Restrict Unfiltered HTML to Administrators
Only administrators may save raw HTML such as scripts and iframes in posts. Editors get the same safe HTML filtering as authors.
Snippet Library
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Only administrators may save raw HTML such as scripts and iframes in posts. Editors get the same safe HTML filtering as authors.
Adds common HTTP security headers to front-end responses: nosniff, same-origin framing, a strict referrer policy and a restrictive permissions policy.
Restricts creating BuddyPress groups to the roles you choose, such as editors or paying members, while everyone can still join groups.
Limits chosen coupon codes, such as a welcome discount, to customers who have never placed a paid order, checked by account and billing email.
Adds a noindex instruction to LifterLMS lessons, quizzes and certificates, which are usually locked and only show crawlers a restriction message.
Restricts front-end search results to blog posts, leaving out pages and other post types.
Restricts the block widget editor and the Customizer to a short list of blocks that make sense in sidebars, keeping widget areas tidy for clients.
Caps how many items from a category one order can contain, useful for limited drops, rationed products or age-restricted goods.
Adds a "Members only" box to the post and page editor; restricted content shows a login prompt to visitors and to roles you did not tick, and stays out of search and feeds for them.
Rejects a Gravity Forms date of birth that makes the person younger than the age you set, for age-restricted sign-ups and applications.
Only lets people check out with an email address from your allowed domains, for company, school or association memberships.
Only administrators can lock and unlock blocks, so locked layouts stay intact when other users edit content.
Gives the Button block its own small palette of brand colors and removes the custom color picker for it, so every button on the site stays on-brand.
Makes chosen coupon codes work only for customers with specific roles, such as staff discount codes or trade-only promotions.
Hides the "Code editor" mode of the block editor from everyone except administrators, so other users only edit visually.
Returns an authentication error for REST API requests from visitors who are not logged in, with an allowlist for routes your site needs publicly.
Sends subscribers, customers and other users without editing rights from wp-admin to the WooCommerce My Account page or the homepage, with options to keep the profile screen open and hide the admin bar. AJAX and front-end forms keep working.
Adds a restrictive sandbox to iframes in posts that come from sites not on your trusted list, so an embedded page cannot redirect your visitors, open pop-ups or run scripts against your site.
Restricts the site search to titles, so results contain only posts whose title matches, which is useful for glossaries, directories and recipe sites.
Sends nosniff, a strict referrer policy, a restrictive permissions policy and a cross-origin opener policy on dashboard and login pages, which front-end header snippets do not cover.
Stops checkout when the cart contains products from a restricted category, such as batteries or plants, and the shipping country is not on your allowed list.