=== Private! Wordpress Access Control Manager === Contributors: X-Blogs Donate link: http://plugins.x-blogs.org/private Tags: privacy, private, closed, restricted, registered only, posts, pages, categories, tags, family blog, intranet, login, access, remove feed, password, moderation, protect, brute force, Generator, tarpit Requires at least: 3.0.0 Tested up to: 3.0.1 Stable tag: 1.2.2 Manage easily, who is allowed to access your blog or certain parts of your blog or just improve the security of your installation == Description == Private! makes it possible to build private blogs for your friends, family or your business. You can also use it to protect paid content on your page. The configuration is as simple as powerful. *NEW:* Improve the security of your blog by customize your login failure messages, prevent brute force attacks, slow down attackers or just add or remove RSD/WLW/Generator Tags from your blog. Lock down your blog and decide who can access your front page, blog page, content pages, category archive, tag archive, search, feeds and so on. You can allow full access to your blog and restrict the access to posts in single or multiple categories and/or tags. You can allow access to certain posts even, if they are in protected categories or tags. You can give your users access to restricted areas for years or seconds. It's up to you! English and german translations are included. This is an initial release of my first wordpress plugin. Please tell me about bugs and errors or send me translations. = Features = * Easy to use ajax featured admin pages * Restrict access to your whole blog or to certain features, like archives, search or single posts * Allow access by Roles, Capabilities or Userlevels or mix them all * Allow or deny access to certain categories or tags or to single posts * Redirect unauthorized users to internal or external pages * Define how long a user can access your pages * Full I18n support * Remove all entries from the database with just one (maybe two) click(s) = Security Features = * Send or remove extra headers for WLW or RSD capable blog clients * Customizable login error messages * Remove version from or the whole Generator Tag * Encrypt (Triple DES) your password with javascript before sending login informations * Brute Force Protection * Tarpit Protection * Define maximum login attempts or lockout time for attackers = Multisite Features = * Full multisite compatible * Define if all logged in users can access your pages or just those, who are related to your blog = Translations = * en_US (english) * de_DE (deutsch) == Installation == 1. Upload `private` folder to the `/wp-content/plugins/` directory 2. Activate the plugin through the 'Plugins' menu in WordPress 3. Configure who should be allowed to access your blog or parts of your blogs 4. Decide for every user, how long a user should be able to see restricted areas (optional) == Frequently Asked Questions == = I cannot access my blog? = Please read the descriptions. This plugin is very restrictive. If you just click enable, you will not be able to access your blog. But the good news is, the plugin will not lock you out, click on personal settings and give yourself an authorization timestamp in the future and you are back in business. = Is it compatible to cache plugins? = It should be. Tell your caching script, that it should not cache logged in users (that should be the default) and clear the cache after configuration. Regular pages for guests should be cached. Restricted areas should not be cached, as the user must be logged in. == Screenshots == 1. *Interface in English* 2. *Oberfläche in Deutsch* == Changelog == = 1.2.2 = Fixed: Wrong parameter count on form_row = 1.2.1 = Fixed: Secure key was not depending on your installation = 1.2.0 = * Added: Secure login script = 1.1.1 = * Fixed: wrong datatype in array = 1.1 = * Added: New interface design * Added: Allow access to attachments * Added: Disable all restrictions with a single click * Added: Customize your login error messages * Added: Prevent against attackers with tarpit technology * Added: Brute force prevention * Added: Define maximum login attempts and lockout time for brute force attempts * Added: Remove or anonymize your Wordpress Generator Meta Tag * Added: Notification of recent updates * Changed: Seperate settings for RSD and WLW headers * Fixed: Some language strings * Fixed: Some unitialized variables * Fixed: Issue on setting the time for access allowed * Fixed: Allowing single posts also allowed access to pages * Fixed: logged in users may had lower rights than logged out if they were not approved * Fixed: fixed some very complicated rules with tags and categories in single posts * Fixed: A lot of testing with all kinds of rules = 1.0.4 = * Another fix in multisites * Deleted some warnings about uninitialized vars = 1.0.3 = * Fixed a bug in non multisite environment = 1.0.2 = * Fixed a bug with deleting user settings in multisite environment = 1.0.1 = * A lot of small bugfixes - mainly wrong paths and forgotten translations = 1.0 = * Initial release - it may let explode your hamster!