Restricted Site Access: Control Access to Your WordPress Site

About Restricted Site Access

This plugin allows you to limit access to your website to only logged-in users or specific IP addresses. You can choose to redirect restricted visitors to the login page, display a custom message or page, or redirect them to a different location. It also offers additional configuration options for multisite networks.

Screenshots

Frequently asked questions

Is it possible to customize the redirect for SEO?

You can customize the redirect location, including an option to send visitors to the same requested path. Additionally, you can set the HTTP status code for SEO friendliness.

Changelog

7.5.2 – 2025-02-05

Note that this version bumps the WordPress minimum supported version from 6.4 to 6.5.

Changed: Bump WordPress “tested up to” version 6.7 (props @sudip-md, @jeffpaul, @mehidi258 via #335, #336).
Changed: Bump WordPress minimum from 6.4 to 6.5 (props @sudip-md, @jeffpaul, @mehidi258 via #335, #336).
Fixed: Add missing textdomain to a few strings (props @NekoJonez, @dkotter via #338).
Security: Bump axios from 1.6.7 to 1.7.4 (props @dependabot, @faisal-alvi via #326).
Security: Bump webpack from 5.90.0 to 5.94.0 (props @dependabot, @faisal-alvi via #327).
Security: Bump ws from 7.5.10 to 8.18.0 and @wordpress/scripts from 27.1.0 to 29.0.0 (props @dependabot, @faisal-alvi via #328).
Security: Bump express from 4.19.2 to 4.21.2, send from 0.18.0 to 0.19.0 and serve-static from 1.15.0 to 1.16.2 (props @dependabot, @peterwilsoncc via #340).
Security: Bump @wordpress/e2e-test-utils-playwright from 1.7.0 to 1.16.0, nanoid from 3.3.7 to 3.3.8, mocha from 10.2.0 to 11.0.1 and removes cookie (props @dependabot, @peterwilsoncc via #341).

7.5.1 – 2024-07-09

Note that this version bumps the WordPress minimum supported version from 5.7 to 6.4.

Changed: Bump WordPress “tested up to” version 6.6 (props @sudip-md, @jeffpaul, @dkotter via #313, #318).
Changed: Bump WordPress minimum from 5.7 to 6.4 (props @sudip-md, @jeffpaul, @dkotter via #313, #318).
Security: Bump tj-actions/changed-files from 32 to 41 (props @dependabot, @iamdharmesh via #297).
Security: Bump express from 4.18.2 to 4.19.2 (props @dependabot, @Sidsector9 via #312).
Security: Bump follow-redirects from 1.15.5 to 1.15.6 (props @dependabot, @Sidsector9 via #312).
Security: Bump webpack-dev-middleware from 5.3.3 to 5.3.4 (props @dependabot, @Sidsector9 via #312).
Security: Bump braces from 3.0.2 to 3.0.3 (props @dependabot, @iamdharmesh via #319).
Security: Bump pac-resolver from 7.0.0 to 7.0.1 (props @dependabot, @iamdharmesh via #319).
Security: Bump socks from 2.7.1 to 2.8.3 (props @dependabot, @iamdharmesh via #319).
Security: Bump ws from 7.5.9 to 7.5.10 (props @dependabot, @iamdharmesh via #319).

7.5.0 – 2023-12-14

Note: this release changes the default behavior for new installs in regards to IP detection. This shouldn’t impact existing installs but there are two filters that can be used to change this behavior. See the readme for full details.

Fixed: Update code snippet in the readme (props @dkotter, @jeffpaul via #291).
Security: For new installs, ensure we only trust the REMOTE_ADDR HTTP header by default. Existing installs will still utilize the old list of approved headers but can modify this (and are recommended to) by using the rsa_trusted_headers filter (props @dkotter, @peterwilsoncc, @dustinrue, @mikhail-net, Darius Sveikauskas via #290).
Security: Bump axios from 0.25.0 to 1.6.2 and @wordpress/scripts from 23.7.2 to 26.19.0 (props @dependabot, @dkotter via #293).

7.4.1 – 2023-11-14

Added: GitHub Action summary report for Cypress end-to-end tests (props @jayedul, @Sidsector9 via #258).
Added: Restricted_Site_Access::append_ips() method to add IP addresses programatically (props @Sidsector9, @faisal-alvi via #267).
Added: Repository Automator GitHub Action (props @iamdharmesh, @Sidsector9 via #273).
Changed: Bumped WordPress “tested up to” version 6.4 (props @kirtangajjar, @Sidsector9, @qasumitbagthariya, @jeffpaul via #271, #288).
Changed: WordPress compatibility validation library namespace (props @Sidsector9, @dkotter via #278).
Changed: Documentation to clarify what the restricted site access & discourage search engine options do (props @lkraav, @jeffpaul, @helen, @dinhtungdu, @bmarshall511, @Sidsector9 via #262).
Changed: Updates the Dependency Review GitHub Action to check for GPL-compatible licenses (props @jeffpaul, @Sidsector9 via #261).
Fixed: Issue with autovivification (props @mae829, @Sidsector9 via #281, @turtlepod via #281).
Security: Add PHP environment compatibility checker (props @vikrampm1, @Sidsector9 via #268).
Security: Bump word-wrap from 1.2.3 to 1.2.4 (props @Sidsector9 via #266).
Security: Bump semver from 5.7.1 to 5.7.2 (props @Sidsector9 via #264).
Security: Bump tough-cookie from 4.1.2 to 4.1.3 (props @Sidsector9 via #270).
Security: Bump @cypress/request from 2.88.10 to 2.88.12 (props @Sidsector9 via #270).
Security: Bump postcss from 8.4.18 to 8.4.31 (props @Sidsector9 via #279).
Security: Bump @babel/traverse from 7.20.0 to 7.23.2 (props @Sidsector9 via #279).
Security: Bump Cypress version from 10.3.0 to 13.2.0 (props @iamdharmesh, @Sidsector9 via #276).
Security: Bump @10up/cypress-wp-utils version to 0.2.0 (props @iamdharmesh, @Sidsector9 via #276).
Security: Bump @wordpress/env version from 5.4.0 to 8.7.0 (props @iamdharmesh, @Sidsector9 via #276).
Security: Bump @babel/traverse from 7.20.0 to 7.23.2 (props @dependabot, @Sidsector9 via #282).

7.4.0 – 2023-04-18

Added: Support for application passwords (props @kirtangajjar, @peterwilsoncc, @Sidsector9 via #247).
Added: Support for custom header based allow-listing (props @mikelking, @ravinderk, @dkotter, @jeffpaul via #242).
Changed: Support Level from Active to Stable (props [@jeffpaul](https://github.com/jeffpaul, @Sidsector9) via #244).
Changed: Bump WordPress “tested up to” version 6.2 (props @jayedul, @Sidsector9 via #251)
Changed: Improve Github actions workflow (props @Sidsector9, @dkotter via #227, #253).
Fixed: Plugin settings header UX (props @barryceelen, @Sidsector9 via #236).
Fixed: Issue that caused redirect loop (props @mikegibbons4, @Sidsector9, @cadic, @peterwilsoncc) via #221.
Security: Run E2E tests on the final ZIP build (props @iamdharmesh, @jayedul via #249).
Security: Bump json5 from 1.0.1 to 1.0.2 (props @Sidsector9 via #241).
Security: Bump simple-git from 3.15.0 to 3.16.0 (props @Sidsector9 via #243).
Security: Bump http-cache-semantics from 4.1.0 to 4.1.1 (props @Sidsector9 via #245).
Security: Bump @sideway/formula from 3.0.0 to 3.0.1 (props @Sidsector9 via #246).
Security: Bump webpack from 5.74.0 to 5.76.1 (props @Sidsector9 via #248).

View historical changelog details here.

Restricted Site Access