Description
User Access Blocker is a simple yet powerful WordPress plugin that allows administrators to temporarily or permanently block user access without deleting their accounts. This is perfect for situations where you need to:
- Suspend user access during investigations
- Temporarily disable accounts for non-payment
- Block problematic users while preserving their content
- Manage user access during maintenance or transitions
Key Features
- Easy Toggle: Simple «Block Access» / «Unblock Access» button on user profiles
- Instant Effect: Blocked users are immediately prevented from logging in
- AJAX Powered: Block/unblock users without page refresh
- Secure: Multiple permission checks and nonce verification
- Non-Destructive: User accounts, posts, and data remain intact
- Admin Only: Only administrators can block/unblock users
- Self-Protection: Administrators cannot block themselves
- Activity Logging: All block/unblock actions are logged for security audits
- Clean Uninstall: Removes all plugin data when deleted
How It Works
- Navigate to any user’s profile page in WordPress admin
- Scroll to the «Access Control» section
- Click «Block Access» to prevent the user from logging in
- Click «Unblock Access» to restore their access
Blocked users will see: «Your account has been blocked. Please contact the administrator.»
Security Features
- Administrator-only functionality
- Nonce verification on all actions
- Permission checks at multiple levels
- Data sanitization and validation
- Secure AJAX implementation
- XSS protection through proper escaping
- Activity logging for audit trails
Developer Information
Hooks and Filters
The plugin uses standard WordPress hooks:
authenticate— To check if a user is blocked during loginshow_user_profile/edit_user_profile— To add the block buttonpersonal_options_update/edit_user_profile_update— To save block statusadmin_notices— To display blocked user warningswp_ajax_uab_toggle_user_block— For AJAX functionality
Database
The plugin stores block status in user meta:
* Meta key: _uab_user_blocked
* Meta value: boolean (true/false)
Uninstall
The plugin includes a proper uninstall routine that removes all plugin data from the database when deleted through the WordPress admin.
Support
For support, feature requests, or bug reports, please visit plugin support forum or GitHub repository.
Privacy Policy
This plugin does not collect any personal data. It only stores block status as user metadata within your WordPress database. No data is sent to external servers.
The plugin logs block/unblock actions to your server’s error log for security audit purposes. These logs remain on your server and are not transmitted elsewhere.
Installation
Automatic Installation
- Log in to your WordPress dashboard
- Navigate to Plugins Add New
- Search for «User Access Blocker»
- Click «Install Now» and then «Activate»
Manual Installation
- Download the plugin zip file
- Log in to your WordPress dashboard
- Navigate to Plugins Add New
- Click «Upload Plugin» and choose the downloaded file
- Click «Install Now» and then «Activate»
FTP Installation
- Download and unzip the plugin file
- Upload the
user-access-blockerfolder to/wp-content/plugins/ - Activate the plugin through the ‘Plugins’ menu in WordPress
FAQ
-
Can blocked users still see their content?
-
No, blocked users cannot log in at all. They will be stopped at the login screen with an error message.
-
What happens to a blocked user’s posts and comments?
-
Nothing — all content remains intact. The plugin only prevents login; it doesn’t affect any user-generated content.
-
Can I block other administrators?
-
By default, the plugin prevents blocking administrator accounts for security reasons. This can be modified in the code if needed.
-
Can users unblock themselves?
-
No, only administrators can block or unblock users, and administrators cannot block themselves.
-
Is there a bulk block feature?
-
Not currently. Users must be blocked/unblocked individually from their profile pages.
-
Does this work with custom login pages?
-
Yes, the plugin hooks into WordPress’s authentication system, so it works with any properly coded custom login page.
-
What happens if I deactivate the plugin?
-
Blocked users will be able to log in again. The block status is only enforced while the plugin is active.
-
Will this plugin slow down my site?
-
No, the plugin is lightweight and only runs during login attempts and on user profile pages in the admin area.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“User Access Blocker” is open source software. The following people have contributed to this plugin.
Contributors
Translate “User Access Blocker” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.2
- Enhanced security with improved escaping and sanitization
- Added unique prefixes to all functions and classes for better compatibility
- Added confirmation dialogs before blocking/unblocking users
- Improved error handling and user feedback
- Added activity logging for all block/unblock actions
1.0.1
- Added nonce verification for form submissions
- Improved AJAX security
- Added uninstall cleanup function
- Better error messages
1.0.0
- Initial release
- Basic block/unblock functionality
- AJAX-powered interface
- Administrator-only access