
內容簡介
ALD 登入頁面外掛可以透過 WordPress 幫助您以簡單的 markup 對登入頁面進行靈活的管理。這是另一個登入頁面自訂化外掛,操作簡單同時也相當靈活。
ALD 登入頁面外掛需要您的支持
若沒有像您這樣的使用者貢獻,這款免費外掛很難持續進行開發和支持。若您喜歡使用ALD 登入頁面外掛並認為它有幫助,請考慮得適當使用以下的支援管道。您的支持將有助於推動外掛的持續開發並且提高使用者支援。
外掛標籤
開發者團隊
原文外掛簡介
ALD Login Page lets you fully customize the WordPress login page — logo, colors, dimensions, and padding — through a clean admin settings panel. Built on WordPress core APIs, the plugin follows WordPress security best practices from top to bottom so you can customize your login page with confidence.
Why security matters for a login page plugin
The WordPress login screen is the most exposed entry point to your admin area. A poorly coded login plugin can become an attack vector. ALD Login Page is designed to avoid the most common pitfalls:
Settings API + Sanitization callbacks — all saved values pass through WordPress core sanitizers (`sanitize_text_field`, `sanitize_hex_color`, `esc_url_raw`) before they ever touch the database.
Output escaping everywhere — `esc_url()`, `esc_attr()`, and `esc_html()` are used on every dynamic value that reaches the browser, eliminating XSS vectors.
Capability gate on admin page — only users with `manage_options` can access settings. Unauthorized users are blocked before any output is rendered.
Direct-access gate — `defined( ‘ABSPATH’ ) or die` on every PHP file prevents direct URL access to plugin files.
Nonce + CSRF handled automatically — the WordPress Settings API inserts and validates security nonces on every settings save.
No raw SQL — the plugin never calls `$wpdb->query()` or similar directly.
No shell commands — no `eval()`, `exec()`, or `shell_exec()` anywhere.
Superglobal sanitization — all user-supplied query parameters are passed through `sanitize_key()` with strict comparison before being evaluated.
The result: a lightweight login customizer with a clean security posture. If you are reviewing this plugin for code quality, you will find no raw echo $_GET, no unescaped output, and no capability bypasses. We take security seriously and keep this plugin up to date with the latest WordPress core versions.
ALD Login Page Needs Your Support
It is hard to continue development and support for this free plugin without contributions from users like you. If you enjoy using ALD Login Page and find it useful, please consider use these support channels appropriately. Your support will help encourage and support the plugin’s continued development and better user support.
