ALD Login Page

外掛說明

ALD Login Page lets you fully customize the WordPress login page — logo, colors, dimensions, and padding — through a clean admin settings panel. Built on WordPress core APIs, the plugin follows WordPress security best practices from top to bottom so you can customize your login page with confidence.

Why security matters for a login page plugin

The WordPress login screen is the most exposed entry point to your admin area. A poorly coded login plugin can become an attack vector. ALD Login Page is designed to avoid the most common pitfalls:

• Settings API + Sanitization callbacks — all saved values pass through WordPress core sanitizers (`sanitize_text_field`, `sanitize_hex_color`, `esc_url_raw`) before they ever touch the database.
• Output escaping everywhere — `esc_url()`, `esc_attr()`, and `esc_html()` are used on every dynamic value that reaches the browser, eliminating XSS vectors.
• Capability gate on admin page — only users with `manage_options` can access settings. Unauthorized users are blocked before any output is rendered.
• Direct-access gate — `defined( ‘ABSPATH’ ) or die` on every PHP file prevents direct URL access to plugin files.
• Nonce + CSRF handled automatically — the WordPress Settings API inserts and validates security nonces on every settings save.
• No raw SQL — the plugin never calls `$wpdb->query()` or similar directly.
• No shell commands — no `eval()`, `exec()`, or `shell_exec()` anywhere.
• Superglobal sanitization — all user-supplied query parameters are passed through `sanitize_key()` with strict comparison before being evaluated.

The result: a lightweight login customizer with a clean security posture. If you are reviewing this plugin for code quality, you will find no raw echo $_GET, no unescaped output, and no capability bypasses. We take security seriously and keep this plugin up to date with the latest WordPress core versions.

ALD Login Page Needs Your Support

It is hard to continue development and support for this free plugin without contributions from users like you. If you enjoy using ALD Login Page and find it useful, please consider use these support channels appropriately. Your support will help encourage and support the plugin’s continued development and better user support.