Andrew Norcross

Jason Coleman

<p>WP Bouncer restricts the number of simultaneous logins for the same WordPress user account. The plugin’s goal is to deter people from sharing their login credentials for your site, which is especially important for a paid membership, premium content, or eLearning site.</p>
<h3>How WP Bouncer Protects Shared User Logins</h3>
<ul>
<li>The plugin stores a random <code>FAKESESSID</code> for each user when they log in.</li>
<li>If a user is logged in, on each page load (init hook), WP Bouncer checks if the <code>FAKESESSID</code> stored in the user’s cookies is the same as the last login stored in a transient (<code>fakesessid_user_login</code>).</li>
<li>If the two values do no match, WP Bouncer logs the user out and redirects them to the WordPress login page or a custom page using the wp_bouncer_redirect_url filter.</li>
</ul>
<p>If the WP_BOUNCER_HEARTBEAT_CHECK is defined to true, JavaScript will be loaded to bounce users when a new user logs in with the same login. This is useful for sites with page caching.</p>
<p>Admininstrator accounts or any users with the “manage_options” capability are excluded from bounces.</p>
<h3>Or, Allow a Specific Number of Active Sessions</h3>
<p>By default, WP Bouncer only allows one session per user.</p>
<p>You can use this plugin to offer bulk memberships to corporate, education, or other group-type customers via a shared login.</p>
<p>Use the <code>wp_bouncer_number_simultaneous_logins</code> filter to allow a defined number of active “sessions”.</p>
<p><a href="https://www.paidmembershipspro.com/limit-user-active-sessions/" rel="nofollow ugc">View the Recipe</a></p>
<h3>Example Use Cases for WP Bouncer</h3>
<ul>
<li>User A logs in as “user”. Their <code>FAKESESSID</code>, say “SESSION_A” is stored in a WordPress option.</li>
<li>User B logs in as “user”. Their <code>FAKESESSID</code>, say “SESSION_B” is overwrites the stored WordPress option.</li>
<li>User A tries to load a page on your site, WP Bouncer catches them and logs them out, redirecting them to the warning message.</li>
<li>User B can browse around the site as normal… unless…</li>
<li>User A logs in again as “user”. Their <code>FAKESESSID</code>, “SESSION_A_v2” is stored in the WordPress option.</li>
<li>Now user B would be logged out if they load another page.</li>
</ul>
<h3>Hooks and Filters</h3>
<ul>
<li><code>wp_bouncer_ignore_admins</code> filter: if returning false even admins will be bounced.</li>
<li><code>wp_bouncer_redirect_url</code> filter: can be used to change the URL redirected to after being bounced.</li>
<li><code>wp_bouncer_number_simultaneous_logins</code> filter: can be set to limit logins to a number other than 1. 0 means unlimited logins.</li>
<li><code>wp_bouncer_login_flag</code>: runs right before bouncing (can be used to potentially stop the bouncing).</li>
<li><code>wp_bouncer_session_ids</code> hook: used to filter session ids when saving them. Passes $session_ids, $old_session_ids (before any were removed/bounced), and the current user’s ID as parameters.</li>
<li><code>wp_bouncer_session_length</code> hook: used to filter how long the session ids transients are set. This way, you can time the transients to expire at a specific time of day. Note that the transient is saved on every page load, so if you set it to 5 minutes, it’s going to push it out 5 minutes on every page load. You should try to set it to (the number of seconds until midnight) or something like that.</li>
</ul>
<h3>Support the Plugin Authors</h3>
<p>If you like this plugin, please check out Jason’s work with <a href="https://www.strangerstudios.com" rel="nofollow ugc">Stranger Studios</a> and <a href="https://www.paidmembershipspro.com" rel="nofollow ugc">Paid Memberships Pro</a> and <a href="http://andrewnorcross.com/" rel="nofollow ugc">Andrew’s work at his personal site</a>.</p>


WP Bouncer – Limit Simultaneous Logins

Deter members from sharing login credentials: restrict simultaneous logins for the same user.

Ben Marshall

<p>Protect your WordPress website seamlessly with Zero Spam for WordPress! Eliminate spam and malicious attacks that can harm your online presence. Our plugin integrates effortlessly with <a href="https://www.zerospam.org" rel="nofollow ugc">Zero Spam</a>, <a href="https://www.stopforumspam.com/" rel="nofollow ugc">Stop Forum Spam</a>, and <a href="https://www.projecthoneypot.org/" rel="nofollow ugc">Project Honeypot</a> to offer a strong defense system.</p>
<p>Rest easy knowing that we utilize multiple detection methods to swiftly identify and halt potential threats. Whether it’s pesky spam, devious trolls, or cunning hackers, Zero Spam is here to protect your website.</p>
<h4>Worry-free, Powerful Protection at Your Fingertips</h4>
<ul>
<li>No captchas or moderation queues — no longer a admin’s problem.</li>
<li>Our system dynamically blocks threats, keeping your site safe.</li>
<li>Integration with global IP reputation providers for enhanced security.</li>
<li>Block IPs temporarily or permanently, keep unwanted visitors out.</li>
<li>Geolocation tracks origins of threats, providing valuable insights.</li>
<li>Ability to block countries, regions, zip/postal codes & cities.</li>
<li>Utilize <a href="https://github.com/splorp/wordpress-comment-blacklist" rel="nofollow ugc">splorp’s Comment Blacklist</a> to strengthen your disallowed list.</li>
<li>Block disposable & malicious email effortlessly with <a href="https://github.com/disposable" rel="nofollow ugc">disposable</a>.</li>
<li>Multiple techniques, including the renowned solution by <a href="https://davidwalsh.name/wordpress-comment-spam" rel="nofollow ugc">David Walsh</a>.</li>
</ul>
<h4>Seamlessly integrates with popular plugins including:</h4>
<ul>
<li><a href="https://wordpress.org/plugins/woocommerce/" rel="ugc">WooCommerce</a> — Secure customer registrations.</li>
<li><a href="https://givewp.com/ref/1118/" rel="nofollow ugc">GiveWP</a> — Prevents attempts to test stolen credit cards.</li>
<li><a href="https://wordpress.org/plugins/wp-user-avatar/" rel="ugc">ProfilePress</a> — Keeps registrations safe & secure.</li>
<li><a href="https://wordpress.org/plugins/mailchimp-for-wp/" rel="ugc">Mailchimp for WordPress</a> — Protects sign-ups from abuse.</li>
<li><a href="https://www.gravityforms.com/" rel="nofollow ugc">Gravity Forms</a>, <a href="https://wordpress.org/plugins/contact-form-7/" rel="ugc">Contact Form 7</a>, <a href="https://wordpress.org/plugins/wpforms-lite/" rel="ugc">WPForms</a>, <a href="https://wordpress.org/plugins/formidable/" rel="ugc">Formidable Form Builder</a>, <a href="https://wordpress.org/plugins/fluentform/" rel="ugc">Fluent Forms</a>, <a href="https://wordpress.org/plugins/wpdiscuz/" rel="ugc">wpDiscuz</a> — Versatile form protection.</li>
</ul>
<p>With Zero Spam for WordPress, you not only get exceptional protection but also a reliable support that ensures your peace of mind.</p>
<h4>Enhance Detection with Optional 3rd-Party Integrations</h4>
<p>Zero Spam for WordPress can integrate optional services for enhanced spam detection. Before using these, we recommend reviewing their terms and privacy policies.</p>
<ul>
<li><strong><a href="https://www.zerospam.org/" rel="nofollow ugc">Zero Spam</a></strong> – Utilize our real-time IP reputation analysis. Take a look at our <a href="https://www.zerospam.org/privacy/" rel="nofollow ugc">Privacy Policy</a> and <a href="https://www.zerospam.org/terms/" rel="nofollow ugc">Terms of Use</a> for more details.</li>
<li><strong><a href="https://ipbase.com/" rel="nofollow ugc">ipbase.com</a></strong> – Access detailed geolocation information of attackers. Familiarize yourself with their <a href="https://ipbase.com/privacy-policy/" rel="nofollow ugc">Privacy Policy</a> & <a href="https://www.iubenda.com/terms-and-conditions/41661719" rel="nofollow ugc">Terms of Use</a>.</li>
<li><strong><a href="https://ipinfo.io/" rel="nofollow ugc">ipinfo.io</a></strong> – Gather geolocation details of malicious users. Refer to their <a href="https://ipinfo.io/privacy-policy" rel="nofollow ugc">Privacy Policy</a> & <a href="https://ipinfo.io/terms-of-service" rel="nofollow ugc">Terms of Use</a> for further information.</li>
<li><strong><a href="https://ipstack.com/" rel="nofollow ugc">ipstack</a></strong> – Obtain extensive geolocation insights. Review their <a href="https://www.ideracorp.com/Legal/APILayer/PrivacyStatement" rel="nofollow ugc">Privacy Policy</a> & <a href="https://ipstack.com/terms" rel="nofollow ugc">Terms of Use</a> to learn more.</li>
<li><strong><a href="https://www.stopforumspam.com/" rel="nofollow ugc">Stop Forum Spam</a></strong> – Verify if visitors’ IPs have been reported. Explore their <a href="https://www.stopforumspam.com/privacy" rel="nofollow ugc">Privacy Policy</a> and <a href="https://www.stopforumspam.com/legal" rel="nofollow ugc">Terms of Use</a> for additional details.</li>
<li><strong><a href="https://www.projecthoneypot.org/" rel="nofollow ugc">Project Honeypot</a></strong> – Check if visitors’ IPs have been flagged. Refer to their <a href="https://www.projecthoneypot.org/privacy_policy.php" rel="nofollow ugc">Privacy Policy</a> and <a href="https://www.projecthoneypot.org/terms_of_use.php" rel="nofollow ugc">Terms of Use</a> for more information.</li>
<li><strong><a href="https://developers.google.com/maps" rel="nofollow ugc">Google Maps</a></strong> – Plot attack locations on Google Maps. Please review their <a href="https://www.ideracorp.com/Legal/APILayer/PrivacyStatement" rel="nofollow ugc">Privacy Policy</a> & <a href="https://developers.google.com/terms/site-terms" rel="nofollow ugc">Terms of Use</a> for complete details.</li>
</ul>
<p>Additionally, you have the option to contribute to Zero Spam’s improvement by enabling the sharing of detection information. For further information on the shared data, kindly refer to our <a href="https://github.com/Highfivery/zero-spam-for-wordpress/wiki/FAQ" rel="nofollow ugc">FAQ</a>.</p>


Zero Spam for WordPress

Has been my go-to anti-spam plugin for quite some time. I've used many of the techniques individually on many sites. Having them rolled up into a single plugin is just amazing!

All 1-star reviews that say it doesn't work, don't have it setup/integrated properly, which can take a little bit of effort. There is no magical anti-spam protection that instantly happens when you activate it. BUT, once you do implement a few of the techniques this plugin provides, spam becomes a thing of the past.  

Prior to v5.2.15, would have been an easy 5-star rating. Because of v5.2.15, I regrettably have to give it 1-star review. Plugin author: This is an ANTI-SPAM plugin, NOT a Ukraine support plugin. If you want to show your support for Ukraine, make a plugin for it. DON'T ruin a useful plugin by injecting unrelated political beliefs it into it. Blocking spam is blocking spam. Supporting Ukraine is supporting Ukraine. Mix them together and you just end up ruining both.

v5.2.15
    feat(ukraine): we’ll no longer provide protection for .ru, .su, and .by domains & will display a banner of support for the ukrainian people on those sites – united with ukraine

Personal Note to the Plugin Author:
It's your plugin, you can do what you want, but here's an important question: Is this plugin for YOU (the plugin author) to broadcast political beliefs, or for US (the plugin users) to block spam? Between those two, which one is more important? Pick one and go with it. If you pick personal political beliefs over plugin user functionality then it's only a matter of time until someone takes all of your hard work on this plugin, removes your political beliefs, releases it as a new plugin, and surpasses you in # of installs, making this plugin obsolete. You will be your own undoing. Would hate to see that happen to an otherwise WONDERFUL & AMAZING plugin!

Remove personal politics from this plugin, and my review will change to the 5-star review that it deserves.

Politics Ruin Yet Another Good Thing

No spam, no scams, just seamless experiences with Zero Spam for WordPress - the shield your site deserves.

WP Bouncer – Limit Simultaneous Logins vs Zero Spam for WordPress