跳至主要內容
WordPress.org

Taiwan 正體中文

  • 佈景主題目錄
  • 外掛目錄
  • 最新消息
  • 技術支援
  • 關於我們
  • 團隊
  • 取得 WordPress
取得 WordPress
WordPress.org

Plugin Directory

CFB Must Login

  • 提交外掛
  • 我的最愛
  • 登入
  • 提交外掛
  • 我的最愛
  • 登入

CFB Must Login

由 Code For Broke 開發
下載
  • 詳細資料
  • 使用者評論
  • 安裝方式
  • 開發資訊
技術支援

外掛說明

Must Login is a lightweight, user-friendly plugin that allows you to require login for your entire site with just one click. Perfect for membership sites, private blogs, intranets, or any site that needs to restrict access to registered users only.

Features

  • One-Click Toggle – Enable or disable login requirement instantly from the admin bar
  • REST API Protection – Configurable authentication requirement for REST API endpoints
  • Automatic Cache Clearing – Automatically clears popular caching plugins when toggling protection
  • Admin Bar Status Indicator – Always see at a glance whether login is required
  • Simple Settings Page – Easy-to-use settings interface
  • Admin Override – Administrators always have access, even when login is required
  • Smart Redirects – Users are redirected to login and then back to their intended page
  • Selective Endpoint Access – Allow specific REST API endpoints for forms and authentication
  • Cache Compatibility – Works with WP Super Cache, W3 Total Cache, WP Rocket, and more
  • No Configuration Needed – Works perfectly out of the box
  • Lightweight – Minimal impact on site performance
  • Translation Ready – Fully internationalized and ready for translation

How It Works

  1. Install and activate the plugin
  2. Click the lock icon in the admin bar to toggle login requirement
  3. That’s it! Your site is now protected

When enabled, all visitors must log in to view any page on your site. Administrators can quickly toggle this on or off from anywhere on the site using the admin bar.

Developer Documentation

Filters

cfb_must_login_redirect_url – Customize the login redirect URL

add_filter('cfb_must_login_redirect_url', function($redirect_url, $redirect_to) {
    return 'https://example.com/custom-login';
}, 10, 2);

cfb_must_login_allowed_rest_routes – Allow additional REST API endpoints

add_filter('cfb_must_login_allowed_rest_routes', function($routes) {
    $routes[] = '/my-plugin/v1/public';
    return $routes;
});

Actions

cfb_must_login_clear_cache – Triggered when cache is cleared

add_action('cfb_must_login_clear_cache', function() {
    // Custom cache clearing logic
});

Capabilities

The plugin uses the cfb_must_login_manage capability, which is mapped to manage_options by default. You can customize this using the map_meta_cap filter.

安裝方式

Automatic Installation

  1. Log in to your dashboard
  2. Navigate to Plugins → Add New
  3. Search for “Must Login”
  4. Click “Install Now” and then “Activate”

Manual Installation

  1. Download the plugin zip file
  2. Log in to your dashboard
  3. Navigate to Plugins → Add New → Upload Plugin
  4. Choose the zip file and click “Install Now”
  5. Activate the plugin

常見問題集

Will this affect search engines?

Yes, when login is required, search engines cannot crawl your site. This is useful for private sites but should be disabled if you want search engine visibility.

What is REST API protection?

REST API protection requires authentication to access WordPress REST API endpoints when login is required. This prevents unauthenticated access to your site’s data through the API. You can enable or disable this feature separately in the settings.

Which REST API endpoints are always accessible?

Even with REST API protection enabled, the following endpoints remain accessible:
* Authentication endpoints (JWT, Simple JWT Login)
* Contact form endpoints (Contact Form 7, WPForms, Gravity Forms)
* oEmbed endpoints

Developers can allow additional endpoints using the cfb_must_login_allowed_rest_routes filter.

Does this work with caching plugins?

Yes! The plugin automatically detects and clears cache from popular caching plugins including:
* WP Super Cache
* W3 Total Cache
* WP Rocket
* LiteSpeed Cache
* WP Fastest Cache
* Autoptimize
* Cache Enabler
* Comet Cache
* SG Optimizer
* WP Optimize

When you toggle the login requirement, the cache is automatically cleared to ensure the changes take effect immediately.

Can I exclude certain pages?

Version 1.0.0 requires login for the entire site. Future versions may include page exclusion options.

What happens to users trying to access the site?

Non-logged-in users are automatically redirected to the login page. After logging in, they’re redirected back to the page they were trying to access.

Does this work with membership plugins?

Yes! Must Login works alongside membership plugins and simply ensures users are logged in before viewing any content.

Can I customize the redirect URL?

Yes, developers can use the cfb_must_login_redirect_url filter to customize the redirect URL.

How do I allow additional REST API endpoints?

Developers can use the cfb_must_login_allowed_rest_routes filter to add custom endpoints to the allowlist:

add_filter('cfb_must_login_allowed_rest_routes', function($routes) {
    $routes[] = '/my-plugin/v1/public-endpoint';
    return $routes;
});

使用者評論

這個外掛目前沒有任何使用者評論。

參與者及開發者

以下人員參與了開源軟體〈CFB Must Login〉的開發相關工作。

參與者
  • Code For Broke

將〈CFB Must Login〉外掛本地化為台灣繁體中文版

對開發相關資訊感興趣?

任何人均可瀏覽程式碼、查看 SVN 存放庫,或透過 RSS 訂閱開發記錄。

變更記錄

1.0.0

  • Initial release
  • One-click toggle via admin bar
  • Configurable REST API protection
  • Automatic cache clearing for popular caching plugins
  • Support for WP Super Cache, W3 Total Cache, WP Rocket, and more
  • Selective REST API endpoint access
  • Admin notices for caching plugins
  • Translation ready

中繼資料

  • 版本 1.0.0
  • 最後更新 5 個月前
  • 啟用安裝數 少於 10 次
  • WordPress 版本需求 5.0 或更新版本
  • 已測試相容的 WordPress 版本 6.9.4
  • PHP 版本需求 7.4 或更新版本
  • 語言
    English (US)
  • 標籤:
    loginmembersprivaterest-apisecurity
  • 進階檢視

評分

這個項目尚無任何評論記錄。

Your review

查看全部使用者評論

參與者

  • Code For Broke

技術支援

使用者可在技術支援論壇提出意見反應或使用問題。

檢視技術支援論壇

  • 關於我們
  • 最新消息
  • 主機代管
  • 隱私權
  • 展示網站
  • 佈景主題目錄
  • 外掛目錄
  • 區塊版面配置目錄
  • Learn
  • 技術支援
  • 開發者資源
  • WordPress.tv ↗
  • 共同參與
  • 活動
  • 贊助基金會 ↗
  • Five for the Future
  • WordPress.com ↗
  • Matt ↗
  • bbPress ↗
  • BuddyPress ↗
WordPress.org
WordPress.org

Taiwan 正體中文

  • 查看我們的 X (之前的 Twitter) 帳號
  • 造訪我們的 Bluesky 帳號
  • 造訪我們的 Mastodon 帳號
  • 造訪我們的 Threads 帳號
  • 造訪我們的 Facebook 粉絲專頁
  • Visit our Instagram account
  • Visit our LinkedIn account
  • 造訪我們的 TikTok 帳號
  • Visit our YouTube channel
  • 造訪我們的 Tumblr 帳號
程式碼,如詩
The WordPress® trademark is the intellectual property of the WordPress Foundation.