[WordPress] 外掛分享: User Access Blocker

WordPress 外掛 User Access Blocker 的封面圖片。

前言介紹

  • 這款 WordPress 外掛「User Access Blocker」是 2025-07-12 上架。
  • 目前有 30 個安裝啟用數。
  • 上一次更新是 2025-07-13,距離現在已有 227 天。
  • 外掛最低要求 WordPress 5.0 以上版本才可以安裝。
  • 外掛要求網站主機運作至少需要 PHP 版本 7.2 以上。
  • 尚未有人給過這款外掛評分。
  • 還沒有人在論壇上發問,可能目前使用數不多,還沒有什麼大問題。

外掛協作開發者

eliyahna |

外掛標籤

users | security | block users | access-control | user management |

內容簡介

總結:
User Access Blocker 是一個簡單但功能強大的 WordPress 外掛,允許管理員暫時或永久封鎖使用者訪問權限,而不會刪除他們的帳戶。適用於需要進行調查時暫停用戶訪問、暫時禁用未支付帳戶、封鎖問題使用者並保留其內容、以及在維護或轉換期間管理用戶訪問的情況。

問題與答案:
1. 如何使用 "User Access Blocker" 外掛暫時封鎖一個使用者的訪問權限?
- 前往 WordPress 管理員中的任何使用者個人資料頁面
- 捲動至 "存取控制" 部分
- 點擊 "封鎖訪問" 以防止該使用者登錄
2. 當用戶被封鎖時,他們會看到什麼訊息?
- 封鎖的用戶將看到:"您的帳戶已被封鎖。請聯絡管理員。"
3. 這個外掛具有哪些安全功能?
- 僅限管理員功能
- 所有操作均為獨立驗證
- 多層次權限檢查
- 資料消毒和驗證
- 安全的 AJAX 實作
- 透過適當轉義(XSS)保護
- 為了安全審計,記錄所有封鎖/解除封鎖操作
4. 如何卸載這個外掛?
- 透過 WordPress 管理員刪除時,外掛會執行適當的卸載程式,從資料庫中刪除所有外掛數據。

原文外掛簡介

User Access Blocker is a simple yet powerful WordPress plugin that allows administrators to temporarily or permanently block user access without deleting their accounts. This is perfect for situations where you need to:

Suspend user access during investigations
Temporarily disable accounts for non-payment
Block problematic users while preserving their content
Manage user access during maintenance or transitions

Key Features

Easy Toggle: Simple “Block Access” / “Unblock Access” button on user profiles
Instant Effect: Blocked users are immediately prevented from logging in
AJAX Powered: Block/unblock users without page refresh
Secure: Multiple permission checks and nonce verification
Non-Destructive: User accounts, posts, and data remain intact
Admin Only: Only administrators can block/unblock users
Self-Protection: Administrators cannot block themselves
Activity Logging: All block/unblock actions are logged for security audits
Clean Uninstall: Removes all plugin data when deleted

How It Works

Navigate to any user’s profile page in WordPress admin
Scroll to the “Access Control” section
Click “Block Access” to prevent the user from logging in
Click “Unblock Access” to restore their access

Blocked users will see: “Your account has been blocked. Please contact the administrator.”
Security Features

Administrator-only functionality
Nonce verification on all actions
Permission checks at multiple levels
Data sanitization and validation
Secure AJAX implementation
XSS protection through proper escaping
Activity logging for audit trails

Developer Information
Hooks and Filters
The plugin uses standard WordPress hooks:

authenticate – To check if a user is blocked during login
show_user_profile / edit_user_profile – To add the block button
personal_options_update / edit_user_profile_update – To save block status
admin_notices – To display blocked user warnings
wp_ajax_uab_toggle_user_block – For AJAX functionality

Database
The plugin stores block status in user meta:
* Meta key: _uab_user_blocked
* Meta value: boolean (true/false)
Uninstall
The plugin includes a proper uninstall routine that removes all plugin data from the database when deleted through the WordPress admin.
Support
For support, feature requests, or bug reports, please visit plugin support forum or GitHub repository.
Privacy Policy
This plugin does not collect any personal data. It only stores block status as user metadata within your WordPress database. No data is sent to external servers.
The plugin logs block/unblock actions to your server’s error log for security audit purposes. These logs remain on your server and are not transmitted elsewhere.

各版本下載點

  • 方法一:點下方版本號的連結下載 ZIP 檔案後,登入網站後台左側選單「外掛」的「安裝外掛」,然後選擇上方的「上傳外掛」,把下載回去的 ZIP 外掛打包檔案上傳上去安裝與啟用。
  • 方法二:透過「安裝外掛」的畫面右方搜尋功能,搜尋外掛名稱「User Access Blocker」來進行安裝。

(建議使用方法二,確保安裝的版本符合當前運作的 WordPress 環境。


1.0.2 | trunk |

延伸相關外掛(你可能也想知道)

  • Wordfence Security – Firewall, Malware Scan, and Login Security 》fective way to manage multiple WordPress sites with Wordfence installed from a single location., Monitor security status across all your sites from...。
  • Hostinger Tools 》- Hostinger Onboarding WordPress Plugin 简化和加快了WordPress网站的设置过程。, - 提供了简便和快速的方式来建立WordPress网站。。
  • Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 》le Plugins include Complianz GDPR, Disable Updates Manager, and Really Simple CAPTCHA., , Really Simple SSL是一個外掛,自動配置你的網站最大程度上使...。
  • Jetpack – WP Security, Backup, Speed, & Growth 》search engines, and grow your traffic with Jetpack. It’s the ultimate toolkit for WordPress professionals and beginners alike., , Customize and des...。
  • Limit Login Attempts Reloaded – Login Security, Brute Force Protection, Firewall 》Limit Login Attempts Reloaded 是一款WordPress外掛,可阻止暴力破解攻擊並透過限制常規登錄、XMLRPC、Woocommerce和自訂登錄頁面的登錄嘗試次數來優化您的...。
  • ManageWP Worker 》, Want to clone or migrate your WordPress website to a new host or domain? No problem! With ManageWP, you can easily clone or migrate your website ...。
  • Security Optimizer – The All-In-One Protection Plugin 》透過精心挑選且易於配置的功能,SiteGround Security 外掛提供了您所需的一切來保護您的網站並預防多種威脅,例如暴力破解攻擊、登錄錯誤、資料外洩等等。, ...。
  • Safe SVG 》Safe SVG 可以讓你安心地在 WordPress 中上傳 SVG 檔案!, 它能夠讓你允許上傳 SVG 檔案的同時,確保它們已經經過消毒以防止 SVG/XML 弱點影響你的網站。此外...。
  • Loginizer 》Loginizer 是一個 WordPress 外掛,可幫助您對抗暴力攻擊,當 IP 地址達到最大重試次數時,該外掛會阻止其登錄。您可以使用 Loginizer 將 IP 地址列入黑名單...。
  • All-In-One Security (AIOS) – Security and Firewall 》vated to your website, All-in-One Security's WAF will detect and block hacking attempts, adding an extra layer of security to your WordPress site. ...。
  • User Role Editor 》「User Role Editor」WordPress 外掛讓您輕鬆更改使用者角色和權限。, 只需打開您希望新增到所選角色的能力核取方塊,然後按「更新」按鈕以保存您的更改。完...。
  • MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites 》這是一個針對「MainWP Dashboard」的子外掛程式,可將您的 WordPress 網站連接至 MainWP Dashboard。, MainWP是一個完整的 WordPress 管理解決方案,是自助...。
  • Solid Security – Password, Two Factor Authentication, and Brute Force Protection 》ing iThemes Security Plugin can benefit you:, 保護您的 WordPress 網站的最佳外掛程式, 平均每天有 30,000 個網站遭受駭客攻擊,在網路上每 39 秒就會有一...。
  • Sucuri Security – Auditing, Malware Scanner and Security Hardening 》Sucuri Inc. 是全球公認的網站安全權威,專門為 WordPress 安全提供專業知識。, Sucuri Security WordPress 擴充套件對所有 WordPress 使用者免費提供。它是...。
  • SiteGuard WP Plugin 》版本: 1.6.7, , 您可以在日文網頁和英文網頁上找到文件、常見問題和更詳細的資訊。 , 安裝SiteGuard WP Plugin後,WordPress安全性會得到提高。, 本外掛是一...。

文章
Filter
Apply Filters
Mastodon