SDLC Corp

The SDLC Country Block plugin lets you restrict access to individual posts and pages based on the visitor’s country, while keeping SEO bots and crawlers unblocked for safe indexing.
<h3>🔐 4 Layers of Country Detection</h3>
To ensure maximum compatibility, the plugin checks for the visitor’s country in this order: 
1. Cloudflare header (<code>CF-IPCountry</code>) 
2. Server GeoIP variables (if your hosting environment provides them) 
3. PHP GeoIP extension (<code>geoip_country_code_by_name</code>) 
4. Wordfence plugin (using Wordfence GEO detection)
⚠️ Note: At least one of these extensions or plugins must be enabled. If none are active, the plugin cannot detect visitor countries.
<h3>✨ Features</h3>
<ul>
<li>Per-post/page multi-select of countries (full ISO list)</li>
<li>SEO-safe: bots/crawlers can bypass blocks</li>
<li>Choose action: redirect to endpoint (/blocked), redirect to custom URL, or 403</li>
<li>Customizable endpoint slug</li>
<li>Role-based bypass (e.g., admin, editor)</li>
<li>Optional admin-only debug banner</li>
<li>Proper sanitization, escaping, and nonces</li>
<li>Sets <code>Vary: CF-IPCountry</code> for cache correctness</li>
<li>Clean uninstall (removes options and post meta)</li>
</ul>
This plugin is maintained by <a href="https://sdlccorp.com/" rel="nofollow ugc">SDLC CORP</a> — a Digital Transformation Company with expertise in: 
– WordPress Development 
– Shopify Solutions 
– Artificial Intelligence (AI) & Machine Learning 
– Model Development and NLP (Natural Language Processing) 
– Enterprise-grade <a href="https://sdlccorp.com/ai-development-services/" rel="nofollow ugc">AI Development Services</a>
By publishing this open-source plugin, SDLC CORP demonstrates its commitment to empowering developers and businesses with scalable AI-driven solutions and modern web technologies.
<h3>Requirements & Compatibility</h3>
For the plugin to work, at least one of the following extensions or plugins must be enabled on your server:
<ol>
<li>Cloudflare → Enable the IP Geolocation setting in your Cloudflare dashboard (adds the <code>CF-IPCountry</code> header).</li>
<li>Server GeoIP → Your hosting provider must support GeoIP (ask your host if they provide <code>GEOIP_COUNTRY_CODE</code>).</li>
<li>PHP GeoIP Extension → Install and enable the PHP <code>geoip</code> extension on your server (may require server admin/hosting support).</li>
<li>Wordfence Plugin → Install the free <a href="https://wordpress.org/plugins/wordfence/" rel="ugc">Wordfence Security plugin</a> and enable its country blocking/GeoIP feature.</li>
</ol>
➡️ At least one of these must be active. If none are available, the plugin cannot detect visitor countries.
<h3>Third-Party Compatibility</h3>
This plugin is designed to work with third-party services such as Cloudflare and Wordfence when available. 
SDLC Country Block is an independent plugin and is not affiliated with or endorsed by Cloudflare or Wordfence.
<h3>License</h3>
This plugin is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, version 2 of the License, or (at your option) any later version.
This plugin is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
A copy of the GPL v2 license is included in this package. You can also see <a href="https://www.gnu.org/licenses/gpl-2.0.html" rel="nofollow ugc">https://www.gnu.org/licenses/gpl-2.0.html</a>.
<h3>Trademark</h3>
“SDLC CORP” and the SDLC CORP logo are trademarks of SDLC CORP. 
The GPL license covers the plugin’s source code. It does not grant rights to use SDLC CORP’s trademarks or branding in modified versions in a way that suggests endorsement or affiliation without permission.

Country Access Control

Block access to selected posts/pages by visitor country, with SEO-safe bot bypass and customizable redirects.

brstefanovic

Advanced Country Blocker helps you secure your WordPress site by restricting access based on the visitor’s geolocation (country) or IP address. Upon activation, the plugin detects the activating admin’s country and automatically sets that as the only allowed country. All other visitors from different countries are blocked, unless they use a secret key parameter to temporarily whitelist their IP. Country detection uses the privacy-friendly ip-api.com service by default but can be switched to a fully offline MaxMind GeoLite2 (or compatible) database file once you configure a local copy.
Key Features:
<ul>
<li>Automatically allows the admin’s country on plugin activation.</li>
<li>Flexible IP-to-country lookups – start with the built-in ip-api.com integration and optionally switch to an offline MaxMind GeoLite2 Country (or compatible) <code>.mmdb</code> database file.</li>
<li>Allowlist or blacklist mode – choose whether the country list acts as an allowlist or blocklist without re-entering countries.</li>
<li>Temporary access via a customizable secret URL parameter (e.g., <code>?MySecretKey=1</code>).</li>
<li>CAPTCHA Challenge – allow blocked visitors to solve a CAPTCHA to gain temporary access (supports Google reCAPTCHA v2/v3, hCaptcha, Cloudflare Turnstile).</li>
<li>Real-Time Activity Monitor – live dashboard showing active visitors, recent blocks, and traffic statistics.</li>
<li>Analytics Dashboard – comprehensive charts and statistics about blocked attempts.</li>
<li>Manual blacklisting and safelisting of IPs for added security and to accommodate uptime monitors.</li>
<li>Optional email alerts when new visitors are blocked.</li>
<li>Admin bypass so logged-in admins can always access the site (toggleable in the code).</li>
<li>Detailed logging of blocked attempts in a custom database table, displayed in the WP admin.</li>
<li>Custom response controls – personalise the block page title/message, choose the HTTP status (403, 410, 451) or redirect to any URL.</li>
<li>Automatic log cleanup with configurable retention plus a one-click “Clear Logs” button.</li>
</ul>
Use the plugin settings page (Country Blocker menu in WP admin) to configure the list of allowed countries, blacklisted countries, blacklisted IPs, and whether email alerts are enabled.
<h3>License</h3>
This plugin is open-sourced software licensed under the <a href="https://www.gnu.org/licenses/gpl-3.0.html" rel="nofollow ugc">GPLv3 or later</a>.
<h3>External Services</h3>
By default this plugin contacts the ip-api.com geolocation service to detect visitor countries. You can disable all external lookups by switching the IP lookup method to the local MaxMind database in the settings.

Advanced Country Blocker


It's a simple plugin that simply works. 



Also, I made it, so ofc 5 stars. =D


Simply works

An advanced security plugin that blocks website visitors by country, with additional features like blacklisting, logging blocked attempts, admin bypas …

Country Access Control vs Advanced Country Blocker