Skip to main content
Agency Program Get 2× more leads and save 50% on hosting. Built for agencies ready to grow. Book a call
Autologin Links icon

Autologin Links

v1.12.0
by WPAutoLogin · 4.7 (15 reviews)

WARNING: THIS PLUGIN CAN BE INSECURE IF NOT USED CAUTIOUSLY. Allows selected users to autologin to your WordPress website via autologin links.

9K+ active installs Updated Feb 25, 2021 Tested to 5.6.14
Try Demo Download
Pre-installed Ready in ~10s No card

About Autologin Links

This plugin allows administrators to generate autologin links for their WordPress website, logging in visitors under a certain user name. It bypasses the standard authentication method of WordPress and should only be used if you understand the security issues mentioned on the plugin website. Autologin codes are saved as plain text, so anyone with access to the WordPress database can obtain the code for a certain user.

Screenshots

Autologin Links screenshot
Autologin Links screenshot

Changelog

1.12.0

  • Feature: Add admin menu under Settings -> Autlogin Links that allows to:
  • Feature: Disable the “generate autologin-link” adminbar menu for good.
  • Feature: Set the details of the new loging-lockout feature.
  • Feature: (Security) Add limited number of login retries from a single remote
    address. Remote IP addresses are blacklisted for certain amount of time after
    too many login failures. Can be disabled from the new menu.
  • Fixed: Deleting autologin links was impossible after a recent wordpress update.

1.11.3

  • Fixed: When using the plugin on big websites, the plugin was obtaining a list of
    all users for the adminbar leading to OOM issues.
  • Update language files and add Makefile generator to automate building all
    translation files.

1.11.2

  • Add support for X_FORWARDED_PREFIX to allow serving wordpress installations
    using a proxy.
  • Merged PR: Add custom filter for generating example urls called
    ‘pkg_autologin_links_sample_url_prefix’. Thanks to https://github.com/mircobabini

1.11.1

  • Fix issue for double include of fuse_url_with_site_url

1.11.0

  • Add limit to the number of autologin-links shown in the admin
    menu (GitHub issue #11)
  • Add new constant PKG_AUTOLOGIN_VERSION allowing to check the
    autologin link version in-code
  • Fix: spaced getting stripped from extra query parameters when
    adding a autologin link.

1.10.1

  • Fixed readme
  • Added more testing platform to the intergation tests
  • Small fix for old PHP version 5.5
  • Add even more cache-prevention code
  • Add JavaScript linter to debug JavaScript related issues earlier
  • Fixed JavaScript bugs

1.10.0

  • Switched to Semver versioning scheme.
  • Fixed accidental global namespace pollution
  • Attempted fixing serving of seemingly cached websites when visting an autologin
    link by sending no-cache headers when visiting a autologin link website.
  • Autologin-links are now generated on the server via AJAX

1.09

  • Fixed vulnerability where autologin-links were verified with a case insensitive
    comparison.

1.08

  • Added integration test suite
  • Fix popup dialog for generating links with modern styles
  • Implemented concatenation fix “.” by Hannes Etzelstorfer
    • See: https://wordpress.org/support/topic/php-7-7-1-compatibility/
  • Reorganized svn branches to make development and deployment easier
  • Moved code development repository to GitHub:
    • https://github.com/MrApplejuice/wp-autologin-links

1.07

  • Fixed HTTP/HTTPS protocol redirection. Special thanks at user @quiquoqua for noting.
  • Updated website details.

1.06

  • Fixed long standing bug, not allowing one to update their profile page when
    an autologin link was set for the user.

1.05

  • New UI for administrators to generate autologin links for arbitrary pages
  • Added screenshots
  • Updated i10n files, however…
  • TODO: …i10n seems to be broken at the moment (.mo file is ignored)

1.04

  • Minor update of a line checking on invalid userid
  • Major review checking if the code still is working with the newest version of
    Wordpress which is should. I cannot find any vulnerabilities that are related
    to this plugin except for the ones mentioned in the module description.

1.03

  • Quick-fix was too quick, more inline directory strings changes were necessary

1.02

  • Fixed directory name to match conventions on wordpress.org

1.01

  • First published version

Try other plugins