Check Login Lite

説明

Check Login Lite enhances your WordPress login security with multiple protective features:

  • IP whitelist / blacklist management
  • 🌍 Country-based access restrictions (up to 5 countries allowed)
  • ✉️ Email alerts when unfamiliar IP logs in
  • 💬 Discord webhook notification support
  • 🔐 Pseudo Basic Authentication system for emergency lockdown
  • 🧠 Automatic country list fetch
  • 📜 Login history log

No need for advanced setup. Simple UI inside WordPress admin dashboard.

External services

This plugin uses third-party services only to provide the features you configure.

  1. countriesnow.space (country list generation)

– Service URL: https://countriesnow.space/api/v0.1/countries
– Used for: Building and refreshing the selectable country list used in admin settings.
– Data sent: No personal data is intentionally sent by the plugin for this request.
– When sent: On activation and when refreshing the country list file.
– Terms: https://github.com/MartinsOnuoha/countriesNowAPI/blob/master/LICENSE
– Privacy: A dedicated privacy policy URL is not publicly provided by this service provider as of March 23, 2026.
– Additional references: https://countriesnow.space/ / https://documenter.getpostman.com/view/1134062/T1LJjU52?version=latest

  1. freeipapi.com (IP geolocation)

– Service URL pattern: https://free.freeipapi.com/api/json/{IP}
– Used for: Determining country from IP for admin access restriction and login alert context.
– Data sent: The IP address being checked (current request IP).
– When sent: During admin access checks, settings page rendering, and login alert evaluation.
– Terms: https://freeipapi.com/terms
– Privacy: https://freeipapi.com/privacy

  1. Notification providers (optional, admin-configured)

– Services: Discord Webhook, Slack Webhook, Chatwork API
– Used for: Sending security alert messages and emergency authentication credentials.
– Data sent: Site URL, username, login IP/country, emergency token/URL, and configured message body.
– When sent: Only when an alert/security event occurs and the corresponding provider is configured.
– Discord Terms/Privacy: https://discord.com/terms / https://discord.com/privacy
– Slack Terms/Privacy: https://slack.com/terms-of-service / https://slack.com/privacy-policy
– Chatwork Terms/Privacy: https://go.chatwork.com/en/terms.html / https://go.chatwork.com/en/privacy.html

This plugin does not include behavioral tracking or analytics for end users by default. Notification delivery is administrator-configured and event-driven.

インストール

  1. Upload the plugin folder to /wp-content/plugins/check-login-lite
  2. Activate the plugin through the ‘Plugins’ menu in WordPress
  3. Go to Settings > Check Login Lite in the admin panel
  4. Configure IP, country access, alert options, etc.

FAQ

Will this block me from logging in if I make a mistake?

No. The plugin always allows access from IPs in your whitelist, regardless of country settings.

What if I forget my Basic Auth credentials?

The pseudo Basic Auth expires automatically in 24 hours or after successful login.

Does it work on multisite?

Currently, this plugin is tested only in single-site installations.

評価

このプラグインにはレビューがありません。

貢献者と開発者

Check Login Lite はオープンソースソフトウェアです。以下の人々がこのプラグインに貢献しています。

貢献者

“Check Login Lite” をあなたの言語に翻訳しましょう。

開発に興味がありますか ?

コードを閲覧するか、SVN リポジトリをチェックするか、開発ログRSS で購読してみてください。

変更履歴

1.0.0

  • Initial release