robertoiacono

<p><strong>RIACO Content Protector</strong> allows you to protect <em>any part</em> of your WordPress content using a shortcode.<br />
Unlike the built-in post password protection, this plugin protects only what you wrap, <em>not the whole post</em>.</p>
<p>Perfect for:</p>
<ul>
<li>Protecting premium blocks of content  </li>
<li>Protecting guides, downloads, links, or sensitive sections   </li>
<li>Paywall-style snippets</li>
</ul>
<h3>Features</h3>
<ul>
<li>Protect <strong>only specific content</strong> inside posts/pages  </li>
<li>Uses a minimal shortcode:<br />
  [riaco_content_protector] Hidden text here [/riaco_content_protector]</li>
<li><strong>Global password</strong> stored in plain text, like WordPress page passwords.</li>
<li>AJAX-based form — no page reload  </li>
<li>Unlocks <strong>all protected sections</strong> on the site after correct password  </li>
<li>Optional cookie persistence (remember unlocked content for a configurable number of days)   </li>
<li>Secure implementation using nonces, hashed tokens, and transients   </li>
</ul>
<p><strong>Important:</strong></p>
<ul>
<li>The global password is stored in plain text, just like WordPress page passwords. It can be read by user with ‘manage_options’ ability.</li>
<li>If the global password or “Remember Unlocked” duration is changed in settings, all existing unlock cookies are invalidated. Users will need to re-enter the new password to access protected content.</li>
</ul>
<h3>How It Works</h3>
<p>Wrap content you want to protect:</p>
<pre><code>[riaco_content_protector]
This text will be hidden until the visitor enters the password.
[/riaco_content_protector]
</code></pre>
<p>Set the global password under:</p>
<p><strong>Settings > Content Protector</strong></p>
<p>Visitors will see a modern, styled form.<br />
After entering the correct password:</p>
<ul>
<li>The content unlocks immediately  </li>
<li>All other protected areas unlock automatically  </li>
<li>An optional cookie can keep everything unlocked for a chosen number of days  </li>
</ul>
<h3>Security</h3>
<ul>
<li>Nonces on every request  </li>
<li>Secure HMAC token for cookie authentication  </li>
<li>Sanitized shortcode attributes  </li>
<li>Escaped output  </li>
<li>No sensitive data stored in cookies  </li>
<li>Global password stored in plain text, like WordPress page passwords. </li>
</ul>
<h3>Cookie</h3>
<p>We use this cookie to understand if user unlocked the content: <code>riaco_cp_unlocked_global</code>.</p>
<h3>Style</h3>
<p>You can style the content protector box.</p>
<p>It has this class: <code>.riaco-cp--container</code>, so you can add in your <code>style.css</code>:</p>
<pre><code>.riaco-cp--container {
    background: #f8f9fa;
    padding: 20px;
    border: 1px solid #ddd;
    border-radius: 6px;
}
</code></pre>
<p>You can replace button classes using:</p>
<pre><code>add_filter( 'riaco_cp_button_classes', function( $classes ) {
    return 'button my-custom-button-class';
});
</code></pre>
<p>Or you can remove button classes:</p>
<pre><code>add_filter( 'riaco_cp_button_classes', function( $classes ) {
    // Remove wp-element-button
    return str_replace( 'wp-element-button', '', $classes );
});
</code></pre>
<h3>License</h3>
<p>This plugin is licensed under GPLv2 or later.</p>


RIACO Content Protector

Protect any portion of your WordPress content using a simple shortcode. Includes global password, AJAX unlock, and site-wide instant access.

ClevelandWebDeveloper

<p>Choose a single password to protect your entire wordpress site. Only visitors who know the password will be able to access your wordpress site. This is a great tool for someone setting up a development version of a wordpress site or anyone else looking to hide their site from the public, search engines, etc…Set your site-wide password by going to <strong>Settings > Hide My Site > Set Your Password</strong>. If you want to disable password protection uncheck the box at <strong>Settings > Hide My Site > Enable Password Protection</strong>.</p>
<h4>Duration</h4>
<p>You can choose how many days you want the user to stay logged in by going to <strong>Settings > Hide My Site > Duration</strong>.</p>
<h3>New in Version 1.6</h3>
<ul>
<li>You can choose to automatically grant access to specific ip addresses</li>
</ul>
<h3>New in Version 1.5</h3>
<ul>
<li>You can set and customize the title tag for the login page</li>
<li>You can choose to discourage search engines from indexing your login page via Settings > Reading > Search Engine Visibility</li>
</ul>
<h3>New in Version 1.4</h3>
<h4>For Everyone</h4>
<ul>
<li><strong>Brute force protection </strong> Blocks access to users after repeated failed login attempts. This protects you from hackers trying to guess your password using “Brute Force” methods. Protection can be toggled via Settings > Hide My Site > Brute Force Protection</li>
<li>You can choose to automatically grant access to admin users</li>
<li>Preview login page option – See your login page as a logged-out visitor would see it. Helpful if you want to see what your login page looks like even if you are already logged in</li>
</ul>
<h3>Version 1.3</h3>
<h4>For Everyone</h4>
<ul>
<li><strong>‘Password request for every page’ bug fixed.</strong>This will resolve the issue for the vast majority of the subset of users who were experiencing the bug that site visitors were receiving password requests on every page. Also, users can now log in from any page – you no longer have to log in from specifically the homepage in order to stay logged in.</li>
<li>Conflict with polylang plugin fixed</li>
<li>Password characters now hidden when entered on front end</li>
<li>Select a notification message to appear at the top of your login page</li>
</ul>
<h4>For Premium Users</h4>
<ul>
<li>Set background image size, position, repeat, and color via plugin settings page</li>
<li>Customize notification message text which appears at the top of your login page</li>
</ul>
<h3>Older Versions</h3>
<ul>
<li>See Changelog</li>
</ul>
<blockquote>
<p>Note, this plugin does not currently work with WP Engine hosting because they automatically cache your pages for you. If you use WP Engine or another host that auto-caches, try contacting them directly and ask them if they can deactivate the auto page caching on your site. If you are using a caching plugin and you notice that it conflicts with Hide My Site, try deactivating the plugin and see if that resolves it. Note that deactivating a caching plugin does not always purge the cache. Before you deactivate the caching plugin, first go to the plugin admin page and turn off caching from there.</p>
</blockquote>


Hide My Site

Choose a single password to protect your entire wordpress site from the public and search engines

RIACO Content Protector vs Hide My Site