Knut Sparhell

PRO ISP

🕸️ By <a href="https://webfacing.eu/" rel="nofollow ugc">WebFacing™</a>. Read, send, show, manage, list, create, add, remove or delete email accounts, old messages, forwarders and autoresponders. 
One click read, send and manage all your emails without a login step. Update notification recipients. Backup and download your complete cPanel® account.
This plugin requires your site is hosted on a cPanel® equipped server.
It uses it’s UAPI through shell access by default, or via HTTP API. Using without <code>shell_exec</code> initially requires a temporary access token generated in the cPanel® native interface.
<h3>Translation ready. Ready translations are</h3>
<ul>
<li>Norwegian (bokmål)</li>
</ul>
<h3>Current features</h3>
<ul>
<li>NEW: Dashboard widget with three live graphic server memory usage and server load gauge charts (can eassily be minimized or hidden via Screen Options or programatically)</li>
<li>WP Block for frontend access user’s own Webmail</li>
<li>Bulk entry of forwarders and email accounts (as free trial only, very limited use)</li>
<li>Screen Options to select visible forms on New Email screen, saved for as user option (and per site for Multisite)</li>
<li>Shortcode <code>[wf_cpanel_email_webmail]</code> or as <code>[wf_cpanel_email_webmail]</code>My Email<code>[/wf_cpanel_email_webmail]</code> for frontend access user’s own Webmail</li>
<li>cPanel® API Tokens Management – needed in case <code>shell_exec</code> is not available or when accessing a remote server</li>
<li>Backup complete cPanel® hosting account to file, and download it</li>
<li>Restore account backup files by extracting it to a folder (experimental)</li>
<li>Semi automated migration to new email server, including setup of new accounts for users, with sending setup instructions, passwords and links to setup guides for most common email clients</li>
<li>Add 10 single Email Accounts per week (without Pro nag) — actually unlimited</li>
<li>Remove single/multiple Email Accounts</li>
<li>List mailboxes with number of messages for each box</li>
<li>Remove old messages from mailboxes (older than 52 weeks as default)</li>
<li>Shrink a mailbox (empty it)</li>
<li>Change storage quota for for email accounts</li>
<li>Add 20 forwarders per week (without Pro nag) — actually unlimited</li>
<li>Add/remove single/multiple Email Failure addresses or Blackhole addresses</li>
<li>Add/delete/edit email autoresponders (for, subject, body, from, start, stop, interval)</li>
<li>Send single cPanel® Email Account Instruction (Client Setup) to specfied address</li>
<li>Send multipe cPanel® Email Account Instructions (Client Setups) to yourself for distribution</li>
<li>Open your cPanel® Webmail app for selected account (single click/tap – no further login needed!)</li>
<li>Set/change Email Account passwords</li>
<li>Set Default Email Address (catch-all) as forwarder, failure or blackhole</li>
<li>View/change Notification/Contact Email Addresses</li>
<li>Access for any user to view and read their own emails, if given the <code>cpanel</code> capability (Use custom code or a Roles/Capabilities Manager plugin)</li>
<li>
Support for subdomain email addresses when the main domain is a subdomain (only)
</li>
<li>
In case the <code>shell_exec</code> function is disabled in your server PHP configuration, create a token in native cPanel® interface and add one of these lines to your <code>wp-config.php</code> file, <code>functions.php</code> in your child theme, in Must-use plugin or a custom regular plugin
<ul>
<li><code>const WF_CPANEL_API_TOKEN = 'my-temp-api-token';</code></li>
<li><code>define( 'WF_CPANEL_API_TOKEN', 'my-temp-api-token' );</code></li>
<li>See <a href="https://docs.cpanel.net/cpanel/security/manage-api-tokens-in-cpanel/" rel="nofollow ugc">Manage API Tokens in cPanel®</a></li>
<li>The <code>WF_CPANEL_API_TOKEN</code> constant may be removed when a new token is created and activated from the plugin admin page</li>
</ul>
</li>
<li>
Option to set the default visibility for users on New Email screen (users may still set their own preferences):
<ul>
<li><code>add_filter( 'wf-cpanel-email-new-email_user-option', static function( bool $default, string $option, int $user_id ) { 
if ( $option === 'wc-show-new-blackhole' /*or by $user_id*/ ) { 
$default = true/*false*/; 
} 
return $default; 
}, 10, 3 );</code></li>
</ul>
</li>
<li>
Option to allow other users than those with <code>manage_options</code> capability to manage email adresses, single- or multisite, one of the following:
<ul>
<li><code>add_filter( 'wf_cpanel_email_capability', static fn( string $cap ): string => $my_cpanel_email_cap );</code></li>
<li><code>add_filter( 'wf_cpanel_email_capability', static fn( string $cap ) => 'edit_published_pages' );</code></li>
</ul>
</li>
<li>
Option to allow other users than those with <code>manage_options</code> capability to see the dashboard widget, or remove it, one of the following:
<ul>
<li><code>add_filter( 'wf_cpanel_email_widget_capability', static fn( string $cap ): string => $my_cpanel_widget_cap );</code></li>
<li><code>add_filter( 'wf_cpanel_email_widget_capability', static fn( string $cap ) => 'edit_published_pages' );</code></li>
<li><code>add_filter( 'wf_cpanel_email_widget_capability', static fn( string $cap ) => 'do_not_allow' );</code></li>
</ul>
</li>
<li>
Option to alter the refresh interval in seconds for the dashboard widget, one of the following:
<ul>
<li><code>add_filter( 'wf_cpanel_email_widget_interval', static fn( int $interval ): int => $my_cpanel_widget_interval );</code></li>
<li><code>add_filter( 'wf_cpanel_email_widget_interval', static fn( int $interval ) => 45 );</code></li>
</ul>
</li>
<li>
Option to limit email addresses to current site domain, even for single site admins, one of the following
<ul>
<li><code>const WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY = true;</code></li>
<li><code>define( 'WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY', true );</code></li>
<li><code>add_filter( 'wf_cpanel_email_site_domain_only', '__return_true' );</code></li>
<li><code>add_filter( 'wf_cpanel_email_site_domain_only', fn() => true );</code></li>
</ul>
</li>
<li>
Multisite Network: Option not to limit email addresses to current subsite domain, for site admins that are not network (super) admins, one of the following:
<ul>
<li><code>const WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY = false;</code></li>
<li><code>define( 'WF_CPANEL_EMAIL_SITE_DOMAIN_ONLY', false );</code></li>
<li><code>add_filter( 'wf_cpanel_email_site_domain_only', '__return_false' );</code></li>
<li><code>add_filter( 'wf_cpanel_email_site_domain_only', fn() => false );</code></li>
</ul>
</li>
<li>
Many optional parameters and API filters for the shortcode output, see <code>includes/ShortCode.php</code> until further tested and documented
</li>
<li>
If you want to access another user on the server, use one of the following
<ul>
<li><code>const WF_CPANEL_USER = 'my-username';</code></li>
<li><code>define( 'WF_CPANEL_USER', 'my-username' );</code></li>
</ul>
</li>
<li>
If you want to access a remote server, use one of the following
<ul>
<li><code>const WF_CPANEL_HOST = 'my-host';</code></li>
<li><code>define( 'WF_CPANEL_HOST', 'my-host' );</code></li>
<li>using <code>WF_CPANEL_HOST</code>requires <code>WF_CPANEL_USER</code> to also be defined</li>
</ul>
</li>
<li>
Automaticallly create new accounts when a new user is registered? 
 add_action( ‘user_register’, static function( int $user_id, array $userdata ): void { 
 // What to do just after the registraton here, like this (adds an email address that forwards to all users, a mailing list): 
 if ( method_exists( ‘WebFacing\cPanel\UAPI’, ‘add_forwarder’ ) ) { 
 \WebFacing\cPanel\UAPI::add_forwarder( ‘all-users@yoursite.tld, ‘$userdata[‘user_email’] ); 
 } 
 }, 2 );
</li>
<li>
Site Health
<ul>
<li>Tests and information</li>
<li>Check auto detecting and current email routing in an extra Site Health tab (to any email address sent from your server)</li>
</ul>
</li>
</ul>
<h3>Possible future features</h3>
<ul>
<li>Scheduled automatic removal of old messages in/from mailboxes</li>
<li>Import migration list for create account, send instructions and password to current address</li>
<li>Delete selected email messages from mailboxes (by selectd message age etc.)</li>
<li>Suspend/unsuspend incoming/outgoing for email accounts (if requested)</li>
<li>Suspend/unsuspend login to email accounts (if requested)</li>
<li>Domain level email forwarding</li>
<li>Domain Managament</li>
<li>DNS Zone editing</li>
</ul>
<h3>Limitations, security, privacy – be warned</h3>
<ul>
<li>Maximum New Forwarders = 20, Maximum New Accounts = 5, weekly reset</li>
<li>Trial: Maximum New Forwarders as bulk entry = 4, Maximum New Accounts as bulk entry = 2</li>
<li>Now works without shell access! Will not work at all if <code>shell_exec</code> is disabled in <code>php.ini</code></li>
<li>Works only for admins, or other users with a custom <code>cpanel</code> capability and email on site domain (so far)</li>
<li>Any admin (if multisite, only network admins), or user with the filtered capability, on a site, can fully access any account on the cPanel® server instance</li>
<li>No AYS warnings for delete actions</li>
<li>If several sites/admins share the same cPanel® account, without being part of a WP Multisite network, no bulletproof separation, because of the way the cPanel® UAPI CLI works, with or without this plugin</li>
</ul>
<h3>Pro Addon</h3>
<ul>
<li>Pro Addon plugin was released May 1, 2023 at https://webfacing.eu/plugin/wf-cpanel-email-accounts-pro/ and will unlock in bulk entry new forwarders and new accounts to the numbers in the purchesed license</li>
</ul>

WebFacing™ – Email Accounts management for cPanel®

This plugin has been very useful to us for managing emails on a WordPress multisite installation. The developer is super responsive to bug reports as well!

Very useful plugin, and great support

WebFacing™ - Email Accounts management for cPanel®

Culture Dev

On many shared cPanel hosts – Bluehost, HostGator, Namecheap, A2 Hosting, GoDaddy, and European providers such as IONOS, OVHcloud or Krystal – Apache does not natively restore the client IP from Cloudflare headers. This causes WordPress, WooCommerce, security plugins and access logs to record Cloudflare’s edge IP instead of the real visitor IP.
Real IP Restore for Cloudflare fixes this transparently:
<ol>
<li>On every request, checks whether <code>REMOTE_ADDR</code> belongs to a Cloudflare IP range.</li>
<li>If yes, replaces <code>REMOTE_ADDR</code> with the value from <code>CF-Connecting-IP</code> (or <code>X-Forwarded-For</code> as fallback).</li>
<li>IP ranges are fetched once per day from Cloudflare’s official endpoints and cached as a WordPress transient.</li>
</ol>
Features:
<ul>
<li>Zero configuration – works out of the box.</li>
<li>IPv4 and IPv6 support.</li>
<li>Daily auto-refresh of Cloudflare IP ranges.</li>
<li>Manual refresh from Settings → CF Real IP.</li>
<li>Falls back to hardcoded ranges if Cloudflare endpoints are unreachable.</li>
<li>Lightweight – no database tables, no options, no JavaScript.</li>
</ul>

Real IP Restore for Cloudflare

Restores real visitor IP behind Cloudflare proxy on cPanel hosts that lack native mod_remoteip support.

WebFacing™ – Email Accounts management for cPanel® vs Real IP Restore for Cloudflare