Katsushi Kawamori

<p>Enter your email address, and send you an email with a magic link or QR Code to login without a password.</p>
<h4>Login</h4>
<ul>
<li>Login with email address only.</li>
<li>Only registered users can login.</li>
<li>Password-less login from the magic link or QR code notified in the email.</li>
<li>shortcode : <code>[magic_login]</code></li>
<li>action hook : <code>do_action( 'magic_email_send', $emails | array, true | bool )</code> : To send the magic link simultaneously from the management account.</li>
<li>QR code login on the user’s administration screen.</li>
</ul>
<h4>Thanks</h4>
<ul>
<li>This plugin is a modified version of <a href="https://wordpress.org/plugins/passwordless-login/" rel="ugc">Passwordless Login</a>.</li>
<li>The main changes are the addition of various filter hooks and the addition of the following action hooks.</li>
</ul>
<h4>Action hook</h4>
<ul>
<li>This is for sending bulk e-mails with a magic link for login to multiple accounts from the management screen.</li>
<li>When using this action hook, the URL of the page where the shortcode [magic_login] is placed should be specified in the filter hook ‘magic_login_mail_url’.</li>
</ul>
<pre><code>/** ==================================================
 * To send the magic link simultaneously from the management account.
 *
 * @param array  $emails  Multiple email addresses.
 * @param bool   true  Output notifications to the management screen immediately after sending.
 */
do_action( 'magic_email_send', $emails, true );
</code></pre>
<h4>Filter hooks</h4>
<pre><code>/** ==================================================
 * Filter for magic link url with mail.
 *
 */
add_filter( 'magic_login_mail_url', function(){ return 'url'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Currently logged in user link for Magic Login Mail
 *
 * @param string $url  URL.
 * @param int    $user_id  User ID.
 * @return $url
 */
add_filter( 'magic_login_mail_user_redirect', 'redirect_url_login_users', 10, 2 );

/** ==================================================
 * Login user after redirect for Magic Login Mail
 *
 * @param string $url  URL.
 * @param int    $user_id  User ID.
 * @return $url
 */
add_filter( 'magic_login_mail_after_login_redirect', 'redirect_url_login_users', 10, 2 );

function redirect_url_login_users( $url, $user_id ){
    /* your code */
    return $url;
}
</code></pre>
<pre><code>/** ==================================================
 * Filter for message with shortcode form.
 *
 */
add_filter( 'magic_login_mail_success_link_msg', function(){ return 'Message for success.'; }, 10, 1 );
add_filter( 'magic_login_mail_success_login_msg', function(){ return 'Message for success with login.'; }, 10, 1 );
add_filter( 'magic_login_mail_valid_errors', function(){ return 'Message for mail validation error.'; }, 10, 1 );
add_filter( 'magic_login_mail_email_errors', function(){ return 'Message for sent mail error.'; }, 10, 1 );
add_filter( 'magic_login_mail_invalid_token_error', function(){ return 'Message for token error.'; }, 10, 1 );
add_filter( 'magic_login_mail_form_label', function(){ return 'Message for form label.'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for color with shortcode form.
 *
 */
add_filter( 'magic_login_mail_success_link_msg_back_color', function(){ return '#e7f7d3'; }, 10, 1 );
add_filter( 'magic_login_mail_success_login_msg_back_color', function(){ return '#e7f7d3'; }, 10, 1 );
add_filter( 'magic_login_mail_valid_errors_back_color', function(){ return '#ffebe8'; }, 10, 1 );
add_filter( 'magic_login_mail_email_errors_back_color', function(){ return '#ffebe8'; }, 10, 1 );
add_filter( 'magic_login_mail_invalid_token_error_back_color', function(){ return '#ffebe8'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for input text size.
 *
 */
add_filter( 'magic_login_mail_input_size', function(){ return 17; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for class name.
 *
 */
add_filter( 'magic_login_mail_notice_class_name', function(){ return 'mynotice'; }, 10, 1 );
add_filter( 'magic_login_mail_form_class_name', function(){ return 'myform'; }, 10, 1 );
add_filter( 'magic_login_mail_label_class_name', function(){ return 'mylabel'; }, 10, 1 );
add_filter( 'magic_login_mail_input_class_name', function(){ return 'myinput'; }, 10, 1 );
add_filter( 'magic_login_mail_submit_class_name', function(){ return 'mysubmit'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for message with mail subject.
 *
 */
add_filter( 'magic_login_mail_subject', function(){ return 'subject'; }, 10, 1 );
</code></pre>
<pre><code>/** ==================================================
 * Filter for message with mail.
 *
 * @param string $message  message.
 * @param string $url  url.
 * @param string $exp_date_time  expiration date and time.
 */
add_filter(
    'magic_login_mail_message',
    function( $message, $url, $exp_date_time ) {

        $message .= '<br><br>' . 'You may only log in once using the link above.';

        return $message;
    },
    10,
    3
);
</code></pre>
<pre><code>/** ==================================================
 * Filter for login expiration.
 *
 */
add_filter( 'magic_login_mail_expiration', function(){ return 10; }, 10, 1 );
</code></pre>


Magic Login Mail or QR Code

Enter your email address, and send you an email with a magic link or QR Code to login without a password.

Ateeq

<p><strong>Easy Secure Login</strong> enhances your site’s security by integrating two powerful Google authentication methods: <strong>Google Sign-In</strong> and <strong>Google One Tap</strong>. It can optionally replace the standard WordPress password system entirely, offering a modern, passwordless login experience.</p>
<p>Born out of necessity after a real-world brute-force attack, this plugin was designed with the option to enforce a Google-only login policy, ensuring that <strong>only verified Google accounts can access your site</strong>. It combines robust, Google-powered security with a beautiful user interface, automatic user management, and a step-by-step setup wizard.</p>
<h3>Key Features</h3>
<ul>
<li><strong>Optional Passwordless Security:</strong> Ability to completely disable standard password logins, forcing all users to authenticate via Google’s secure OAuth 2.0.</li>
<li><strong>Role-Based Redirects:</strong> Define custom landing pages for different user roles. Redirect subscribers to your homepage or a custom dashboard while keeping admins in wp-admin.</li>
<li><strong>Google Sign-In Button:</strong> A clean, modern “Continue with Google” button on your login page.</li>
<li><strong>Google One Tap:</strong> Allows logged-in Google users to sign in instantly with a single click via a non-intrusive pop-up.</li>
<li><strong>Complete User Management:</strong> Whitelist specific Google accounts and assign roles, or allow open registration for any Google user.</li>
<li><strong>Google Profile Picture Sync:</strong> Automatically syncs and displays Google profile pictures as user avatars in WordPress.</li>
<li><strong>Built-in Security Hardening:</strong>
<ul>
<li>Disable XML-RPC to prevent common attacks.</li>
<li>Disable the plugin and theme file editor.</li>
<li>Hide your WordPress version number.</li>
<li>Restrict REST API access to logged-in users.</li>
<li>Block direct access to sensitive core files.</li>
</ul>
</li>
<li><strong>User-Friendly Setup Wizard:</strong> A clean, multi-step guide to get your Google Cloud credentials configured in minutes.</li>
<li><strong>Actively Maintained</strong> for the latest WordPress versions.</li>
</ul>
<p>This plugin provides maximum login security while dramatically improving the user experience.</p>
<h3>External services</h3>
<p>This plugin uses Google’s Identity Services to provide a secure authentication method (Google Sign-In and Google One Tap). To function, it connects to several Google APIs.</p>
<ul>
<li><strong>Service:</strong> Google Identity Services (accounts.google.com)</li>
<li><strong>Purpose:</strong> This service is used to display the “Sign in with Google” button and the Google One Tap prompt. It handles the user authentication process directly in the user’s browser.</li>
<li><strong>Data Sent:</strong> This plugin initiates the authentication flow, but user data (like email and password) is entered directly on Google’s domain, not through this plugin. The plugin only receives a secure authentication token from Google after a successful login.</li>
<li>
<p><strong>Terms and Policies:</strong></p>
<ul>
<li>Google Terms of Service: https://policies.google.com/terms</li>
<li>Google Privacy Policy: https://policies.google.com/privacy</li>
</ul>
</li>
<li>
<p><strong>Service:</strong> Google OAuth & People APIs (oauth2.googleapis.com, www.googleapis.com)</p>
</li>
<li><strong>Purpose:</strong> After a user authenticates, the plugin’s server sends the received authentication token/code to these Google APIs to verify its authenticity and retrieve basic user profile information (email, name, profile picture).</li>
<li><strong>Data Sent:</strong> An authentication token/code provided by Google is sent from your server to Google’s servers for validation.</li>
<li><strong>Terms and Policies:</strong>
<ul>
<li>Google APIs Terms of Service: https://developers.google.com/terms</li>
</ul>
</li>
</ul>


Easy Secure Login – Google One Tap & Sign-In

Eliminate passwords and secure your site with Google. This plugin replaces WordPress login with a secure Google Sign-In button and frictionless Google …

Magic Login Mail or QR Code vs Easy Secure Login – Google One Tap & Sign-In