外掛說明
Branexa is an all-in-one white-label toolkit for WordPress agencies, developers, and site owners.
Customize the WordPress admin area, login page, dashboard, menus, plugin visibility, security controls, and optional social login from one streamlined settings panel.
Built for professionals who deliver branded WordPress websites to clients, Branexa creates a polished experience without requiring multiple separate plugins.
Features
Branding & Site Identity
- Replace the WordPress logo in the admin sidebar and admin bar.
- Add a custom favicon.
- Customize or hide the admin footer.
- Apply custom CSS across the WordPress admin area.
- Add a
branexa-elementor-activebody class when Elementor is active. - Restore Branexa settings to their defaults.
Login Page
- Add a custom logo to the login form.
- Customize the background colour and image.
- Customize the submit button colour and label.
- Optionally enable “Remember me” by default.
- Link the login logo to your website instead of WordPress.org.
Dashboard
- Customize the welcome panel title and message.
- Restrict the welcome panel to selected user roles.
- Hide the welcome panel when it is not needed.
- Hide individual dashboard widgets, including Activity, At a Glance, and Quick Draft.
- Display an RSS feed widget with your latest updates.
- Add a second HTML dashboard panel for client notes.
- Hide selected post and page editor meta boxes.
Menus & Plugins
- Hide admin menu items and plugins for non-administrators, selected roles, or everyone.
- Hide specific plugins from the Plugins screen.
Security — Limit Login Attempts
- Configure the maximum number of failed login attempts per IP address.
- Configure the lockout duration.
- Store lockout information using WordPress transients—no additional database tables.
Social Login
- Add ‘Continue with Google’ to supported login forms.
- Add ‘Continue with Facebook’ to supported login forms.
- Automatically create subscriber accounts for new users.
- Use a complete OAuth 2.0 flow with CSRF state-token protection.
Agency Tools
- Use a panic URL on
wp-login.phpto clear IP lockouts and temporarily bypass rate limits. - Enable a public maintenance or “coming soon” page with a countdown and bypass password.
Who is Branexa for?
- WordPress agencies delivering white-label websites to clients.
- Freelance developers looking for a reusable all-in-one branding toolkit.
- SaaS and membership site owners who want a branded WordPress experience.
External services
This plugin can connect to third-party services only when the site administrator enables Social Login and saves API credentials.
Google (OAuth 2.0)
Used for optional ‘Continue with Google’ login on wp-login.php and compatible front-end login forms.
When a visitor uses Google login, the plugin sends an authorization code to Google’s OAuth token endpoint (oauth2.googleapis.com) using the site owner’s Client ID and Client Secret, then requests basic profile data (email and name) from Google’s OpenID userinfo endpoint (openidconnect.googleapis.com).
Data is sent only when the visitor clicks the Google login button.
- Service provider: Google LLC
- Terms of Service: Google Terms of Service
- Privacy Policy: Google Privacy Policy
Facebook (OAuth)
Used for optional ‘Continue with Facebook’ login on wp-login.php and compatible front-end login forms.
When a visitor uses Facebook login, the plugin exchanges an authorization code with Facebook’s Graph API OAuth endpoints and requests basic profile data (email and name) from graph.facebook.com.
Data is sent only when the visitor clicks the Facebook login button.
- Service provider: Meta Platforms, Inc.
- Terms of Service: Facebook Terms of Service
- Privacy Policy: Facebook Privacy Policy
螢幕擷圖
安裝方式
- Upload the
branexafolder to/wp-content/plugins/. - Activate the plugin through the Plugins menu in WordPress.
- Go to Branexa in the admin menu and configure each tab.
常見問題集
-
Will my settings be lost if I deactivate the plugin?
-
No. Settings are preserved on deactivation and only removed if you uninstall (delete) the plugin.
-
Do I need developer accounts for Google/Facebook login?
-
Yes. You will need a Google Cloud project with an OAuth 2.0 Client ID, and a Facebook App with the Facebook Login product enabled. Both are free to create.
-
Does the login limit apply to admins?
-
Yes — it applies to all IP addresses equally to prevent brute-force attacks regardless of the targeted username.
-
Does login limiting work behind a proxy or CDN?
-
If your server is behind a load balancer, X-Forwarded-For headers may be spoofed. Restrict trust to your proxy IP at the server level, or disable the header if you are not behind a proxy.
-
Does this plugin track visitors?
-
No. Branexa does not include analytics or visitor tracking. Login attempt limiting stores failed-attempt counts per IP in your site’s database (WordPress transients) and does not send that data to external services. Social login only runs when enabled by the site administrator and initiated by the visitor.
使用者評論
這個外掛目前沒有任何使用者評論。
參與者及開發者
變更記錄
1.1.3
- Tested up to WordPress 7.0.
- Documented Google and Facebook external services in readme (data sent, terms, privacy).
- Removed WordPress.org directory asset files from plugin package.
- Replaced inline admin/login CSS and JS with wp_enqueue_style/script APIs.
- Maintenance countdown uses external CSS/JS files instead of inline tags.
1.1.2
- Fix: Correct legacy options migration key for older installs.
- Fix: Uninstall cleanup now removes panic-bypass and OAuth state transients.
- Fix: Front-end login style controls now isolate form/input/button options more reliably.
- Update: Security docs clarify proxy/CDN X-Forwarded-For considerations.
- Update: Admin JS header text now uses Branexa naming.
1.1.1
- Removed X (Twitter) social login; Google and Facebook only. Legacy Twitter option keys are dropped when settings are saved.
1.1.0
- Role targeting for hidden menus, plugins, dashboard widgets, RSS, extra panel, and editor meta boxes.
- Welcome panel can be limited to selected roles; second HTML dashboard widget.
- Login: custom submit label, optional Remember-me default, preview link.
- Reset all settings to defaults; panic key URL; maintenance countdown + password bypass.
- Elementor admin body class for custom CSS.
- Fixes and documentation updates.
1.0.0
- Initial release.