Admin Notice When an Email Fails to Send
Shows administrators a warning in the dashboard when WordPress could not send an email, with the error message, so delivery problems are noticed quickly.
Snippet Library
3,040 free snippets from the WPIDE team and the community. Copy the code, or add any snippet to your site in one click with WPIDE.
Shows administrators a warning in the dashboard when WordPress could not send an email, with the error message, so delivery problems are noticed quickly.
Adds an "Affiliate Area" link to the toolbar for logged-in affiliates, showing their unpaid earnings, so they can reach their dashboard from anywhere on the site.
Adds a [wpide_affiliate_stats] shortcode that shows the logged-in affiliate their unpaid and paid earnings, referral count, visits and personal referral link on any page.
Scans the uploads folder once a day for PHP files, which never belong there and usually mean a backdoor, and emails the administrator and shows a dashboard warning when new ones show up.
Emails the site admin whenever someone requests a password reset for an administrator account, an early warning sign of an attempt to take over the site.
Checks your site's root folder once a day and emails the administrator when wp-config.php, .htaccess, .user.ini or php.ini change, or when new PHP files appear next to WordPress's own files.
Emails the site's admin address whenever any administrator account changes its email address or password, a key warning sign of an account takeover.
Turns on Application Passwords for local and development copies of the site that run on plain http, so you can test REST API integrations and apps locally the same way as in production.
Rejects user signups on the network unless the email address belongs to one of your domains, such as a school or company network.
Temporarily blocks logins for everyone except administrators, for example during a migration or a security incident.
Keeps automatic security and maintenance releases of WordPress (like 6.8.1 to 6.8.2) but stops automatic major upgrades.
Empties the Easy Digital Downloads cart before a new item is added, so each purchase contains a single download, which suits licence or membership sales.
Replaces the cart contents whenever a new product is added, so each order contains a single product. Useful for services, bookings and memberships.
Lets administrators upload SVG files to the Media Library. Files containing scripts, event handlers or javascript: links are rejected.
Keeps XML-RPC available for the services you list (such as Jetpack or a publishing app on your office network) while answering every other XML-RPC request with a 403 error.
Replaces the usual same-site framing rule with a Content-Security-Policy frame-ancestors list, so your pages can be shown in iframes on the partner sites you name and nowhere else.
Refuses to give the administrator role to accounts whose email address is not on one of your approved domains, whether set from the profile screen, the Add User screen or a bulk role change.
Adds Media > Alt Text Editor, a page that lists images without alternative text with a thumbnail and a text field next to each, so you can describe dozens of images quickly and save them all at once.
Replaces the plain underline on links inside post content with a thin line that thickens on hover, a subtle touch that keeps links easy to spot.
When a user account is deleted, keeps their comments but replaces the name with "Former member" and removes the email address, website and IP address stored with them.
Keeps Application Passwords available for administrators (for integrations and apps) but removes them for every other user.
Adds an existing coupon to the cart as soon as the subtotal reaches an amount, and removes it again if the cart drops below, so shoppers never need to type a code.
New sign-ups wait for an administrator to approve them on the Users screen before they can log in, and get an email once approved.
Adds a "Current password" field to the profile screen and refuses changes to your own email address or password unless it is correct, so someone using an unattended logged-in browser cannot take over the account.