Dave McHale

Tang Rufus

<p>The most comprehensive plugin for controlling access to the WordPress REST API!</p>
<p>Works as a “set it and forget it” install. Just upload and activate, and the entire REST API will be inaccessible to your general site visitors.</p>
<p>But if you do need to grant access to some endpoints, you can do that too. Go to the Settings page and you can quickly whitelist individual endpoints (or entire branches of endpoints) in the REST API.</p>
<p>You can even do this on a per-user-role basis, so your unauthenticated users have one set of rules while WooCommerce customers have another while Subscribers and Editors and Admins all have their own. NOTE: Out of the box, all defined user roles will still be granted full access to the REST API until you choose to manage those settings.</p>
<p>For most versions of WordPress, this plugin will return an authentication error if a user is not allowed to access an endpoint. For legacy support, WordPress 4.4, 4.5, and 4.6 use the provided <code>rest_enabled</code> filter to disable the entire REST API.</p>


Disable REST API

The plugin uses a is_user_logged_in() check to grant access to disabled REST API endpoints. I run a membership site for one year and just realized it now, that any logged in visitor STILL HAVE ACCESS to any disabled REST API endpoints.

This should be very explicit, and there should be a setting in the plugin settings page to set the minimum role for the user to have access to the disabled endpoints.

ANY logged-in visitor can view the disabled endpoints


Blocking the REST API entirely breaks plugins that require this functionality, so being able to selectively enable routes is perfect.



I recommend this plugin to everyone who uses Independent Analytics to secure their site while still enabling analytics to be recorded.


Excellent solution


The plugin does what it says on the tin, without being pretentious. Absolutely fantastic!


Fantastic

Disable the use of the REST API on your website to site users. Now with User Role support!

Dominate

dominate

<p>Our cloud-based checkout suite includes everything you need to increase conversions and drop abandonment rates – yet it installs in just minutes and is completely free. If you ever decide you don’t want to use it anymore, uninstall it with just a single click.</p>
<p>With a single page for your entire checkout process, shoppers will have no problem becoming customers when they visit your WooCommerce website. Our checkout suite will give you all the tools to give them a completely frictionless checkout experience.</p>
<p>We understand your business is completely unique, which is why we made our checkout suite so it’s 100% customizable. Create the perfect checkout page for your specific website. Easily make adjustments over time to increase your conversion rate even further. No matter what kind of checkout page you build for your site, this extension’s completely responsive, so it will always display at the correct size.</p>
<p>Powered by PayPal Commerce, your customized checkout page will give you access to more than 280 million customers around the world and 100+ different currencies. You’ll also enjoy peace-of-mind knowing you’re benefiting from PayPal’s advanced Fraud Protection.</p>
<p>One simple page. One powerful extension. Start increasing conversions today.</p>
<h4>Easy as 1-2-3 to Install and Customize</h4>
<p>Dominate Checkout solution is as powerful as it is easy to set up – no developer required! It only takes a few clicks to install and start converting more shoppers into customers. Effortlessly maintain your brand image across your entire conversion funnel with our user-friendly customization tools and give your consumers a seamless checkout experience.</p>
<h4>Lightning Fast and Highly Scalable</h4>
<p>When it comes to your checkout page, speed is essential. Slow checkout pages mean high abandonment rates. We designed our checkout solution to be a cloud-based platform, so it’s lightning-fast and always available. WooCommerce’s checkout is focused on many aspects of your site, while Dominate Checkout Suite is solely focused on just your customer’s checkout journey – making it blazing fast and reliable!</p>
<h4>Mobile Optimization Initiative</h4>
<p>IWD Agency partnered with Hi-Conversion, through the PayPal MOI initiative, to run countless A/B tests on mobile optimization. We then utilized the results when optimizing Checkout Suite for mobile users. Merchants that use our Checkout Suite see their conversion rates lift by 7.12% on average!</p>
<h4>Brand Consistency</h4>
<p>Trust =</p>
<p>Consumers won’t complete their purchase if they don’t trust your checkout page. With Checkout Suite, your customers will never leave your site. Every step of the process will be consistent with your unique brand, so they’ll never worry about security. We run the checkout page within an iFrame, which ensures your site is 100% PCI compliant.</p>
<h4>Lower Cart Abandonment Rate</h4>
<p>Dominate Checkout Suite will even update as necessary to stay current with best practices. We do all of the optimization testing for you and you receive all of the updates, automatically, FOR FREE. Spend more time focusing on other priorities while our Checkout Suite keeps your abandonment rate low.</p>
<h3>External services</h3>
<p>This plugin relies on the following third-party services to provide the checkout experience. By using this plugin, data is transmitted to these external services as described below.</p>
<h4>Dominate Checkout Platform</h4>
<p>This plugin connects to the Dominate Checkout cloud platform to provide the checkout experience. The checkout page is loaded inside an iframe from Dominate’s servers, and the plugin communicates with the Dominate API for order processing, payment handling, and configuration management.</p>
<p>Data sent: Cart contents (product names, quantities, prices), customer addresses (billing and shipping), shipping methods, coupon codes, and payment transaction details. Data is sent when a customer visits the checkout page and during each step of the checkout process (address entry, shipping selection, payment, and order placement). The plugin also communicates with Dominate for connection testing, payment capture, void, and refund operations initiated by the store administrator.</p>
<p>Service URL: <a href="https://dominate.co" rel="nofollow ugc">https://dominate.co</a></p>
<ul>
<li><a href="https://dominate.co/terms-and-conditions" rel="nofollow ugc">Dominate Terms of Service</a></li>
<li><a href="https://dominate.co/privacy-policy" rel="nofollow ugc">Dominate Privacy Policy</a></li>
</ul>
<h4>PayPal Commerce Platform</h4>
<p>This plugin loads the PayPal JavaScript SDK to render PayPal payment buttons on the cart page and product pages for subscriptions. The SDK communicates with PayPal’s servers to initialize and process payments.</p>
<p>Data sent: Cart total amount, currency, merchant ID, and button configuration. Data is sent when the PayPal button is rendered on the cart page and when a customer initiates a PayPal payment.</p>
<ul>
<li><a href="https://www.paypal.com/us/legalhub/useragreement-full" rel="nofollow ugc">PayPal User Agreement</a></li>
<li><a href="https://www.paypal.com/us/legalhub/privacy-full" rel="nofollow ugc">PayPal Privacy Statement</a></li>
</ul>
<h4>Braintree (a PayPal service)</h4>
<p>This plugin loads the Braintree JavaScript SDK to enable Apple Pay functionality. The Braintree SDK handles secure payment tokenization for Apple Pay transactions.</p>
<p>Data sent: Payment token data for Apple Pay transactions. Data is sent when a customer initiates an Apple Pay payment on a supported device and browser.</p>
<ul>
<li><a href="https://www.paypal.com/us/legalhub/braintree/home" rel="nofollow ugc">Braintree Legal Agreement</a></li>
<li><a href="https://www.paypal.com/us/legalhub/braintree/data-protection-addendum" rel="nofollow ugc">Braintree Data Protection Policy</a></li>
</ul>


Dominate Checkout Suite SaaS

Cloud-based checkout for WooCommerce with a fast, customizable single-page experience.

Disable REST API vs Dominate Checkout Suite SaaS