Remove Dashboard Access vs Toolbelt

The easiest and safest way to restrict access to your WordPress site’s Dashboard and administrative menus. Remove Dashboard Access is a lightweight plugin that automatically redirects users who shouldn’t have access to the Dashboard to a custom URL of your choosing. Redirects can also be configured on a per-role/per-capability basis, allowing you to keep certain users out of the Dashboard, while retaining access for others. Limit Dashboard access to user roles: Admins only Admins + editors Admins, editors, and authors or restrict by specific user capability Choose your own redirect URL Optionally allow users to edit their profiles Display a message on the login screen so users know why they’re being redirected Allow specific admin pages through the redirect — paste a list of URLs your customers should still be able to reach (with wildcard support for grouping related pages) Optionally extend the block to admin-ajax.php requests for stricter lockdown Blocking access to the Dashboard is a great way to prevent clients from breaking their sites, prevent users from seeing things they shouldn’t, and to keep your site’s backend more secure. Allow only users with roles or capabilities: You can restrict Dashboard access to Admins only, Editors or above, Authors or above, or by selecting a specific user capability. Grant access to user profiles: Optionally allow all users the ability to edit their profiles in the Dashboard. Users lacking the chosen capability won’t be able to access any other sections of the Dashboard. Show a custom login message: Supply a message to display on the login screen. Leaving this blank disables the message. Allow specific admin pages through the redirect: Sometimes you want to lock down the Dashboard but still let your customers reach one or two specific admin pages — a payment confirmation, a TrustedLogin secret-share screen, a custom report. Paste those URLs into the Allowed URLs box (one per line, relative or absolute), and matching requests will skip the redirect. Use * as a wildcard inside a query value to match a whole group of pages at once. For example, ?page=tl-* allows tl-secrets, tl-config, and any other page whose slug starts with tl-. Optionally block AJAX requests too: By default this plugin doesn’t touch requests to admin-ajax.php — most WordPress sites rely on those for legitimate frontend AJAX. If you’d rather the dashboard restriction apply there as well, turn on the “Also block AJAX” checkbox in the Advanced section of the settings page.

A collection of simple addons that provide every day functionality with privacy and speed. There’s very few options, and no unnecessary filler. It does exactly what it needs to do and nothing else. Toolbelt takes a privacy first approach to adding features. Everything happens on your server. No data is sent to third party servers without your explicit consent. No data is loaded from third parties (for example social sharing scripts). Taking inspiration from Jetpack I want to rebuild the features I use the most and make them as simple and fast as possible. Toolbelt has been featured on The WordPress Tavern in an interview with me. You can read more about the creation of the plugin and my desire for a more private internet. Gutenberg Blocks Some of the Toolbelt modules include blocks to make working with the generated content easier. The available blocks are: Contact Form – The simplest way to have people get in touch. Works with the spam module. Post Categories – A category content list for magazine and newspaper themes. Simple Slider – A fast, CSS powered slider. No JavaScript and easy to edit. Projects Grid – to list a collection of projects. These can be filtered by project category. Testimonials Grid – to list a group of testimonials. Great for showing off! 🙂 Markdown – for those who like a simpler writing experience. Sitemap – Easily list all posts, pages, Categories and Projects. Star Rating – Rate things with a simple visual interface. Breadcrumbs – for full site editing. Related posts – for full site editing. All Features Toolbelt has a lot of features. The complete list is below. Admin Interface Tweaks – Small CSS changes to make the interface nicer to use. Avatars – Algorithmicly generated private avatars that are consistent across websites. Breadcrumbs Contact Form – Gutenberg compatible & private. Supports the spam blocker module. Cookie Banner CSP Header Disable Comment Urls – Removes comments urls from your site. Disable REST API – Disable the REST API from public usage. Fast 404 – Stops WordPress from loading the full 404 page for images and other content. Reduces server usage. Footnotes Get Image – Find a featured image for posts that do not have one assigned. Heading Anchors – Add anchor names to headings so that they can be linked to. Iframe Privacy Shield – Remove iframes and add a clickable screen so that they load when the user wants to see them. Infinite Scroll Jetpack Dev Mode – Disable Jetpacks connection so that only local functions are enabled. Lazy Loading Layout Grid – A nicer columns block. Markdown Monetization – Enable Coil Web Monetization. OEmbed – Add additional OEmbed providers. Optimization – Remove WordPress features that are rarely used. Portfolio – Portfolio custom post type and blocks. Post Category – A post category block. Random Redirection – Randomly redirect to a blog post. Related Posts Remove IP Addresses – Remove IP addresses from comments for user privacy (spam protection still works). Responsive Videos Search Redirect – If there’s a single search result redirect to it instead of displaying the restuls. Sitemap – Sitemap block. Slider – JavaScript free CSS slider block. Social Menu – Replace social links with icons in navigation blocks. Spam Blocker – Privacy focused spam blocker. Static Social Sharing – Link to social sharing pages, and don’t load social network content on your site. Stats – Enable privacy focused analytics providers like Fathom. Testimonials – Testimonials Custom post types and blocks. Tidy Notifications – Move plugin and theme notifications to a sidebar. Typographic Widows – Remove widows in post titles. Widget Display – Set rules for widget visibility. Toolbelt is Private Every week there’s a new story about Facebook (or Google, or Amazon, or whoever) tracking people inappropriately, or selling user details. Or some security breach that leaks users passwords or credit card info. Privacy is a big topic and frankly, it’s scary how much big corporations like Google, Facebook, and Twitter know. To ensure Toolbelt is as privacy focused as possible it: Does not phone out. No data is shared with third parties. Does not use standard social sharing javascripts (loaded from social networks servers). Does not track your usage of the plugin. Does not add generator comments, or secret promotional comments to your site html. Toolbelt is Fast Slow websites make me sad. I don’t want to add anything to Toolbelt that will impact site load speed. My Google Pagespeed score should not move from 100. Why? Faster sites are shown to increase conversions and time on site. Google loves fast sites and improves their search rankings. In addition fast sites are great for people with slower internet access, or on mobile data, and use less resources to generate the page. So many benefits! To be fast Toolbelt: Doesn’t use jQuery or any other javascript framework. All javascript is vanilla js, and minified. Minifies all assets (JS and CSS). Loads all assets inline. They are already small, and loading them directly on the page means there are no server requests. Only loads things when they are needed. JS and CSS are only loaded for activated modules. Very few options. There’s one main database option, an array that stores what modules are active. And another that stores settings for some modules. Uses the minimum code possible. Minimum Javascript and PHP. Less code means more speed, and fewer bugs. All options are disabled by default. You enable only the ones you need. Built for developers Toolbelt is built with developers in mind. It has a collection of hooks and filters to enable you to make the modules work the way you want. If you’re intersted to jump in the project, there are opportunities for developers at all levels to help out. Contribute to Toolbelt on GitHub and join the party. 🎉 The code can be found on Github Documentation with code examples can be found on the wiki You can reach out to me with questions or problems on Twitter