Lock Pages
NOTE: This plugin is not tested with Gutenberg, and we have no near-term plans to do so. If using WP > 5.0, use the Classic Editor if there are problems. NOTE: This plugin was originally designed to only lock pages, and only later added custom post type functionality. Hence the name, and sometimes the terminology will say “pages” when it means “any post type”. Sometimes some pages or other posts are too important to allow them to be casually moved about or deleted by site editors. An editor may think nothing of renaming a page’s slug, or deleting a page to replace it with something similar, perhaps unaware of effects on SEO. Also, certain pages might be essential to keep in place because of a site’s structure, or because of aspects of a custom theme. This plugin lets administrators “lock” any or all pages, and any post of any post type. “Locking” here basically means preventing non-admins from: Editing the item’s slug Changing the item’s parent Changing the item’s template Deleting the item Changing the item’s status Changing the item’s password protection Locking is implemented by preventing the actual database update being performed as well as, where possible, having the interface element for that field removed. Where possible interface elements are removed via WP filters on the server; otherwise, jQuery is used on the client. NOTE: Currently, I’ve been unable to get this working with the Quick Edit functionality. As a stop-gap measure, which is only in place because it seems to be better than nothing, the Quick Edit link is removed for users who can’t edit locked pages. I know, it’s not great. But until I work out how to selectively block Quick Editing, I’m assuming a locked page should be locked. Users can always edit the other fields via the normal edit page. Go to GitHub for development code and issue tracking. Known issues Quick Edit presents problems. I’ve worked out how to create hidden fields in the Quick Edit box, and to put the values in the hidden div, but I can’t work out how to dynamically populate the fields with the values, so the old values can be used if necessary on saving. For now Quick Edit is blocked for users who can’t edit locked pages. Although I’ve fixed the lock_parent function so it allows uploaded files to be attached to a locked page, it still prevents media already in the library from being attached when inserted. Ideas Include the locking checkbox for admins in the Quick Edit form. On the settings screen, use a drop-down for selecting which capability is needed for editing locked page elements. Implement a system to deal with descendants, e.g. an option to lock all descendants of a locked page or not.
WPMasterToolKit (WPMTK) – All in one plugin
WPMasterToolKit is an all-in-one WordPress plugin that replaces dozens of separate plugins with 100+ modular tools for security, performance, administration, media and development. Activate only what you need and manage everything from one place. Built for site owners, freelancers, developers and agencies. 98 free modules, plus 37 advanced modules and additional features with WPMasterToolKit Pro. Review by Alexis Fichou (WP-Origami): Review by Enzo (Easy WordPress): 98 free modules Administration * Clean Up Admin Bar * Disable Dashboard Widgets: Clean up the dashboard by disabling widgets that load unnecessary assets. * Enhance List Tables: Add or remove columns in post type, taxonomy, media, comment and user list tables. * Heartbeat Control: Modify or disable the WordPress Heartbeat API to reduce server CPU usage. * Hide Admin Bar * Hide Admin Notices * Log In/Out Menu * Maintenance Mode * Password Protection * Plugin & Theme Rollback * Redirect After Login * Redirect After Logout * Social Login * Wider Admin Menu Users * Clean Profiles * Export Users * Last Login Column * Local Avatars * Multiple User Roles * Temporary Login Debug * Adminer * Advanced Debug Mode * Disable All Updates * Disable wp_mail * File Manager * Mail Catcher * Meta Debugger Contents & Media * Allow Menu Custom Links to Open in New Tab * Auto-Publish Posts with Missed Schedule * Browser Theme Color * Content Duplication * Content Order * Duplicate Menu * Export Posts & Pages * External Permalinks * Image Upload Control * Media Cleaner * Media Encoder: Convert images to WebP locally. AVIF conversion is available in Pro. * Media Library & Post Folders * Nav Menu Visibility * Obfuscate Email Addresses * Open All External Links in New Tab * Post Per Page * Quick Add Post * Redirect 404 to Homepage * Register Custom Content Types * Revisions Control * Search Replace in Database * SVG Upload Custom Code * Code Snippets * Custom Admin CSS * Custom Body Class * Custom Frontend CSS * Insert , and Code * Manage ads.txt and app-ads.txt * Manage robots.txt Disable Features * Disable Block-Based Widgets Settings Screen * Disable Dashicons CSS and JS Files * Disable Emoji Support * Disable Feeds * Disable Gutenberg * Disable jQuery Migrate * Disable Really Simple Discovery (RSD) Tag * Disable REST API * Disable Windows Live Writer (WLW) Manifest Tag * Disable WordPress Shortlink Tag SEO & Speed Optimizations * Disable WP Sitemap * Redirect Manager WooCommerce * Disable Cart Fragments Scripts Security * Auto Regenerate Salt Keys * Ban Emails * Blacklisted Usernames * Block 404 PHP File Scanning * Block User Registration from Disposable Email * Custom COOKIEHASH * Disable XML-RPC * Disallow Bad Requests * Disallow Directory Listing * Disallow Malicious File Access in Uploads * Disallow Plugin Upload * Disallow Theme Upload * Disallow User Registration * Disallow WP File Edit * Force SSL * Force Strong Password * Hide Login Errors * Hide PHP Version * Hide WordPress Version * Limit Login Attempts * Lock Admin Email * Lock Site URL * Move Login URL * Obfuscate Author Slugs * Prevent User Enumeration * Protect Website Headers Other * Apple Touch Icon * Child Theme Generator * SMTP Mailer 37 Pro modules Administration * Admin Menu Organizer * Custom Login Design * Disable Blog * Local Google Fonts * White Label Users * User Switching Debug * CRON Manager * Disable Plugin for Debug * Force Send All Email To * Hook and Filter Debugger * Update Logs Contents & Media * Add Essential Shortcodes * Download Media as ZIP * Generate Alt Text with AI * Media Replacement * Media Trash * No Theme Switch * Paste Image in Media * Post Type Switcher Custom Code * Pixel Tag Manager Disable Features * Disable Comments SEO & Speed Optimizations * 410 Manager * Head Sorter * Link Shortener WooCommerce * Auto Clean Action Scheduler Actions * Disable WooCommerce Logout Confirmation * My Account Menu Customizer Security * Better Password Hash * Disallow Access to Sensitive WordPress Files * Disallow Countries by IP * Manage Admin Email Notifications * No Plugin Activation, Deactivation or Deletion * Password Expiration * Two-Factor Authentication * Vulnerability Scan Other * Change Database Prefix * Plugin Download Additional Pro features Move Login URL: Block access to /wp-admin with server side 403 error for non-logged users. Maintenance Mode: Real countdown timer with automatic site activation. Bypass link generation for access during maintenance. Exclude specific URLs from maintenance mode. Media Encoder: Convert images to AVIF format (PHP ≥ 8.1). Free version limited to WebP only. Mail Catcher: Unlimited email capture. Free version limited to 5 emails per day. Advanced Debug Mode: Live log streaming viewer with real-time monitoring. Daily logs with date suffix. Custom log path with enhanced protection. Search Replace in database: several search/replace pairs, support for regular expressions and a much more complete detailed overview of detected changes. SMTP Mailer: 19+ premium providers including Gmail, Outlook, SendGrid, AWS SES, Brevo, Mailgun, Mailjet, Postmark, SparkPost, MailerSend, Resend, SendLayer, SMTP.com, SMTP2GO, Elastic Email, Zoho Mail, SendPulse, Mandrill, and Pepipost. Free version limited to PHP mail and generic SMTP. Redirect Manager: Advanced redirect engines (Apache and Nginx), redirect logs, and CSV import/export. Free version limited to WordPress (PHP) redirects without logs/import-export. Upgrade to WPMasterToolKit Pro External services WPMasterToolKit does not connect every website to external services by default. Some optional modules can communicate with third-party providers only when you enable and configure them, for example SMTP and email providers, social login services, geolocation databases, vulnerability data sources, analytics platforms or AI services. The data transmitted depends on the selected module and provider. Review the module settings and the provider’s terms and privacy policy before enabling an integration. Support For help with the free plugin, bug reports and feature requests, use the WPMasterToolKit support forum on WordPress.org. Please include your WordPress version, PHP version, enabled WPMasterToolKit modules and clear steps to reproduce the issue. Security vulnerabilities must be reported privately using the process described in the FAQ below. More plugins by Webdeclic Discover all WordPress plugins by Webdeclic.