內容簡介
RGBmind Ephemere 是一款輕量級、安全且專注於網路安全的存取控制外掛，旨在管理任何 WordPress 網站的臨時及時間限制用戶存取。此外掛確保在預定限制達成時，自動且可靠地撤銷存取權限。
【主要功能】
• 精確的到期時間設定
• 最大登入次數限制
• 即時帳號鎖定
• 存取監控功能
• 即時活躍會話失效
• 完全國際化支援
外掛標籤
開發者團隊
原文外掛簡介
RGBmind Ephemere is a lightweight, secure, and cybersecurity-focused access control plugin designed to manage temporary and time-limited user access on any WordPress site.
Built to meet strict WordPress development standards and cybersecurity principles, the plugin allows administrators to grant access to external developers, partner agencies, IT contractors, auditors, or clients with the guarantee that access will be automatically and reliably revoked when predefined limits are reached.
The plugin is 100% free, fully functional, and unrestricted. For advanced agency and enterprise workflows (such as passwordless One-Click Magic Links, GDPR Access Audit Log, and Security Alerts), a separate commercial companion add-on is available.
Key Free Features
Precise Expiration Schedule: Set exact expiration date and time using native HTML5 datetime-local inputs, fully synchronized with your WordPress site timezone.
Maximum Login Threshold: Limit total allowed logins (e.g. allow only 3 logins). Once the threshold is met, the account is automatically locked out.
Instant Account Lockout: Instantly revoke access with a single checkbox toggle, without altering user passwords or deleting accounts.
Access Monitoring: Real-time read-only view of login counts and last login timestamp, with an option to reset the counter when re-enabling access.
Real-Time Active Session Invalidation: If an active temporary user is browsing the admin dashboard when their expiration time arrives, their session and authentication cookies are revoked immediately.
Translation Ready (i18n): Fully internationalized with POT template included, adhering to WordPress core localization standards for community translations via translate.wordpress.org.
Architecture & Cybersecurity
Zero Custom Database Tables: Uses native WordPress user metadata (get_user_meta, update_user_meta, delete_user_meta) and wp_options.
Zero External Server Latency: 100% local execution, zero external API tracking calls, fully GDPR compliant.
Strict Permission Checks: Only users with the promote_users capability (Administrators) can view or modify temporary parameters.
CSRF Protection: Every action is guarded by WordPress cryptographic nonces.
Clean Uninstallation: uninstall.php completely wipes all created user metadata and options upon plugin deletion.
Commercial Companion Add-on (PRO)
For web agencies and IT maintenance professionals requiring advanced capabilities, the separate commercial companion add-on RGBmind Ephemere PRO seamlessly integrates with this free plugin:
⚡ One-Click Temporary Login Link (Magic Link):
Generate an encrypted, single-use login link from the user profile. Contractors and auditors can log in with a single click without sharing passwords. Only the SHA-256 hash is persisted in the database.
🛡️ Detailed Access Audit Log:
View the last 10 logins directly in the user profile, showing exact timestamps, authentication method, and GDPR-anonymized IP addresses.
🔔 Real-Time Security Email & Webhook Alerts:
Receive immediate email notifications whenever a temporary account expires, reaches its login cap, or is locked out. Supports HTTP Webhooks for Slack, Discord, Zapier, or Make integrations.
Visit rgbmind.com/ephemere to learn more about the PRO companion add-on.
