Kevin Behrens

thomstark

Show or hide any portion of post content based on usernames, user roles, capabilities, custom groups, or logged-in status. Construct shortcodes manually or using a point and click UI.
<h4>Mini Update Log</h4>
<ul>
<li>v1.8.2 compat with WordPress 3.9</li>
<li>
v1.8.1 fixed conflict with the Tabify Edit Screen plugin
</li>
<li>
v1.8 added new shortcode handlers for nesting eyesonly shortcodes. also added body classes for logged-in user roles and logged-in usernames.
</li>
<li>
v1.7.1 fixed bug with TinyMCE button where TinyMCE panel is used outside post/page editor.
</li>
<li>
v1.7 added multisite support for username multiselect; fixed bug with role/level dropdown in non-Mozilla browsers.
</li>
<li>
Lots of new features in v1.6, including smooth integration with Role Scoper and Press Permit, thanks to their author Kevin Behrens, who has also now joined the Eyes Only team. Two makes a team, right?
</li>
<li>
As of v1.5, has compatibility with BuddyPress and BBPress forums in conjunction with the bbPress2 shortcode whitelist plugin by Anton Channing.
</li>
<li>
As of v1.4, includes TinyMCE Shortcode Button with Shortcode Generator Modal, with options to restrict access to the Shortcode Button, and to determine its position on the TinyMCE panel.
</li>
<li>
As of v1.3, includes Options page, with options to restrict access to the Meta Box, and to prevent content being hidden from Administrators.
</li>
<li>
As of v1.2, includes Shortcode Generator Meta Box
</li>
<li>
<a href="https://wordpress.org/plugins/eyes-only-user-access-shortcode/changelog/" title="Right-Click to Open in New Window">See full changelog</a>
</li>
</ul>
<h4>The Shortcode</h4>
[eyesonly] [/eyesonly]
or
[eyesonlier] [/eyesonlier]
or
[eyesonliest] [/eyesonliest]
<ul>
<li>
Required attributes: either logged=”in|out” or level=”anyrole, any_capability” or username=”anyusername” or all three
</li>
<li>
Newly integrated attributes: rs_group=”any_Role_Scoper_group(s)” or pp_group=”any_Permit_Press_group(s)”
</li>
<li>
Optional attribute: hide=”yes”
</li>
</ul>
All shortcodes must include at least one of the three required attributes. In some cases, it makes sense to use all of them together.
<ul>
<li>
The ‘logged’ attribute takes one of two values: ‘in’ or ‘out’
</li>
<li>
The ‘level’ attribute takes any user role (including custom roles) or any capability (including custom capabilities). It can take multiple roles and/or capabilities, separated either by spaces or commas.
</li>
<li>
The ‘username’ attribute takes any userlogin (username), or multiple, separated either by spaces or commas.
</li>
<li>
The ‘rs_group’ and ‘pp_group’ attributes can take comma or space-separated lists just like the ‘level’ and ‘username’ attributes. If you have the latest versions of either Role Scoper or Press Permit activated, you’ll get an extra menu in your shortcode generators to filter your content by those custom user groups. This attribute can also be used in combination with any of the others to fine tune your filtering.
</li>
<li>
The ‘hide’ attribute: By default, the shortcode will show the content only to the users specified by the ‘username’, ‘level’ or ‘logged’ attributes. Adding the ‘hide’ attribute will reverse that, and hide the content from the specified users. To hide content from the specified users, use hide=yes or hide=true.
</li>
</ul>
Any other shortcode can be used inside this shortcode.
<h4>Examples</h4>
<ul>
<li>
[eyesonly level=”administrator, customrole, moderate_comments”] Any kind of content. [/eyesonly] This will show the content only to users with the ‘administrator’ role, the ‘customrole’ role, and the ‘moderate_comments’ capability.
</li>
<li>
[eyesonly hide=”yes” logged=”out” level=”subscriber customrole”] Any kind of content. [/eyesonly] This will hide the content from all logged out users, and from anyone with the roles ‘subscriber’ or ‘customrole’.
</li>
<li>
[eyesonly username=”joebob, billyjean” level=”administrator”] Your content. [/eyesonly] This will show the content to all administrators and to the specific users ‘joebob’ and ‘billyjean,’ whether they’re administrators or not.
</li>
<li>
[eyesonly logged=”in”] Content for logged-in users. [/eyesonly][eyesonly logged=”out”] Content for logged-out users. [/eyesonly] This will show different content in the same location on the page depending on a user’s logged-in or out status.
</li>
<li>
[eyesonly level=”administrator”] Content. [/eyesonly] This will show the content only to administrators.
</li>
<li>
[eyesonly hide=”yes” level=”administrator custom_capability”] Content. [/eyesonly] This will hide the content only from administrators and from any role that has the ‘custom_capability’.
</li>
</ul>
<h4>Eyes Only Nesting</h4>
<ul>
<li>Eyes Only allows for nested user access shortcodes up to three levels deep. Example:</li>
</ul>
[eyesonly level=”administrator, editor, author”] Restricted content. [eyesonlier level=”administrator, editor”] Restricteder content. [eyesonliest level=”administrator”] Restrictedest content. [/eyesonliest] More restricteder content. [/eyesonlier] More restricted content. [/eyesonly]
<ul>
<li>It doesn’t matter which order you use them in, just so long as you keep your nested levels straight. </li>
</ul>
<h4>Requirements</h4>
<ul>
<li>
PHP 5.2+
</li>
<li>
WordPress 3.3+
</li>
</ul>

Eyes Only: User Access Shortcode

The plugin does the job. The authors should update compatibility :-)



Works

Show or hide any portion of post content based on usernames, user roles, capabilities, custom groups, or logged-in status.

David Gewirtz

My Private Site is the easiest way to make your entire WordPress site private. With one setting, you can restrict all pages and posts so they are visible only to logged-in users. Visitors who are not signed in are automatically redirected to the WordPress login screen.
Unlike full membership plugins, My Private Site does not require the overhead of subscriptions, payments, or profile management. Instead, it focuses on strong, lightweight privacy, perfect for projects where you just need to keep your site limited to a trusted audience.
<h3>Ideal Use Cases</h3>
<ul>
<li>Family sites and school projects: Share personal updates, photos, or assignments only with family members, classmates, or teachers you choose.</li>
<li>Development and staging sites: Safely show work-in-progress to clients or teammates without exposing unfinished content or letting it be indexed by search engines.</li>
<li>Clubs, groups, and internal blogs: Create a private online space for members or staff without the overhead of a complex membership system.</li>
</ul>
<h3>Key Features</h3>
<ul>
<li>One-click option to make your entire WordPress site private.</li>
<li>Optional setting to keep the homepage public while locking down the rest of the site.</li>
<li>Automatic login prompts whenever non-logged-in users try to access content.</li>
<li>Flexible landing page control—send users back to the page they requested, to your homepage, dashboard, or a custom URL after login.</li>
<li>Hide the WordPress admin bar on the front end for a cleaner look.</li>
<li>REST API Guardian: block REST API access for logged-out users.</li>
<li>Works with custom login pages, Multisite, BuddyPress, and Theme My Login.</li>
<li>Privacy shortcode lets you selectively show or hide content within a page or post.</li>
</ul>
<h3>Built-in AI Defense</h3>
The internet is rapidly changing, with AI crawlers and bots harvesting content without consent. My Private Site helps you defend your work with integrated AI Defense features: 
* NoAI and NoImageAI tags: Automatically add meta tags and headers that signal compliant AI systems not to use your text or images for training. 
* Block GPTBot: Add a robots.txt rule to prevent OpenAI’s crawler from accessing your site. 
* Really Simple Licensing (RSL): Publish a machine-readable license that explicitly prohibits AI training on your content.
These protections are included free in the core plugin, easy to enable with a checkbox, and designed to safeguard your site without affecting normal visitors or search engines. You can use them even if you’re not using any other site privacy features.
<h3>Privacy Made Simple for Teams, Projects, and Families</h3>
In short, My Private Site turns your WordPress installation into a secure, invite-only space with just a few clicks. Whether you’re running a private blog, staging a project, or safeguarding your family site, it provides peace of mind, modern AI defenses, and effortless setup—all while staying lightweight and easy to manage.
<h3>Watch the Video Overview and Demo</h3>
<iframe loading="lazy" title="My Private Site 4.0 Getting Started" width="750" height="422" src="https://www.youtube.com/embed/jry3DHD-OB8?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>
<h3>Premium Add-ons</h3>
Premium add-ons turn My Private Site into a comprehensive privacy suite, giving you enterprise-style layered security defenses, smarter oversight, and flexible access, without the complexity or cost.
Advanced AI Defense, Visitor Intelligence, and Block IP provide protections regardless of whether you’re using any site privacy features.
<iframe loading="lazy" title="My Private Site Digital Fortress - Extensions Ecosystem" width="750" height="422" src="https://www.youtube.com/embed/B6s8O9VZLc0?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>
<ul>
<li><a href="https://zatzlabs.com/project/my-private-site-public-pages/" rel="nofollow ugc">Public Pages 2.0</a>: Allows site operators to designate certain specific pages, or pages with specified prefix, to be available to the public without login. Now also allows public site, private pages. <a href="https://youtu.be/u7BuYtzS_pI" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-advanced-ai-defense/" rel="nofollow ugc">Advanced AI Defense</a>: Protect WordPress content from AI crawlers using licensing, opt-out tags, selective bot blocking, and firewall defenses to control and safeguard your data. <a href="https://youtu.be/Eb4qQDafaRk" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-visitor-intelligence/" rel="nofollow ugc">Visitor Intelligence</a>: Track logins, logouts, failed attempts, and bot activity with a unified log, anomaly detection, and export tools for stronger site oversight and security. <a href="https://youtu.be/TTK8bGVD8pM" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-guest-access/" rel="nofollow ugc">Guest Access</a>: Grant temporary, secure access to private WordPress content using unique shareable links with expiration, one-time use, and full admin-controlled invite management. <a href="https://youtu.be/j1vYV8lhqcc" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-block-ip/" rel="nofollow ugc">Block IP</a>: Block unwanted visitors by IP address or range with full IPv4/IPv6 support, configurable scope, and fast enforcement to secure your WordPress site. <a href="https://youtu.be/vsxLqYXWITs" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-tags-and-categories/" rel="nofollow ugc">Tags & Categories</a>: Allows you to make pages public or (with Public Pages 2.0) private based on tags and categories. <a href="https://youtu.be/dEv7lXxU5lo" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-selective-content/" rel="nofollow ugc">Selective Content</a>: Allows hiding, showing, and obscurifying page content through the use of shortcodes. Can also selectively hide widgets and sidebars. <a href="https://youtu.be/exgJrJJSCNY" rel="nofollow ugc">Watch the video</a></li>
<li><a href="https://zatzlabs.com/project/my-private-site-pricing/" rel="nofollow ugc">Digital Fortress Bundle</a>: All add-ons are available in bundle form. <a href="https://youtu.be/B6s8O9VZLc0" rel="nofollow ugc">Watch the video</a></li>
</ul>
<h3>Limits</h3>
This plugin does not hide non-WordPress web pages, such as .html and .php files. It also won’t restrict images and other media and text files directly accessed by their URL. If your hosting provider’s filesystem protections haven’t been set up correctly, files may also be accessed by directory listing.
<h3>Support Note</h3>
Support has moved to the ZATZLabs site and is no longer provided on the WordPress.org forums. If you need a timely reply from the developer, please <a href="http://zatzlabs.com/submit-ticket/" rel="nofollow ugc">open a ticket</a>.
<h3>Mailing List</h3>
If you’d like to keep up with the latest updates to this plugin, please visit <a href="http://zatzlabs.com/lab-notes/" rel="nofollow ugc">David’s Lab Notes</a> and add yourself to the mailing list.

My Private Site with AI Defense

Lock down your site with one click. Privacy for family, projects, or teams.

Eyes Only: User Access Shortcode vs My Private Site with AI Defense