Security
5 posts tagged Security.
Articles
How to force log out a WordPress user from every device, instantly
Ending a WordPress session on the server is easy — the user's open tabs just don't notice until they click something. Here are four ways to force a user out of every device, from the button hidden in core to a polling script that bounces their tabs to the login screen within a minute, with honest pros and cons for each.
Read more →
How to limit concurrent logins and stop account sharing in WordPress
WordPress lets one account stay signed in on as many devices as it likes — a phone, a laptop, and three friends' browsers all at once. Here are four ways to cap concurrent logins per user, from a ten-line snippet to a free plugin with three enforcement modes, with honest pros and cons for each.
Read more →
How to automatically log out inactive users in WordPress
WordPress keeps a login alive for 2 days — 14 with "Remember Me" — no matter how long the browser sits untouched. Here are four ways to add an idle timeout that signs inactive users out, from a one-line snippet to a full warning-countdown setup, with honest pros and cons for each.
Read more →
How to view active login sessions on a WordPress site
WordPress lists every account that exists, but never the ones signed in right now. Here are four ways to see active login sessions — from a raw SQL query to a one-click admin tool — with honest pros and cons for each.
Read more →
What the 404 to 301 tracking incident taught me about plugin security
In 2016 my most popular plugin shipped a usage-tracking feature that a partner turned into cloaked ads for search-engine crawlers. Here's a level-headed account of what went wrong and the lessons that still guide how I build plugins.
Read more →Other tags
Learn how we can help you build better.
Questions about a plugin, a licence, or an expert advisor — ask and get a straight answer from the team that wrote the code.