Nicu Micle

unsproject

UNS Project offers secure private, passwordless, authentication for your WordPress site. The plugin also supports Secure Remote Password (SRP) Authentication. Protect passwords by not storing them on the server.
Digital Signatures have been around since 1976. They are still the most secure method to claim and verify ownership of Internet accounts, photos, videos, code, and any other digital asset. 45 years later, digital signing is rarely used on consumer-facing products and services. They are still too technical, too complicated, and too difficult for 99% of users.
UNS Digital Authentication is as easy as 1, 2, 3. 
1. Scan a QR code with the camera on your phone and click on the link 
2. Confirm you want to login or register 
3. Verify your identity using your phone’s built in biometric lock or passcode.
UNS is a human-centered computer security solution — requiring no discipline and no mental gymnastics – just a handy smartphone. 
– Designed for simplicity 
– Designed for security 
– Designed for privacy 
– Designed for humans
If users do not want to download the UNS Authenticator or don’t have a smartphone, UNS can be used with email verification to authenticate from any browser.
<h3>Plugin Requirements</h3>
<ol>
<li>HTTPS website</li>
<li>php <code>openssl</code> extension </li>
<li>php <code>curl</code> extension</li>
</ol>

UNS Project WordPress Authentication

UNS Project offers secure private, passwordless, authentication for your WordPress site. The plugin also supports Secure Remote Password (SRP) Authent …

wp-comblock

Comblock Login is a professional and secure frontend authentication system designed to provide a seamless user experience outside the WordPress admin area. Unlike standard login plugins, Comblock allows you to transform your site into a multi-level portal through dynamic Custom Dashboards assigned to specific user roles.
The standout feature of this plugin is the Global Logout (Logout from all devices): an advanced security mechanism that enables users to terminate all active sessions across all devices with a single click, ensuring total protection if credentials are compromised. Every aspect of the login process is fortified with Nonce verification (anti-CSRF) and rigorous data sanitization, utilizing native WordPress core functions for maximum reliability.
With Comblock Login, you can: 
* Create multiple private areas by assigning each dashboard to specific user roles (RBAC). 
* Manage the entire user journey through dynamic shortcodes (Login, Logout, User Info). 
* Protect data privacy by filtering which metadata to display via developer-friendly hooks. 
* Monitor site security through integrated logging of access errors and permission violations.
This plugin doesn’t just hide the backend; it creates a secure, tailored ecosystem for your members, ensuring a smooth transition between public content and private dashboards.
<h3>Features</h3>
<ol>
<li>Global Session Control: A high-end security feature allowing users to perform a simultaneous logout from all devices, instantly terminating every active session.</li>
<li>Multi-Dashboard Management: Create unlimited and dynamic restricted areas (based on Custom Post Types) by assigning granular permissions based on user roles.</li>
<li>Secure Frontend Login: A complete authentication system integrated directly into your site’s layout via shortcodes, removing the need for users to access <code>/wp-login.php</code>.</li>
<li>Smart Redirect & Access Control: Intelligent management of post-login redirects and automatic content protection, with immediate redirection for unauthorized users.</li>
<li>Bulletproof Security: Advanced protection featuring Nonce (CSRF) verification, input sanitization, and authentication through the secure <code>wp_signon()</code> native function.</li>
<li>Extensible User Info: A dedicated shortcode to display profile data, featuring developer hooks (PHP filters) to customize which meta fields are shown or hidden.</li>
<li>Security Error Logging: Integrated monitoring system that records login errors and permission breaches for total security oversight.</li>
</ol>
<h3>Usage</h3>
<ul>
<li>
Use the shortcode <code>[comblock_login]</code> to display the login form. You can insert this shortcode into any page or post. 
Simple example (only required attribute): 
<code>[comblock_login dashboard-post-id="8"]</code> 
Complete example (with all optional attributes): 
<code>[comblock_login id="subscriber-login" class="subscriber-form-login" dashboard-post-id="8" privacy-page-id="2"]</code> 
Where:
<ul>
<li><code>dashboard-post-id</code> is mandatory and represents the ID of a Dashboard post type created in the back office. </li>
<li><code>id</code>, <code>class</code>, and <code>privacy-page-id</code> are optional, where <code>privacy-page-id</code> refers to the privacy policy page ID.</li>
</ul>
</li>
<li>
Use the shortcode <code>[comblock_logout]</code> only within the <code>dashboard</code> post type to display the logout link. 
Simple example (without optional attributes): 
<code>[comblock_logout]</code> 
Complete example (with optional attributes): 
<code>[comblock_logout id="logout-link" class="btn-logout"]</code>
</li>
<li>
Use the shortcode <code>[comblock_disconnection]</code> within the <code>dashboard</code> post type to display the disconnection link. 
Simple example: 
<code>[comblock_disconnection]</code> 
Complete example: 
<code>[comblock_disconnection id="disconn-link" class="btn-disconnect"]</code>
</li>
<li>
Use the shortcode <code>[comblock_user_info]</code> within the dashboard post type to display user information. 
Complete example: 
<code>[comblock_user_info title="Profile Details" fields="display_name,user_email,billing_phone"]</code>
The <code>fields</code> attribute accepts comma-separated user meta keys. For security, you can control which fields are accessible using the following PHP filters:
<ul>
<li><code>comblock_login_user_ban_fields</code>: Add keys to this blacklist to prevent them from being displayed, even if requested in the shortcode.</li>
<li><code>comblock_login_user_info_allowed_fields</code>: Use this whitelist to explicitly permit custom meta keys (like WooCommerce or ACF fields).</li>
</ul>
Example: How to allow a custom field 
Add this to your <code>functions.php</code>: 
add_filter(‘comblock_login_user_info_allowed_fields’, function($allowed) { 
 $allowed[] = ‘billing_phone’; 
 return $allowed; 
});
These hooks enable developers to customize which user data can be displayed via the shortcode while maintaining control over security and privacy.
</li>
</ul>
<h3>Security</h3>
The plugin implements the following security mechanisms:
<ul>
<li>Nonce verification for all critical login and logout actions to protect against CSRF.</li>
<li>Sanitization of input from login forms to prevent injection.</li>
<li>Authentication via WordPress’ secure <code>wp_signon()</code> function.</li>
<li>Strict session cookie management with SSL support.</li>
<li>Granular control of access permissions based on user roles defined for each dashboard.</li>
<li>Complete destruction of user sessions upon logout from all devices.</li>
</ul>

Comblock Login

Secure frontend login/logout with user dashboards, session management, and role-based access control for WordPress sites.

UNS Project WordPress Authentication vs Comblock Login