Attributes User Access vs User Access Blocker

Attributes User Access is a lightweight and flexible authentication solution for WordPress. It empowers site administrators with detailed control over login processes, enhancing user authentication and access experience with a focus on security and performance. Core Features Custom Login Page Creation Generate fully integrated login pages with WordPress Use shortcode-based forms for easy theme compatibility Automatically adapts to WordPress core updates Template override system for complete customization Flexible Login Redirection Redirect native WordPress login requests Define role-based and context-aware redirection rules Custom redirect URLs per user role Developer-Focused Architecture PSR-4 autoloading and object-oriented design Extensible with action and filter hooks Modular components for easy customization Comprehensive API for extensions Security & Performance WordPress.org compliant security practices Nonce verification on all forms and AJAX requests Transient-based error handling (no PHP sessions) Optimized asset loading Minified CSS and JavaScript for production Shortcode Usage Basic login form: [attributes_login_form] With parameters: [attributes_login_form redirect=”/dashboard” remember=”false”] Available parameters: redirect – Target URL after login (default: Dashboard) remember – Show “Remember Me” checkbox (default: true) form_id – Custom form identifier (default: attributes_login_form) label_username – Custom username field label label_password – Custom password field label label_remember – Custom remember me label label_log_in – Custom login button text Template System Template System Override templates in your theme for complete customization. Template location in theme: your-theme/attributes/front/forms/login-form.php Original template location: wp-content/plugins/attributes-user-access/templates/front/forms/login-form.php Copy the original template to your theme and customize as needed. The plugin automatically uses your theme’s template when available. Developer Hooks Actions: attrua_before_login_form – Fires before rendering the login form wrapper attrua_after_login_form – Fires after rendering the login form attrua_login_form_fields – Hook for adding custom fields to login form attrua_login_failed – Fires when a login attempt fails attrua_successful_login – Fires after successful authentication attrua_before_page_creation – Fires before creating authentication pages attrua_after_page_creation – Fires after creating authentication pages Filters: attrua_login_redirect_url – Customize login redirection attrua_login_error_message – Modify login error messages attrua_login_credentials – Filter login credentials before authentication attrua_action_links – Modify plugin action links attrua_row_meta – Modify plugin row meta links Privacy Policy Attributes User Access does not: Collect any user data Send data to external servers Use cookies for tracking Store sensitive information The plugin only stores: Plugin settings in WordPress options table Temporary error messages in WordPress transients (auto-expire) Page IDs for custom authentication pages All data is stored locally in your WordPress database and is completely removed upon plugin uninstallation. Support & Contributing Documentation: https://attributeswp.com/docs Support Forum: https://wordpress.org/support/plugin/attributes-user-access GitHub Repository: https://github.com/attributeswp/attributes-user-access Report Issues: https://github.com/attributeswp/attributes-user-access/issues Contributions are welcome! Please feel free to submit pull requests or open issues on GitHub.

User Access Blocker is a simple yet powerful WordPress plugin that allows administrators to temporarily or permanently block user access without deleting their accounts. This is perfect for situations where you need to: Suspend user access during investigations Temporarily disable accounts for non-payment Block problematic users while preserving their content Manage user access during maintenance or transitions Key Features Easy Toggle: Simple “Block Access” / “Unblock Access” button on user profiles Instant Effect: Blocked users are immediately prevented from logging in, and any active session is terminated on the spot AJAX Powered: Block/unblock users without page refresh Secure: Multiple permission checks and nonce verification Non-Destructive: User accounts, posts, and data remain intact Admin Only: Only administrators can block/unblock users Self-Protection: Administrators cannot block themselves Activity Logging: All block/unblock actions are logged for security audits Clean Uninstall: Removes all plugin data when deleted How It Works Navigate to any user’s profile page in WordPress admin Scroll to the “User Access Blocker” section Click “Block Access” to prevent the user from logging in — if they are currently logged in, they will be logged out immediately Click “Unblock Access” to restore their access Blocked users will see: “Your access has been blocked by an administrator.” Security Features Administrator-only functionality Nonce verification on all actions Permission checks at multiple levels Data sanitization and validation Secure AJAX implementation XSS protection through proper escaping Activity logging for audit trails Developer Information Hooks and Filters The plugin uses standard WordPress hooks: authenticate – To check if a user is blocked during login show_user_profile / edit_user_profile – To add the block button personal_options_update / edit_user_profile_update – To save block status wp_ajax_uabx_toggle_user_block – For AJAX functionality Database The plugin stores block status in user meta: * Meta key: uabx_user_blocked * Meta value: ‘1’ (blocked) or ‘0’ (not blocked) Uninstall The plugin includes a proper uninstall routine that removes all plugin data from the database when deleted through the WordPress admin. Support For support, feature requests, or bug reports, please visit plugin support forum or GitHub repository. Privacy Policy This plugin does not collect any personal data. It only stores block status as user metadata within your WordPress database. No data is sent to external servers. The plugin logs block/unblock actions to your server’s error log for security audit purposes. These logs remain on your server and are not transmitted elsewhere.