內容簡介
總結：Ace Login Block 可讓您使用自訂頁面取代預設的 WordPress 登入頁面，在區塊編輯器中進行設計和管理。這讓您可以在保持 Gutenberg 的靈活性和便利性的同時為您的使用者創建品牌化的登入體驗。
問題與答案：
1. 什麼是 Ace Login Block？
- Ace Login Block 是一個外掛，它允許您使用自訂頁面取代預設的 WordPress 登入頁面，在區塊編輯器中進行設計和管理。
2. 這個外掛提供了哪些功能？
- 可以替換預設的 WordPress 登入頁面為自訂的基於區塊的設計。
- 完全整合區塊編輯器，讓您完全控制登入頁面的版面配置。
- 允許使用預設的 WordPress 登入功能進行 POST 請求，以確保登錄提交的流暢性。
- 自訂重定向並將額外字段或品牌元素添加到登入頁面。
- 在自訂登入模板加載後防止進一步執行預設的 wp-login.php。
3. 這個外掛能提供什麼好處？
- 可以無縫地打造獨特且品牌化的登入體驗，同時確保與 WordPress 的登入處理兼容性。
4. 《Source》部分提到的資源在哪裡？
- 這個外掛的源代碼，包括未壓縮的 JavaScript 和 CSS，都可在 GitHub 上找到。
5. 這個外掛的授權狀況是什麼？
- 這個外掛根據 GPLv2（或更新版本）許可證授權，因為它需要遵循 WordPress.org 儲存庫規則。
外掛標籤
開發者團隊
原文外掛簡介
Requires PHP 8.2 or later. Passkeys also need PHP’s OpenSSL extension; if it is missing, passkeys switch themselves off and everything else keeps working. Tested on WordPress 6.6, 6.9 and 7.1.
If PHP is older than 8.2 or the bundled libraries cannot load, new logins are refused rather than quietly dropping your second-factor policy. Restore the supported runtime and the complete plugin package through your hosting account. Existing sessions and public pages remain available where WordPress itself supports that runtime.
Ace Login Block allows you to replace the default WordPress login page with a custom page of your choosing, all designed and managed within the block editor. This lets you create a branded login experience for your users while leveraging the flexibility and ease of Gutenberg.
Features include:
Replace the default WordPress login page with a custom block-based design.
Full integration with the block editor, giving you complete control over the login page layout.
Allow the default WordPress login functionality for POST requests to ensure smooth login submissions.
Customise redirects and add additional fields or branding elements to the login page.
Preserve core password reset and recovery screens when using a custom login page.
Role-based redirects and per-role 2FA requirements.
Passkeys (security keys) for passwordless login and as a second factor.
Email and authenticator app 2FA, plus backup codes.
Remembered devices that skip 2FA only (password still required).
Login lockout after repeated failed attempts. By default, 5 failures within 15 minutes locks the account for 30 minutes. Repeated failures from one IP address, or against a username that does not exist, are limited too.
A Security tab with a log of failed and blocked logins, filters, one-click unlocking and an optional email when a lockout happens.
Passkey policy settings: RP ID override, attestation preference, and per-role passwordless control.
Security:
Email codes expire after five minutes and can only be used once.
Second-factor codes are checked in constant time, with a low hourly attempt limit.
Authenticator app secrets are encrypted at rest with libsodium.
The 2FA endpoints do not reveal whether a username exists.
A passkey used instead of a password has to pass user verification.
If a factor an account depends on cannot be used, that account is refused with a clear message. The policy is never quietly dropped.
Ace Login Block provides a seamless way to craft unique, branded login experiences while ensuring compatibility with WordPress’s login handling.
Source
The source code for this plugin, including unminified JavaScript and CSS, is available on GitHub:
GitHub Repository
License
This plugin is licensed under the GPLv2 (or later) as it is required to follow WordPress.org repository rules.
Source and contributions
Source and build instructions: https://github.com/AceMedia/WordPress-Login-Block-and-Page
Public bug reports and feature requests are welcome in GitHub Issues. Ace Media maintains the upstream project and invites code contributors; please discuss changes before submitting a pull request. The GPL-2.0-or-later licence preserves your rights to use, study, modify and redistribute the code.
