Allow Network Signups Only From Certain Email Domains
Rejects user signups on the network unless the email address belongs to one of your domains, such as a school or company network.
Snippet Library
WordPress code snippets, ready to use
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Allow Your Site to Be Embedded Only on Partner Domains
Replaces the usual same-site framing rule with a Content-Security-Policy frame-ancestors list, so your pages can be shown in iframes on the partner sites you name and nowhere else.
Allow the Administrator Role Only for Company Email Addresses
Refuses to give the administrator role to accounts whose email address is not on one of your approved domains, whether set from the profile screen, the Add User screen or a bulk role change.
Assign a Role Based on the Email Domain
Gives people who register with certain email domains a different role automatically, for example staff at your company become Contributors.
Block Disposable Emails in Mailchimp for WP Forms
Refuses newsletter signups from throwaway email domains in Mailchimp for WordPress forms, keeping your audience clean and your Mailchimp bill lower.
Block Email Domains in Contact Form 7
Rejects Contact Form 7 submissions whose email address belongs to a domain on your block list, with a clear message under the email field.
Block Email Domains in Fluent Forms
Shows an error when someone uses an email address from a domain on your block list, such as throwaway inbox services, in a Fluent Forms form.
Block Email Domains in Gravity Forms
Shows an error when someone enters an email address from a domain on your block list, such as throwaway inbox services, in any Gravity Forms email field.
Block Email Domains in WPForms
Shows an error when an email address from a domain on your block list, such as throwaway inbox services, is entered in any WPForms email field.
Clean Up Email Recipient Lists Before Sending
Removes duplicate, malformed and placeholder addresses (such as example.com or .test domains) from email recipient lists, so one bad address does not make the whole email fail.
Enable HTTP Strict Transport Security (HSTS)
Tells browsers to always use HTTPS for your domain for one year. Only enable it once the whole site, including subdomains you use, works over HTTPS.
Let Other Sites Read Your Feeds With JavaScript
Sends a CORS header with your RSS and Atom feeds, so web apps, widgets and dashboards on other domains can load them with fetch() instead of hitting a browser error.
MemberPress: Only Allow Sign-Ups From Certain Email Domains
Rejects MemberPress registrations unless the email address belongs to one of your allowed domains, ideal for company or school memberships.
Never Email Certain Addresses or Domains
Removes addresses and whole domains on your suppression list from every outgoing email, such as bouncing inboxes or people who asked not to be contacted, and skips emails left with no recipient.
Only Allow Registration From Certain Email Domains
Limits sign-ups to email addresses at the domains you list, for example your company or school domain.
Open External Links in a New Tab
Adds target="_blank" and rel="noopener noreferrer" to links in post content that point to other domains. Optionally adds nofollow too. Requires WordPress 6.2 or newer.
Paid Memberships Pro: Restrict Checkout to Certain Email Domains
Only lets people check out with an email address from your allowed domains, for company, school or association memberships.
Reject Registrations From Email Domains That Cannot Receive Mail
Checks that the email domain of every new registration has mail (MX) records, and refuses sign-ups from made-up or mistyped domains that bots and spammers often use.
Send Comments From Blocked Email Domains to Spam
Sends comments to the spam queue when the commenter's email address belongs to a throwaway inbox service or any other domain on your list.
Skip Loading Translations on English Sites
Stops WordPress, plugins and themes from loading translation files on the front end (or everywhere) to save memory and time on sites whose visitors read English anyway, with a list of text domains to keep.
Spam Comments Linking to Suspicious Domains
Sends comments to spam when the commenter's website field points to a domain ending you have chosen to distrust, such as .xyz, .top or .click.
Stop Browsers Prefetching DNS for Links on Your Pages
Sends the X-DNS-Prefetch-Control header to tell browsers not to look up the domains of every link on your pages in advance, so visitors' DNS providers do not learn which sites you link to before they click.
Third-Party Requests Inspector in the Admin Bar
Adds an admin bar item on the front of the site that counts the external domains the current page loads files from, and lists them on click, to help you keep your cookie notice and privacy policy accurate.