saintsystems / disable-user-login Goto Github PK

See: https://wordpress.org/support/topic/disable-user-login-vulnerability-found-in-1-3-7/

It would be nice to have a global option to disable all users, but admins. Even better with a custom message. Or with the option to select roles/users as an allow list instead disallow list.

Background: When migrating a site to another server or doing updates, it would be great to just disable login to avoid changes while working on the site.

Hi ;)
Please add database synchronization. During login, the user's login would be checked against the database. If it appears there, the user cannot log in. Allow to customize the database and the table and columns in which the user would be checked.

Even if something application password (#7) available on the site with an extra plugin, if capabilities are removed for a user, then it will safeguard what access the user can have.

Similarly, password reset can be disabled for the user

I like this plugin, very simple and straight to the point.
It would be a nice feature to be able to customize the message via back end.

Hello!

Thanks very much for merging #5 yesterday. I'd love to pull this version into our repo, but both wpackagist and the Wordpress directory only have version 1.3.1.

Not totally sure how to increment the version officially, but I'm assuming that it involves creating a new "release" on GitHub. Let me know if it's something I can help with.

For quickly disabling users

It would also be helpful to add a filter in the users screen to filter disabled users.

If a user had already created application password for their account, they can keep accessing all the rest API with their app password.

Here is a sample pull request from another plugin - humanmade/disable-accounts#3