John Godley

<p>Redirection is the most popular redirect manager for WordPress. With it you can easily manage 301 redirections, keep track of 404 errors, and generally tidy up any loose ends your site may have. This can help reduce errors and improve your site ranking.</p>
<p>Redirection is designed to be used on sites with a few redirects to sites with thousands of redirects.</p>
<p>It has been a WordPress plugin for over 10 years and has been recommended countless times. And it’s free!</p>
<p>Full documentation can be found at <a href="https://redirection.me" rel="nofollow ugc">https://redirection.me</a></p>
<p>Redirection is compatible with PHP from 7.4 to 8.4.</p>
<h4>Redirect manager</h4>
<p>Create and manage redirects quickly and easily without needing Apache or Nginx knowledge. If your WordPress supports permalinks then you can use Redirection to redirect any URL.</p>
<p>There is full support for regular expressions so you can create redirect patterns to match any number of URLs. You can match query parameters and even pass them through to the target URL.</p>
<p>The plugin can also be configured to monitor when post or page permalinks are changed and automatically create a redirect to the new URL.</p>
<h4>Conditional redirects</h4>
<p>In addition to straightforward URL matching you can redirect based on other conditions:</p>
<ul>
<li>Login status – redirect only if the user is logged in or logged out</li>
<li>WordPress capability – redirect if the user is able to perform a certain capability</li>
<li>Browser – redirect if the user is using a certain browser</li>
<li>Referrer – redirect if the user visited the link from another page</li>
<li>Cookies – redirect if a particular cookie is set</li>
<li>HTTP headers – redirect based on a HTTP header</li>
<li>Custom filter – redirect based on your own WordPress filter</li>
<li>IP address – redirect if the client IP address matches</li>
<li>Server – redirect another domain if also hosted on this server</li>
<li>Page type – redirect if the current page is a 404</li>
</ul>
<h4>Full logging</h4>
<p>A configurable logging option allows to view all redirects occurring on your site, including information about the visitor, the browser used, and the referrer. A ‘hit’ count is maintained for each redirect so you can see if a URL is being used.</p>
<p>Logs can be exported for external viewing, and can be searched and filtered for more detailed investigation.</p>
<p>Display geographic information about an IP address, as well as a full user agent information, to try and understand who the visitor is.</p>
<p>You are able to disable or reduce IP collection to meet the legal requirements of your geographic region, and can change the amount of information captured from the bare minimum to HTTP headers.</p>
<p>You can also log any redirect happening on your site, including those performed outside of Redirection.</p>
<h4>Add HTTP headers</h4>
<p>HTTP headers can be added to redirects or your entire site that help reduce the impact of redirects or help increase security. You can also add your own custom headers.</p>
<h4>Track 404 errors</h4>
<p>Redirection will keep track of all 404 errors that occur on your site, allowing you to track down and fix problems.</p>
<p>Errors can be grouped to show where you should focus your attention, and can be redirected in bulk.</p>
<h4>Query parameter handling</h4>
<p>You can match query parameters exactly, ignore them, and even pass them through to your target.</p>
<h4>Migrate Permalinks</h4>
<p>Changed your permalink structure? You can migrate old permalinks simply by entering the old permalink structure. Multiple migrations are supported.</p>
<h4>Apache & Nginx support</h4>
<p>By default Redirection will manage all redirects using WordPress. However you can configure it so redirects are automatically saved to a .htaccess file and handled by Apache itself.</p>
<p>If you use Nginx then you can export redirects to an Nginx rewrite rules file.</p>
<h4>Fine-grained permissions</h4>
<p>Fine-grained permissions are available so you can customise the plugin for different users. This makes it particularly suitable for client sites where you may want to prevent certain actions, and remove functionality.</p>
<h4>Import & Export</h4>
<p>The plugin has a fully-featured import and export system and you can:</p>
<ul>
<li>Import and export to Apache .htaccess</li>
<li>Export to Nginx rewrite rules</li>
<li>Copy redirects between sites using JSON</li>
<li>Import and export to CSV for viewing in a spreadsheet</li>
<li>Use WP CLI to automate import and export</li>
</ul>
<p>You can also import from the following plugins:</p>
<ul>
<li>Simple 301 Redirects</li>
<li>SEO Redirection</li>
<li>Safe Redirect Manager</li>
<li>Rank Math</li>
<li>WordPress old slug redirects</li>
<li>Quick Post/Pages redirects</li>
</ul>
<h4>Search Regex compatible</h4>
<p>Redirection is compatible with <a href="https://searchregex.com" rel="nofollow ugc">Search Regex</a>, allowing you to bulk update your redirects.</p>
<h4>Wait, it’s free?</h4>
<p>Yes, it’s really free. There’s no premium version and no need to pay money to get access to features. This is a dedicated redirect management plugin.</p>
<h3>Support</h3>
<p>Please submit bugs, patches, and feature requests to:</p>
<p><a href="https://github.com/johngodley/redirection" rel="nofollow ugc">https://github.com/johngodley/redirection</a></p>
<p>Please submit translations to:</p>
<p><a href="https://translate.wordpress.org/projects/wp-plugins/redirection" rel="nofollow ugc">https://translate.wordpress.org/projects/wp-plugins/redirection</a></p>


Redirection

I've been using this plugin for many years and it has been a solid plugin. I use it on every site I manage or build.

I recently made one of my plugins compatible with Redirection plugin and to do this, I had to sift through John's code. I was surprised by how easy it was to navigate his codebase. Well written and neat code is that is maintained is a very good sign of reliability.

I highly recommend this plugin to anyone that wants to manage redirects and not worry about the next update wrecking your site.

Well done.

Very Solid Plugin: I've Been Using It For Years

As a professional WordPress web developer, this plugin is on my list of must-have's when I create a new website.

I also use it to create vanity URLs for marketing campaigns so I can use a short and simple URL on a printed flyer that redirects to a page with custom UTM parameters to easily track acquisition and that campaign's performance.

I've been using this plugin for a few years now and thought I'd finally write a review for it :)

Part of every new site I make


For some reason, the top two plugins were broken on my Wordpress multisite installation and this one worked like a charm on first attempt.



Also, it is less cluttered for those who want simple redirections.


Worked when top rated plugins failed


Redirection is one of the most reliable WordPress plugins ever created, with a seventeen year history of painstaking maintenance. We have used Redirection on hundreds of sites, many of them very high traffic. Occasional user error (misconfigured redirection rules, they are very powerful) but that's it.



Redirection is especially useful for any site migrations or major site restructuring. For those who wish to dig deeper, I've written a short history of redirections in WordPress and how well Redirection co-operates with WordPress's native automated slug and date change function. I'm not allowed to link to it unfortunately, hélas, so you'll just have to take my word for it.


Reliable, carefully maintained over decades


Reached out regarding a concern over version numbers, issue was addressed before I read their response.



An ideal WordPress plugin, this plugin extends the WP admin interface as expected, many familiar form elements, tables, and admin UI, etc. They're not trying to re-invent the WP admin and/or constantly sale a "premium version". 



Thank you.






An amazing plugin, made by a stellar team!

A good plugin

Manage 301 redirects, track 404 errors, and improve your site. No knowledge of Apache or Nginx required.

Faison

<p><a href="http://faisonz.com/" title="Faison Zutavern's Personal Blog" rel="nofollow ugc">Faison Zutavern</a>, <a href="https://profiles.wordpress.org/jvalcq" title="Jon's WordPress.org Profile" rel="nofollow ugc">Jon Valcq</a>, and <a href="https://profiles.wordpress.org/emmaee" title="Emma's WordPress.org profile" rel="nofollow ugc">Emma Edgar</a>, from <a href="http://www.orionweb.net/" title="Milwaukee Area Web Developers" rel="nofollow ugc">Orion Group LLC</a>, bring superior Brute Force Attack protection to WordPress with their new plugin, <em>Project Force Field</em>. By tracking failed login attempts and taking advantage of Apache’s mod_rewrite module, Project Force Field stops Brute Force Attacks from bogging down your sites and servers.</p>
<p><em>Special thanks to <a href="http://www.aykcreative.com/" title="Ayk Creative | Graphic Support for your Projects" rel="nofollow ugc">Chris Aykroid</a> for the plugin banner 😀</em></p>
<h4>Contributing</h4>
<p>If you would like to contribute or fork Project Force Field, we currently have a repo on Bitbucket. You can <a href="https://bitbucket.org/oriongroup/project-force-field/" rel="nofollow ugc">find it here</a></p>
<h4>Features!</h4>
<ul>
<li><strong>Sends a 403 error code to anyone visiting /wp-login.php</strong> – All brute force attacks we’ve seen target /wp-login.php. By responding with a 403 error, <strong>your WordPress files aren’t loaded, the Database isn’t queried</strong>, and the attacker doesn’t figure out your password.</li>
<li><strong>Changes the default login url</strong> – While a so-called hacker is being deflected by your new Force Field, you will log in with ease at /wp-admin/. When you do that, WordPress will redirect you to the new, proper login url.</li>
<li><strong>Automatically changes the login when a Brute Force Attack is detected</strong> – When too many login failures occur within a minute, Project Force Field shifts polarity! The new login you previously used now responds with a 403 error, and a large random number is now used as your login url! After some time, the login will return back to normal.</li>
<li><strong>Unlimited polarity shifts</strong> – If a Brute Force Attacker gets smart and writes a script to check for the new login url, Project Force Field will continue to detect the attack and change the login.</li>
<li><strong>Define the login yourself</strong> – By defining <code>OGFF_LOGIN</code> in your wp-config.php, you can set the login to be <em>almost</em> anything you want.</li>
<li><strong>Stops WordPress User Enumeration Exploit</strong> – Many brute force attacks use the WordPress User Enumeration exploit to easily figure out valid usernames. We stop that to protect your site, and respond with a 403 to save your server.</li>
</ul>
<h4>Future Features!</h4>
<ul>
<li><strong>Multisite Support</strong> – It’s not there yet, that’s pretty lame, so I’m going to fix that before anything else!</li>
<li><strong>Adjust the login failure threshold</strong> – Currently, Project Force Field assumes a brute force is underway when there have been 30 login failures within a minute. This might not be ideal for large websites, so we want to let you increase that amount to 300 if needed.</li>
<li><strong>Add optional email notification for brute force events</strong> – If you want to know when your website is under attack, we want to let you know. In a near future version, we will let you add email addresses to be notified of brute force attacks, and any other important related events that we add in the future.</li>
<li><strong>Add last resort .htaccess password lockdown</strong> – If a so-called hacker writes a script that continues to learn the new login url, Project Force Field won’t help much. In an upcoming version, we will check to see how many times the login url was changed, determine if the Brute Force Attack is smart, and lockdown the login with an .htaccess password.</li>
</ul>


Project Force Field

Save your WordPress sites and servers from certain death during brute force attacks with Project Force Field by Orion Group!

Redirection vs Project Force Field