Andrew Norcross

Jason Coleman

<p>WP Bouncer restricts the number of simultaneous logins for the same WordPress user account. The plugin’s goal is to deter people from sharing their login credentials for your site, which is especially important for a paid membership, premium content, or eLearning site.</p>
<h3>How WP Bouncer Protects Shared User Logins</h3>
<ul>
<li>The plugin stores a random <code>FAKESESSID</code> for each user when they log in.</li>
<li>If a user is logged in, on each page load (init hook), WP Bouncer checks if the <code>FAKESESSID</code> stored in the user’s cookies is the same as the last login stored in a transient (<code>fakesessid_user_login</code>).</li>
<li>If the two values do no match, WP Bouncer logs the user out and redirects them to the WordPress login page or a custom page using the wp_bouncer_redirect_url filter.</li>
</ul>
<p>If the WP_BOUNCER_HEARTBEAT_CHECK is defined to true, JavaScript will be loaded to bounce users when a new user logs in with the same login. This is useful for sites with page caching.</p>
<p>Admininstrator accounts or any users with the “manage_options” capability are excluded from bounces.</p>
<h3>Or, Allow a Specific Number of Active Sessions</h3>
<p>By default, WP Bouncer only allows one session per user.</p>
<p>You can use this plugin to offer bulk memberships to corporate, education, or other group-type customers via a shared login.</p>
<p>Use the <code>wp_bouncer_number_simultaneous_logins</code> filter to allow a defined number of active “sessions”.</p>
<p><a href="https://www.paidmembershipspro.com/limit-user-active-sessions/" rel="nofollow ugc">View the Recipe</a></p>
<h3>Example Use Cases for WP Bouncer</h3>
<ul>
<li>User A logs in as “user”. Their <code>FAKESESSID</code>, say “SESSION_A” is stored in a WordPress option.</li>
<li>User B logs in as “user”. Their <code>FAKESESSID</code>, say “SESSION_B” is overwrites the stored WordPress option.</li>
<li>User A tries to load a page on your site, WP Bouncer catches them and logs them out, redirecting them to the warning message.</li>
<li>User B can browse around the site as normal… unless…</li>
<li>User A logs in again as “user”. Their <code>FAKESESSID</code>, “SESSION_A_v2” is stored in the WordPress option.</li>
<li>Now user B would be logged out if they load another page.</li>
</ul>
<h3>Hooks and Filters</h3>
<ul>
<li><code>wp_bouncer_ignore_admins</code> filter: if returning false even admins will be bounced.</li>
<li><code>wp_bouncer_redirect_url</code> filter: can be used to change the URL redirected to after being bounced.</li>
<li><code>wp_bouncer_number_simultaneous_logins</code> filter: can be set to limit logins to a number other than 1. 0 means unlimited logins.</li>
<li><code>wp_bouncer_login_flag</code>: runs right before bouncing (can be used to potentially stop the bouncing).</li>
<li><code>wp_bouncer_session_ids</code> hook: used to filter session ids when saving them. Passes $session_ids, $old_session_ids (before any were removed/bounced), and the current user’s ID as parameters.</li>
<li><code>wp_bouncer_session_length</code> hook: used to filter how long the session ids transients are set. This way, you can time the transients to expire at a specific time of day. Note that the transient is saved on every page load, so if you set it to 5 minutes, it’s going to push it out 5 minutes on every page load. You should try to set it to (the number of seconds until midnight) or something like that.</li>
</ul>
<h3>Support the Plugin Authors</h3>
<p>If you like this plugin, please check out Jason’s work with <a href="https://www.strangerstudios.com" rel="nofollow ugc">Stranger Studios</a> and <a href="https://www.paidmembershipspro.com" rel="nofollow ugc">Paid Memberships Pro</a> and <a href="http://andrewnorcross.com/" rel="nofollow ugc">Andrew’s work at his personal site</a>.</p>


WP Bouncer – Limit Simultaneous Logins

Deter members from sharing login credentials: restrict simultaneous logins for the same user.

Freemius

Jory Hogeveen

DEV Institute

Joachim Jensen

<p><strong>Restrict User Access is a fast and simple Membership Plugin for WordPress. Restrict your content in minutes, NOT hours.</strong></p>
<p>Quickly set up a paid membership site where your users can get different levels such as Platinum, Gold, or Free. Then, grant those levels when a user purchases a product in WooCommerce.</p>
<h3>👥 Unlimited Access Levels</h3>
<p>Users can have multiple levels, and you control how long memberships should last. When unauthorized users try to access restricted content, you can redirect them to another URL or display a teaser.</p>
<h3>⚡ Level Membership Automations</h3>
<p>Automatically add levels to your users based on something they do (Triggers) or something they are (Traits):</p>
<ul>
<li>User Registration</li>
<li>User Roles</li>
<li>Logged-in or Guests</li>
<li>WooCommerce Purchases</li>
<li>Easy Digital Downloads Purchases</li>
<li>BuddyPress Member Types</li>
<li>GiveWP Donations</li>
</ul>
<h3>🔒 Contextual Content Protection</h3>
<p>Prevent unauthorized users from visiting your posts, pages, or categories. You can even combine the conditions: protect all posts tagged “Premium” written by a select author.</p>
<p>The following Access Conditions are available out of the box:</p>
<ul>
<li>Posts, Pages & Custom Post Types</li>
<li>Content with Tags, Categories, or Custom Taxonomies</li>
<li>Content written by select Authors</li>
<li>Page Templates</li>
<li>Blog Page & Post Type Archives</li>
<li>Author Archives</li>
<li>Taxonomy Archives</li>
<li>Front Page, Search Results, 404 Not Found Page</li>
<li>bbPress Profiles, Forums & Topics</li>
<li>BuddyPress Profile Sections</li>
<li>Languages (Polylang, qTranslate X, TranslatePress, Transposh, Weglot, WPML)</li>
<li>Pods Pages</li>
</ul>
<p>Note that Access Conditions do not apply to content displayed in lists.</p>
<h3>✅ Grant & Deny Capabilities</h3>
<p>The easy-to-use WordPress User Manager gives you full control over the capabilities the members should or shouldn’t have. Access Level Capabilities will override the permissions set by roles or other plugins.</p>
<h3>👁️ Hide Admin Bar & Nav Menu Visibility</h3>
<p>Disable the admin bar for select levels and control what menu items members can see. You can even hide any widget area created with <a href="https://dev.institute/wordpress-sidebars/?utm_source=readme&utm_medium=referral&utm_content=section&utm_campaign=rua" rel="nofollow ugc">Content Aware Sidebars</a></p>
<h3>🤖 Restrict Content from Other Plugins</h3>
<p>Restrict User Access autodetects Custom Post Types and Taxonomies created by any plugin or theme. Built-in support for some of the most popular WordPress plugins means that you e.g. can restrict access to bbPress forums or multilingual content.</p>
<ul>
<li>bbPress</li>
<li>BuddyPress</li>
<li>Easy Digital Downloads</li>
<li>Pods</li>
<li>Polylang</li>
<li>TranslatePress</li>
<li>WooCommerce</li>
<li>Weglot</li>
<li>WPML</li>
<li>and more …</li>
</ul>
<h3>🛡️ WordPress Security Enhancements</h3>
<ul>
<li><strong>WP REST API Content Protection</strong><br />
Enforces PoLA to minimize attack surfaces and stop threat actors from harvesting your data</li>
<li><strong>How to display content in lists</strong><br />
Display excerpts only or hide content when post types are displayed in blog, archives, search results, lists, etc.</li>
</ul>
<h3>📑 Restrict Content with Shortcodes</h3>
<p>Fine-tune content visibility in your posts or pages by adding simple shortcodes:</p>
<pre><code>[restrict level="platinum"]
This content can only be seen by users with Platinum level or above.
[/restrict]

[restrict level="!platinum"]
This content can only be seen by users without Platinum level or above.
[/restrict]

[restrict role="editor,contributor" page="1"]
This content can only be seen by editors and contributors.
Other users will see content from page with ID 1.
[/restrict]

[login-form]
</code></pre>
<h3>👋 Developer-friendly API</h3>
<p>Restrict User Access makes it super easy for developers to programmatically customize WordPress access control by adding a few lines of code to theme templates.</p>
<h4>Example – Add level to current user</h4>
<pre><code>rua_get_user()->add_level($level_id);
</code></pre>
<h4>Example – Check if current user has an active level membership</h4>
<pre><code>if(rua_get_user()->has_level($level_id)) {
    //show restricted content
} else {
    //show content if unauthorized
}
</code></pre>
<p><a href="https://dev.institute/docs/restrict-user-access/developer-api/?utm_source=readme&utm_medium=referral&utm_content=section&utm_campaign=rua" rel="nofollow ugc">View full RUA PHP API documentation here.</a></p>
<h3>🎛️ Premium Add-ons for Restrict User Access</h3>
<p>Complete your WordPress membership site with these powerful extensions</p>
<ul>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=acf&utm_campaign=rua" rel="nofollow ugc">ACF Restriction</a></strong><br />
Restrict content that contain data from Advanced Custom Fields plugin</li>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=date&utm_campaign=rua" rel="nofollow ugc">Date Restriction</a></strong><br />
Restrict content based on the time it was published</li>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=metabox&utm_campaign=rua" rel="nofollow ugc">Meta Box Restriction</a></strong><br />
Restrict content that contain data from Meta Box plugin</li>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=timelock&utm_campaign=rua" rel="nofollow ugc">Timelock</a></strong><br />
Determine when to enable or disable select Access Conditions</li>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=url&utm_campaign=rua" rel="nofollow ugc">URL Restriction</a></strong><br />
Restrict content based on the WordPress URL, with wildcard support</li>
<li><strong><a href="https://dev.institute/products/category/restrict-user-access/?utm_source=readme&utm_medium=referral&utm_content=visibility&utm_campaign=rua" rel="nofollow ugc">Visibility Control</a></strong><br />
Hide content from blog, search results, archives, custom lists, WP REST API, and more</li>
</ul>


Restrict User Access – Ultimate Membership & Content Protection

Create Access Levels and restrict any post, page, category, etc. Supports bbPress, BuddyPress, WooCommerce, WPML, and more.

WP Bouncer – Limit Simultaneous Logins vs Restrict User Access – Ultimate Membership & Content Protection