Marcus Downing

Dani Llewellyn

Whenever a site is under development, or its content should remain private, you want to prevent to general public 
from reading it – whether deliberately or by accident.
A comman way to do this is with <a href="http://httpd.apache.org/docs/2.4/howto/auth.html" rel="nofollow ugc">HTTP authorisation</a>, 
but this has some problems:
<ul>
<li>Each user of your site has two different sets of username and password, one for the authorisation and one for 
WordPress login. It’s not uncommon for some users to find this confusing.</li>
<li>To set up authorisation you need access to your web server’s configuration (at least using the <code>.htaccess</code> file), 
which may not be available depending on your hosting supplier. 
You also need to learn how to configure the authorisation correctly, and risk breaking the site if you get it wrong.</li>
<li>When the time comes to remove the authorisation, you need to edit the configuration again.</li>
<li>In certain circumstances, combining authorisation with WordPress login can get a visitor into a circular redirect 
loop, where the result of logging in is to redirect to the login page.</li>
</ul>
Site PIN solves these problems by replacing authorisation with a simple PIN. This has the following advantages:
<ul>
<li>Everybody knows what a PIN is, and it’s clearly not the same as a password.</li>
<li>Logging into WordPress bypasses the PIN, so you can’t lock yourself out</li>
<li>It’s just a WordPress plugin, so no server configuration is necessary.</li>
<li>You can change or remove the PIN from WordPress admin.</li>
</ul>

Site PIN

Prevent careless visitors by locking your site down with a PIN

David Gewirtz

adiant

Allows the Administrator and/or the User to control the placement of a check mark in the Remember Me checkbox on the standard WordPress login form.
Without a check mark in the Remember Me checkbox, your users will have to login every time they close their browser. With Remember Me selected, they won’t have to login again for two weeks.
The first of a new series of <a href="https://installactivatego.com/" title="InstallActivateGo.com" rel="nofollow ugc">Install/Activate/Go plugins</a> that require no setup or settings changes to work for 99% of Use Cases.
Settings allow:
<ul>
<li>The Administrator to control whether Remember Me is the default for all logins, logins from Admin panels or logins from public web pages controlled by My Private Site or equivalent plugin</li>
<li>The Administrator to control if the User’s Remember Me choice is remembered and, if so, for how long</li>
<li>Disabling of the plugin’s control of the Remember Me checkbox</li>
</ul>
Defaults:
<ul>
<li>Remember Me is the default for all logins</li>
<li>The User’s Remember Me choice will be remembered for one year</li>
</ul>
There are other plugins that make Remember Me the default, but I wrote this plugin in October 2013 because I wanted a solution that did not require JavaScript, which was the solution used by every other plugin that I could find. This plugin uses a documented standard WordPress Action (“hook”) and a Post variable used by WordPress just for this purpose, i.e. – straight PHP with no JavaScript.
Deciding whether this plugin is for you:
<ul>
<li>WordPress always leaves the Remember Me checkbox empty, even if you selected it the last time you logged on;</li>
<li>Without Remember Me checked, logoff occurs automatically when the browser is closed or two days have passed;</li>
<li>Without Remember Me checked, some browsers will force a login when opening a new browser window;</li>
<li>With Remember Me checked, logoff occurs automatically in two weeks;</li>
<li>With Remember Me checked, the user remains logged in even if the browser is closed, the user’s computer is rebooted or the web site hosting server is rebooted;</li>
<li>Web sites that can only be viewed by registered users (e.g. – <a href="https://wordpress.org/plugins/jonradio-private-site/" title="My Private Site" rel="ugc">My Private Site plugin</a>) are more likely to want Remember Me pre-selected for each user at login, as web site viewing will be more frequently repeated than WordPress Administration;</li>
<li>For public or shared computers, the WordPress behaviour of leaving the Remember Me checkbox empty is a slight Security improvement, but is easily defeated by a user selecting Remember Me during login, which still leaves subsequent users logged on.</li>
</ul>

InstallActivateGo Remember Me

Control whether Remember Me is selected on the WordPress Login Form, without using any JavaScript.

Site PIN vs InstallActivateGo Remember Me