PasswordSentry
Password Sentry (PS) is the must-have application for every membership site! We developed and released Password Sentry in 1999. Password Sentry was groundbreaking as the first application of its kind. Password Sentry continues to be groundbreaking as we grow and re-invent Password Sentry to continue to be the leader in the industry – exceeding anything our competition offers. Password Sentry is an affordable and reliable tool used by thousands of clients to secure and protect thousands of websites from password trading and dictionary / brute force attacks: saving webmasters hundreds or thousands of dollars each year in extra bandwidth, and lost sales. Password Sentry is a free Open Source App. WordPress (WP) has become a CMS (Content Management System) for many webmasters. In particular, paysite webmasters who offer paid memberships. To that end, we have seen an explosion of apps and WP plugins that enhance the membership functionality of WP. Our plugin is the perfect fit to WP and those plugins. PasswordSentry Plugin hooks into the WP Login to track and log logins to detect and block password sharing and compromised passwords. The PasswordSentry Plugin protects your members and your WP from hackers trying to access your members WP accounts. It also protects your bottom line if you run a paysite by blocking members from sharing their passwords with others. The PasswordSentry Plugin depends on the Password Sentry App: Password Sentry. The Password Sentry App includes a standalone, web-based control panel (PS AdminCP) to manage Password Sentry App and logged WP users. o Detect and block password sharing via UserTracking and GeoTracking technology o Web-based control panel to administer Password Sentry App, and monitor / manage users o Priority Support [Fee-Based] o FREE Regular Forum Support o FREE updates o Unlimited Domains o Capability to block logins from specified countries, and/or IP addresses o Monitor and throttle per-user bandwidth Before you use this plugin, you must FIRST install the Password Sentry App. Once the Password Sentry App is fully installed and configured, you can then activate and configure the PasswordSentry Plugin. This plugin monitors WP logins, checking for password sharing. If password sharing is detected for a given user, that user is automatically suspended, and you are emailed. Suspended users can either be manually restored via PS AdminCP, or you can setup a cron job to automatically restore suspended users after XX minutes.
User Access Blocker
User Access Blocker is a simple yet powerful WordPress plugin that allows administrators to temporarily or permanently block user access without deleting their accounts. This is perfect for situations where you need to: Suspend user access during investigations Temporarily disable accounts for non-payment Block problematic users while preserving their content Manage user access during maintenance or transitions Key Features Easy Toggle: Simple “Block Access” / “Unblock Access” button on user profiles Instant Effect: Blocked users are immediately prevented from logging in, and any active session is terminated on the spot AJAX Powered: Block/unblock users without page refresh Secure: Multiple permission checks and nonce verification Non-Destructive: User accounts, posts, and data remain intact Admin Only: Only administrators can block/unblock users Self-Protection: Administrators cannot block themselves Activity Logging: All block/unblock actions are logged for security audits Clean Uninstall: Removes all plugin data when deleted How It Works Navigate to any user’s profile page in WordPress admin Scroll to the “User Access Blocker” section Click “Block Access” to prevent the user from logging in — if they are currently logged in, they will be logged out immediately Click “Unblock Access” to restore their access Blocked users will see: “Your access has been blocked by an administrator.” Security Features Administrator-only functionality Nonce verification on all actions Permission checks at multiple levels Data sanitization and validation Secure AJAX implementation XSS protection through proper escaping Activity logging for audit trails Developer Information Hooks and Filters The plugin uses standard WordPress hooks: authenticate – To check if a user is blocked during login show_user_profile / edit_user_profile – To add the block button personal_options_update / edit_user_profile_update – To save block status wp_ajax_uabx_toggle_user_block – For AJAX functionality Database The plugin stores block status in user meta: * Meta key: uabx_user_blocked * Meta value: ‘1’ (blocked) or ‘0’ (not blocked) Uninstall The plugin includes a proper uninstall routine that removes all plugin data from the database when deleted through the WordPress admin. Support For support, feature requests, or bug reports, please visit plugin support forum or GitHub repository. Privacy Policy This plugin does not collect any personal data. It only stores block status as user metadata within your WordPress database. No data is sent to external servers. The plugin logs block/unblock actions to your server’s error log for security audit purposes. These logs remain on your server and are not transmitted elsewhere.
