Popis
Is your WordPress site protected against constant brute-force attacks? While strong passwords help, automated bots continuously try to breach your site through the login page. WPOrLogin offers a comprehensive solution to fortify your access points while ensuring a professional and branded user experience.
With the new Limit Login Attempts module, WPOrLogin tracks failed login attempts by IP address and automatically locks out the attacker for a specified duration, stopping brute-force attacks dead in their tracks. This is an essential layer of security that works alongside our popular reCAPTCHA integration.
WPOrLogin empowers you to take full control of the entire login and registration experience:
- Security First: Implement Brute Force Protection and Google reCAPTCHA v2/v3 on all key forms (Login, Registration, Password Recovery).
- Branding & Design: Easily customize the login page with your company logo, custom background, and brand colors.
- User Flow Control: Redirect users based on custom settings after login or logout.
- Clean Experience: Remove distracting elements like the language selector.
Key Security Features (New in 2.10!)
- Brute Force Protection: Limits login attempts by tracking failed logins per IP address and automatically applying a temporary lockout.
- Live Security Report: Provides an admin report with forensic data, showing currently blocked IPs, time of block, and geo-location links.
- Smart UX Warnings: Displays a clear, dynamic warning to the user on their final attempt before lockout (UX Improvement).
- Full Security Synchronization: Guarantees that the attempt counter is correctly reset upon a successful login, preventing legitimate users from being accidentally blocked.
Core Design & Utility Features
- Custom Logo and Background: Change the logo and adjust the background image to your preference.
- Predefined Layouts: Choose from multiple layouts (Basic, Standard, and Premium).
- Google reCAPTCHA v2 and v3 Compatibility: Enhance security with reCAPTCHA verification options for login, registration, and password recovery forms.
- Custom Redirection: Allows users to be redirected after login or logout.
- Advanced Options: Remove the language selector from the login page.
- Mobile-Friendly Design: Optimized layout for mobile screens.
Advanced Security with Google reCAPTCHA
Today, cyberattacks, especially automated ones, pose a major threat to website security. Among these attacks are bots attempting to access your site using stolen credentials or brute-force attacks. Google reCAPTCHA is one of the most effective tools for combating these attacks. With WPOrLogin, you can easily integrate Google reCAPTCHA v2 and v3 into your login, registration, and password recovery forms, adding an extra layer of security.
Protection for Key Forms:
WPOrLogin allows you to integrate Google reCAPTCHA in:
- Login Form: Blocks unauthorized access attempts and brute-force attacks.
- Registration Form: Prevents bots from creating fake accounts on your site.
- Password Recovery Form: Protects against malicious password reset attempts.
Obrázky
Premium Design – One 
Premium Design – Two 
Premium Design – Three 
Premium Design – Four 
Standard Design 
Basic Design 
Configuration – Basic Design 
Configuration – Standard Design 
Configuration – Premium Design 
Configuration – Google reCAPTCHA 
Configuration – Remove Language Selector 
Configuration – Redirect 
Configuration – Limit Login
Inštalácia
There are two ways to install WPOrLogin on your WordPress site: directly from the official WordPress repository or by manually uploading the .zip file. Below, we explain both methods step by step.
Option 1: Direct Installation from the WordPress Repository (Recommended Method)
- Log in to your WordPress admin panel.
- In the sidebar menu, click Plugins and then select Add New.
- In the search bar, type WPOrLogin and press Enter.
- Find WPOrLogin in the search results and click Install Now.
- Once the installation is complete, the Activate button will appear. Click it to enable WPOrLogin.
- After activation, you can access the WPOrLogin settings from the WordPress admin panel, where you can start customizing the login and registration page.
Option 2: Manual Installation from a .zip File
- Log in to your WordPress admin panel.
- In the sidebar menu, click Plugins and then select Add New.
- At the top of the page, click the Upload Plugin button.
- Click Choose File and locate the wporlogin.zip file on your computer.
- Click Install Now and wait while WordPress installs the plugin.
- After installation, click the Activate button to enable WPOrLogin.
- You can now access the WPOrLogin settings in the admin panel, where you can customize the logo, colors, background images, and enable Google reCAPTCHA for added security.
Important Note:
After activating WPOrLogin, we recommend exploring all the available customization options to optimize your login page. Additionally, enabling Google reCAPTCHA and Limit Login Attempts will help protect your website from bots and unauthorized access.
Časté otázky
-
What is the recommended size for the logo?
-
A logo with a width of 200px and a height of 84px is recommended for the best display on the custom WordPress login page.
-
How does the Brute Force Protection work?
-
WPOrLogin tracks failed login attempts by IP address. Once the attempt limit (default: 3) is reached, the IP is automatically locked out for a set period (default: 20 minutes) to stop the attack.
-
What happens if an IP is blocked?
-
The blocked IP will see a generic error message and will be prevented from making new login attempts until the lockout timer expires. This is done via transients to ensure efficiency and auto-cleanup.
-
What happens if I forget my password and get locked out?
-
If you are locked out, you must wait the duration of the lockout time (default: 20 minutes) before attempting to log in again. You can use the Password Recovery link, which is protected by reCAPTCHA.
-
Is WPOrLogin compatible with Google reCAPTCHA v3?
-
Yes, WPOrLogin is fully compatible with both Google reCAPTCHA v2 and v3. You can select the version that best suits your needs directly from the plugin’s settings page.
-
Can I customize the background of the login page?
-
Yes, you can choose from several predefined free images or upload your own background image from the plugin’s customization options.
-
Does WPOrLogin allow users to be redirected after login or logout?
-
Yes, WPOrLogin includes an option to redirect users to a specific page after login or logout. You can configure custom redirections based on user roles directly from the plugin settings.
-
Will WPOrLogin still work if I change my theme?
-
Yes, WPOrLogin will work regardless of the theme you use, as it focuses on customizing the WordPress login page and does not affect the overall appearance of your theme.
Recenzie
Prispievatelia a vývojári
“Customize WordPress Login and Registration Page – WPOrLogin” je softvér s otvoreným zdrojovým kódom. Do tohto pluginu prispeli nasledujúci ľudia.
Prispievatelia
„Customize WordPress Login and Registration Page – WPOrLogin“ bol preložený do 6 jazykov. Ďakujeme prekladateľom za ich príspevky.
Preložiť „Customize WordPress Login and Registration Page – WPOrLogin“ do vašho jazyka.
Máte záujem o vývoj?
Prehľadávajte zdrojový kód, preskúmajte SVN repozitár, alebo sa prihláste na odber vývojárskeho logu cez RSS.
Zoznam zmien
2.10
- MAJOR NEW FEATURE: Brute Force Protection (Limit Login Attempts). Stops bots from guessing passwords by tracking failed attempts by IP and locking out attackers.
- FEATURE: Introduced a Live Block Report in the Admin panel showing blocked IPs, block time, and Geo-location links for forensic analysis.
- FEATURE: Implemented smart, dynamic warnings shown to the user on their final attempt before lockout (UX Improvement).
- BUGFIX: Fixed a critical synchronization issue where failed attempts were not being reset after a successful user login.
- IMPROVEMENT: Refactored Admin Notice system into a dedicated class for better scalability and modularity.
2.9.8
- Confirmed compatibility with WordPress 6.8.
2.9.7
- Fixed the review notice so it can now be properly dismissed after two weeks of plugin use.
- Improved internal scripts loading to ensure better compatibility across all admin pages.
- Minor code improvements.
2.9.6
- Added an option to customize the color of buttons and links on the login, registration, and password recovery pages to match your brand identity.
- Improved the design and styling of the plugin’s built-in layouts for a better visual experience.
- Optimized styles to ensure smooth performance on mobile devices.
2.9.5
- In this update, the login design styles have been improved for a more polished and user-friendly experience.
2.9.4
- This version introduces multi-language support, including the following languages: English (default), Spanish, French, Italian, German, Portuguese (Brazil) and Indonesian.
2.9.3
- Added support for custom redirection on Login and Logout.
2.9
- Google reCAPTCHA v3 has been implemented on the WordPress login page to enhance security.
- Added Google reCAPTCHA to the password recovery form.
- Security and performance improvements.
- Updated minimum PHP requirements to 7.2.
2.8.6
- Tested up to WordPress version 6.5.2.
2.8.5
- Fixed: SSL issue when verifying reCAPTCHA during login.
- Updated reCAPTCHA verification method to use
wp_remote_post()instead offile_get_contents(). - Resolved an issue with header modification in the authentication process.
2.8.4
- Tested up to WordPress version 6.3.1.
2.8.3
- New free images.
- Code improvements – Admin notices.
2.8.2
- Added: Logo width – Standard and Premium Design.
- Added: Logo height – Standard and Premium Design.
- Added: Logo position – Standard and Premium Design.
- Added: Background size – Standard and Premium Design.
- CSS code improvements – My Images.
2.8.1
- CSS code improvements – Standard Design.
2.8
- Code improvements.
- Login form improvements for mobile devices.
- Registration form improvements for mobile devices.
2.7
- Code improvements.
- Login form improvements.
- Added: „Privacy Policy“ menu on the WordPress login screen.
- New: Added a Premium design.
- New: Option to remove the language selector on the login screen (added in WordPress 5.9).
2.6
- Code improvements.
- Google reCAPTCHA v2 improvements in login and registration forms.
- Added: Two new Premium designs.
2.5
- Added: Google reCAPTCHA v2 for login and registration forms.
- New: Option to disable Google reCAPTCHA v2 in login and registration forms.
2.4.1
- Fixed JavaScript error.
2.4
- New free images.
2.3
- Code improvements.
2.2
- Code improvements.
2.1
- Bug fixes.
2.0
- Added: New basic and standard design for the login page.
1.1
- Added new CSS.
1.0
- Initial Release.