aizatto

Super Secret makes your blog private. This means, to whoever is registered on the system. The biggest difference between Super Secret and other membership plugins is that the membership plugin redirects you to the WordPres login page, Super Secret does not. Super Secret will return a proper 404 HTTP Header, telling browsers that the website is not found. It will also display a “Not Found” generic dummy page.
This doesn’t mean your website is 100% hidden from everyone who attends it. Users can still see <code>wp-login.php</code>
When you publish a post, WordPress notifies other blogs linked to from your post. This could give away the presense of your blog! Make sure you disable all of these!
Inside “Settings > Discussion Settings > Default article settings”:
<ul>
<li>Disable “Attempt to notify any blogs linked to from the article.”</li>
<li>Disable “Allow link notifications from other blogs (pingbacks and trackbacks.)”“</li>
</ul>
Inside “Settings > Privacy Settings”:
<ul>
<li>Select “I would like to block search engines, but allow normal visitors”.</li>
</ul>
Other give aways that your blog exist is trying to access ‘wp-admin’ (without the blackslash at the end). If configured correctly, Apache will redirect you to ‘wp-admin/’. This is a clear sign that a blog exists at your domain.
This is not a full proof plugin. There is no such thing as truly secure. You can only deter people.
<h3>Why I Created It</h3>
<ol>
<li>Other plugins that blocked people from viewing the site redirected them to the login page.</li>
<li>I wanted to return a proper 404 error, and generic dummy page. This is to prevent anyone or computer form guessing the website exists.</li>
</ol>

Super Secret

Super Secret makes your blog private. This means, to whoever is registered on the system. The biggest difference between Super Secret and other member …

Kevin Vess

Easily hide your WordPress site from public viewing by requiring visitors to log in first. As simple as flipping a switch.
Make your website private until it’s ready to share publicly, or keep it private for members only.
Features
<ul>
<li>WordPress Multisite compatible.</li>
<li>Login redirects visitors back to the url they tried to visit.</li>
<li>Extensive Developer API (hooks & filters).</li>
<li>Customizable. Set a specific URL to always redirect to on login.</li>
<li>Filter exceptions for certain pages or posts.</li>
<li>Restrict REST API to authenticated users.</li>
<li>Translation Ready & WPML certified.</li>
</ul>
Bug Reports
Bug reports for <a href="https://github.com/kevinvess/wp-force-login" rel="nofollow ugc">Force Login are welcomed on GitHub</a>. Please note that GitHub is not a support forum.

Force Login

I can access PDF and image without login, I'm expected this plugin lock all url without login 

I can access PDF and image without login

¡Esto es exactamente lo que quiero! Solo quiero bloquear la vista pública antes de que el sitio esté listo. No necesita otras funciones. ¡Muchas gracias por hacerlo simple!

Plugin super simple pero muy funcional.

Merci pour ce plugin.
Il est simple, léger et très efficace.

Simple et efficace

perfect fit for my needs.
so rare to find lightweight plugins.
even needs no configuration.
goodby "Members" plugin >.<

so rare


So simple and so clever! As a plugin developer, a big part of my job is creating admin settings screens. So I spent a good few minutes trying to find the settings screen to fully enable this plugin. Then it dawned on me, there wasn't one. You just install, and the rest of the world is locked out. Genius! Fantastic work Kevin.Ben Roberts


Absolutely Perfect


This plugin is fantastic. We use it on all the sites we have in development to keep clients from peaking at their sites before they are ready.


Just what the doctor ordered

Force Login is a simple lightweight plugin that requires visitors to log in to interact with the website.

Super Secret vs Force Login