.
</li>
</ul>
<h3>Security</h3>
The plugin implements the following security mechanisms:
<ul>
<li>Nonce verification for all critical login and logout actions to protect against CSRF.</li>
<li>Sanitization of input from login forms to prevent injection.</li>
<li>Authentication via WordPress’ secure <code>wp_signon()</code> function.</li>
<li>Strict session cookie management with SSL support.</li>
<li>Granular control of access permissions based on user roles defined for each dashboard.</li>
<li>Complete destruction of user sessions upon logout from all devices.</li>
</ul>

Comblock Login

Secure frontend login/logout with user dashboards, session management, and role-based access control for WordPress sites.

10Horizons Plugins

This plugin is for those who want to use or have already been using Formidable Forms for user registration and want a simple way to hold the registrations for admin approval.
Tested with Formidable Forms up to: Version 3.06.05 
Tested with Formidable Registration up to: Version 2.02.01
The Flow
<ol>
<li>
Admin creates user registration application form using Formidable Forms plugin.
</li>
<li>
User registers an account using the above form.
</li>
<li>
If admin turns on approval for the above form, user who registers will automatically have the role of pending, and they cannot login until admin approves their registration.
</li>
<li>
If admin approves a user registration, that user’s role will change from pending to what is already set on the form setting. The user will be notified by email to let them know their registration has been approved.
</li>
<li>
Likewise, if admin rejects a user registration, the user will be notified by email to let them know their registration has been rejected, and the user will be deleted. 
(Note: You can still see rejected user’s details in Entries section if you enable entries for your form, even after user has been deleted. Disable entries to not store user details after user is deleted.)
</li>
</ol>
Plugin Dependency
This plugin is an add-on for Formidable Forms. The following plugins are required for it to work:
<ul>
<li><a href="https://wordpress.org/plugins/formidable/">Formidable Forms</a> (free or PRO, but you usually have to get PRO to get Formidable Registration plugin too)</li>
<li><a href="https://formidableforms.com/downloads/user-registration/" rel="nofollow ugc">Formidable Registration</a> (also called WordPress User Registration add-on for Formidable Forms)</li>
</ul>
Support Questions, Bug Reports
Support questions should ideally be posted here on WordPress.org forum. Other types of questions, bug reports, inquiry relating to the plugin, should also be posted on the WordPress.org forum.
Plugin Customization
If you need further plugin customization to suit your website, please <a href="https://wproot.dev/contact/" rel="nofollow ugc">reach out to the developer directly</a>.

User Registration Approval for Formidable Forms

Allows admin to easily approve or reject user registrations that use forms built with Formidable…

Comblock Login vs User Registration Approval for Formidable Forms