Ban IPs That Try Common Attack Usernames
Blocks an IP address from logging in for a day as soon as it tries a username like "admin" or "test" that does not exist on your site.
Snippet Library
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Blocks an IP address from logging in for a day as soon as it tries a username like "admin" or "test" that does not exist on your site.
Adds Open Graph and Twitter Card meta tags (title, description, image, URL) so links shared on social networks show a proper preview. Skipped when an SEO plugin is active.
Sends you a hidden copy of every purchase receipt that Easy Digital Downloads emails to customers, so you can check exactly what they received.
Registers a block bindings source that shows a post's main category name, link or description in any paragraph, heading or button, for example as a label above titles in a Query Loop.
Refuses orders placed with throwaway email services, so order confirmations, downloads and receipts reach a real inbox.
Rejects purchases made with throwaway email addresses on the Easy Digital Downloads checkout, so download links and receipts reach a real inbox.
Silently rejects Contact Form 7 submissions from IP addresses or ranges you list, such as a persistent spammer, while the rest of the site stays open to them.
Stops Fluent Forms submissions from IP addresses or ranges you list, such as a persistent spammer, while they can still read the site.
Stops Gravity Forms submissions from IP addresses or ranges you list and marks them as spam, without blocking those visitors from reading the site.
Rejects WPForms submissions from IP addresses or ranges you list, such as a persistent spammer, while they can still read the site.
Temporarily blocks visitors who hit more than 20 missing pages within a minute, a typical sign of vulnerability scanners probing for old plugins and backup files.
Denies access to the whole site for the IP addresses and IPv4 ranges you list, for example a persistent spammer or attacker.
Refuses login, password reset and registration requests sent by tools such as curl, wget, python-requests or empty user agents, which real browsers never use and brute-force scripts often do.
Adds Tools > Uploads Protection with a button that writes .htaccess rules to your uploads folder so PHP files there can never be run, even if one slips through an upload.
Rejects checkout when the shipping address is a PO Box or post office locker, for couriers that cannot deliver there.
Adds a timeline pattern with a year column and a description column for each milestone, for About and history pages.
Adds an FAQ pattern built from core Details blocks, so visitors click a question to reveal its answer, with no plugin and no JavaScript.
Adds a pattern with a heading and six short feature descriptions in two rows of three columns, for product and service overviews.
Refuses to publish content that still contains placeholder words such as "Lorem ipsum", "TODO", "TK" or "[insert", so unfinished drafts never go live by accident.
Adds an invisible link that real visitors never see and well-behaved search engines are told to skip; any client that requests it anyway is blocked from the site for 24 hours.
Removes routine entries such as "became a registered member", "changed their profile picture" and new friendships from the activity streams.
Turns links into plain text in activity updates posted by members who joined recently, which takes the reward out of spam sign-ups.
Tells WP Rocket to keep separate cached copies for URLs with the query parameters you list, such as a currency or filter parameter, instead of skipping the cache for them.
Replaces the version number on your theme's and plugins' CSS and JavaScript URLs with the file's last-modified time, so browsers and CDNs cache files for a long time but always fetch a fresh copy right after you change one.