My Private Site – Make Your Whole Site Private, Force Login & Block Registration Spam

4.2

• Added Spam Account Cleanup, a staged dry-run, CSV export, and batch deletion tool for safely removing spam subscriber accounts.
• Added optional reCAPTCHA protection for the WordPress registration form, sharing the existing reCAPTCHA keys with Login Guard.
• Added a public user-insert backstop so selected Registration Spam Guard checks can block suspicious unauthenticated user creation outside the default registration form.
• Strengthened Spam Account Cleanup protections for hidden/custom post types, detected store-order customer records, and EDD/WooCommerce customers.
• Increased Registration Spam Guard log retention from 20 to 100 entries.
• Added default-off deterministic spam signals for digit-dominant email addresses, gibberish email addresses, and profile bios containing URLs.
• Added suspicious Gmail plus-alias detection to Registration Spam Guard.
• Added reserved administrator username, URL-like username, crypto scam phrase, and disposable email domain detection to Registration Spam Guard.

4.1.1

• Added the Protection-tab Registration Spam Guard controls for honeypot, gibberish username, excessive email dots, missing MX, and StopForumSpam checks.
• Added reCAPTCHA Login Guard settings, including Google site key and secret key fields.
• Added admin notices and settings save handling for the new spam guard and reCAPTCHA controls.
• Updated AI Crawler Defense wording and related Site Privacy UI labels.

4.1.0

• Added Registration Spam Guard and reCAPTCHA login protection to the free plugin.

4.0.4

• Fixed Site Privacy save actions being intercepted by the robots.txt retest control.
• Improved AI Crawler Defense retest notice when a physical robots.txt file is present.

4.0.3

• Added AI Crawler Defense subsystem
• Added built-in video tutorials for all sections
• Added Manage Settings subtab to Advanced to save, restore, and reset settings
• Substantially optimized plugin startup operations
• Added subtabs engine for easier grouping of functions
• Updated main My Private Site page to make it more readable
• Fixed bug in mail list sign up experience
• Refactored some of the source code for more maintainable files
• Removed direct serialization of settings array for increased security
• Updated EDD licensing library
• Upgraded CMB2 library from 2.10.1 to 2.11.0

3.2.1

• Safeguarded selective content processing with nonce and capability checks
• Hardened core admin handlers with current_user_can for membership, site privacy, landing, advanced, and more

3.2

• Added feature to hide the admin bar from the front-end for logged-in users
• This feature works whether the site is set to private or not

3.1.1

• Minor UI tweak to provide better clarity for theme option

3.1.0

• Added REST API Guardian protection to core plugin
• Increased size of heading font in dashboard
• Replaced tags set (login, pages, private, security, visibility, plugin, page, posts, post) with (registered only, privacy, protected, restricted, password protect)

3.0.14

• Minor compatibility update for WordPress 6.4.

3.0.13

• Minor update to better support my_private_site_public_check_access_by_page filter.

3.0.12

• Slight improvement to HTML support pages

3.0.11

• Fixed a CMB2 type error that popped up from time to time (Thanks, Michael!)

3.0.10

• Fixed a bunch of over-eager security checks

3.0.9

• Fixed compatibility switch bug

3.0.8

• Fixed some security bugs

3.0.7

• Added more hooks for increased granular control of access
• Fixed some minor bugs

3.0.6

• Moved compatibility mode option to Site Privacy tab and added additional theme compatibility fixes

3.0.5

• Added a compatibility mode option on the Advanced tab which will hopefully finally fix the Elementor issues

3.0.4

• Possible fix for Elementor incompatibility issues
• Fixed some small bugs

3.0.3

• Added Advanced feature allowing users to specify custom password reset page

3.0.2

• Fixed duplicate header bug found on some systems

3.0.1

• Minor bug fixes
• Added uninstall telemetry

3.0.0

• Complete rewrite with an entirely new, streamlined UI
• Added the selective content subsystem

2.14.2

• Minor fix for password reset. Thanks to user o2Xav.

2.14.1

• Minor support update

2.14

• Force login at ‘get_header’ instead of ‘template_redirect’ Action to be compatible with wpengine.com hosting
• Allow Custom Login page that is NOT on the current WordPress site, and clean up Settings page validation of related fields
• Fix double display of Error Messages on Settings page

2.13

• Remove Plugin’s entry on Users submenu on WordPress Admin panels
• Remove associated Setting, which determined whether Users submenu entry existed

2.12

• Wait until Pretty Permalinks applied before deciding whether to force a login
• Add an Override Advanced Setting with Warnings on Usage, to allow Landing Location and Custom Login to both be specified.
• Correct coding error that allowed Landing Location with Custom Login, a potential Redirection error
• Fix Error Log warning on [mb]strpos Offset parameter

2.11.4

• Use Custom Login setting, if present, to redirect failed login attempts with blank username and/or password

2.11.3

• Use Custom Login setting, if present, to redirect failed login attempts

2.11.2

• Provide a Setting to disable User with No Role behaviour introduced in 2.11

2.11.1

• Remove forced logout when User with No Role attempts to access a Site (Network/Multisite install), to fix repeated messages when wp_logout is hooked by other plugins

2.11

• In a WordPress Network (“Multisite”), block Users with No Role on the current Site
• Make Landing Location work when free Paid Membership Pro plugin is activated

2.10.1

• Add setting to obey Landing Location for users who login via a URL of wp-login.php without a &redirect_to= following

2.10

• Add setting to not display a Users submenu option for the plugin’s settings
• Conditional logic for Settings Saved update message in Validate function

2.9

• Set Landing Location for logins via Meta Widget link, as well as automatic Login prompts

2.8

• Add Prefix option to Always Visible URLs
• Automatically use mb_ Multi-Byte string functions, if available

2.7

• Add Custom Login URL setting

2.6.1

• Older versions of WordPress require a parameter be passed to get_post()

2.6

• Detect and make visible Login-associated Pages created by the Theme My Login plugin

2.5

• Allow other URLs to be Always Visible with new Setting

2.4.2

• Reveal BuddyPress /activate/ Activation page when Reveal Registration selected

2.4.1

• Fix bug in URL matching for Root, where one URL has a trailing slash and the other does not

2.4

• Handle BuddyPress’ redirection of Register URL in Reveal Registration

2.3

• Add Setting to Reveal Home Page on a Private Site
• Fixed Problems with wp_registration_url function in WordPress prior to Version 3.6

2.2

• Add the WordPress User Self-Registration field to the plugin’s Settings page
• Add the Settings page to the User submenu of Admin panel, too

2.1

• Add a settings checkbox to reveal the Register page for User Self-Registration

2.0

• Add Settings page, specifying Landing Location and turning Private Site off and on
• Warning for new default of OFF for Private Site until Settings are first viewed
• Add Networking Settings information page
• Track plugin version number in internal settings
• Replace WordPress Activation/Deactivation hooks with Version checking code from jonradio Multiple Themes
• Add Plugin entry on individual sites when plugin is Network Activated, and Settings link on all Plugin entries

1.1

• Change Action Hook to ‘wp’ from ‘wp_head’ to avoid Modify Header errors when certain other plugins are present

1.0

• Add readme.txt and screenshots
• Add in-line documentation for php functions