If Menu – Visibility control for Menus vs WP Login Door

Control what menu items your site’s visitors see, with visibility rules. Here are a few examples: Display a menu item only if User is logged in Hide menus if Device is mobile Display menus only for Admins and Editors Hide Login or Register links for Logged in Users Display menus for Users from US or UK Display menus only for Customers with active membership Display menus for visitors browsing with Language English or Spanish After the plugin is enabled, each menu item will have a new option “Change menu item visibility” which will enable the selection of visibility rules. Check the examples in screenshots or try it here → demos.layered.store Features Basic set of visibility rules User state User is logged in User roles Admin Editor Author etc Page type Front page Single page Single post Is Archive page (year, category, search results, etc) Visitor device Is Mobile Advanced visibility rules – requires More Visibility Rules Add-on Visitor location – detect visitor’s Country Visitor language – detect visitor’s selected Language WooCommerce Subscriptions – Display menus for users with active subscription WooCommerce Memberships – Display menus for customers with active membership plans Groups – Detect if users are in specific groups WishList Member – Detect the users’ membership level Restrict Content Pro – Detect the users’ subscription level Multiple rules – mix multiple rules for a menu item visibility show if User is logged in AND Device is mobile show if User is Admin AND Is front page Support for adding your custom rules

Did you ever feel like your website or blog login page is ridiculously fragile and reachable, and could be easily broken in by an intruder? Personally I hate to think of hundreds of people playing with my door lock hundreds of times a day. It’s the same with my blog login page. On WordPress, there are two main potential vectors of bruteforce intrusion: * http://my-site.com/wp-login.php, which is the login page * http://my-site.com/xmlrpc.php, which is an API gateway for interacting with third party applications. This plugin adds one security layer in front of your login page, and by the way you can also disable XML-RPC with a simple checkbox if you don’t need it (XML-RPC is a WIDELY used vector of attacks). The idea is simple: you choose a pair of words, and when you want to access your login page, you just have to provide them in the URL like this: http://my-site.com/wp-login.php?word1=word2. That’s all! If you try to access your login page without this pair of words, you get a configurable error message, where you can insult the attacker as much as you want 😉