disable registration if you want your blog truely private.
Version: 1.0.3
Author: Viper007Bond
Author URI: http://www.viper007bond.com/
**************************************************************************/
class RegisteredUsersOnly {
var $exclusions = array();
// Class initialization
function RegisteredUsersOnly () {
// Load up the localization file if we're using WordPress in a different language
// Place it in this plugin's folder and name it "registered-users-only-[value in wp-config].mo"
load_plugin_textdomain( 'registered-users-only', '/wp-content/plugins/registered-users-only' );
// Register our hooks
add_action( 'wp', array(&$this, 'MaybeRedirect') );
add_action( 'init', array(&$this, 'LoginFormMessage') );
add_action( 'admin_menu', array(&$this, 'AddAdminMenu') );
add_action( 'login_head', array(&$this, 'NoIndex'), 1 );
if ( isset($_POST['regusersonly_action']) && 'update' == $_POST['regusersonly_action'] )
add_action( 'init', array(&$this, 'POSTHandle') );
}
// Register the options page
function AddAdminMenu() {
add_options_page( __('Registered Users Only Options', 'registered-users-only'), __('Registered Only', 'registered-users-only'), 'manage_options', 'registered-users-only', array(&$this, 'OptionsPage') );
}
// Depending on conditions, run an authentication check
function MaybeRedirect() {
// If the user is logged in, then abort
if ( current_user_can('read') ) return;
$settings = get_option( 'registered-users-only' );
// Feeds
if ( 1 == $settings['feeds'] && is_feed() ) return;
// This is a base array of pages that will be EXCLUDED from being blocked
$this->exclusions = array(
'wp-login.php',
'wp-register.php',
'wp-cron.php', // Just incase
'wp-trackback.php',
'wp-app.php',
'xmlrpc.php',
);
// If the current script name is in the exclusion list, abort
if ( in_array( basename($_SERVER['PHP_SELF']), apply_filters( 'registered-users-only_exclusions', $this->exclusions) ) ) return;
// Still here? Okay, then redirect to the login form
auth_redirect();
}
// Use some deprecate code (yeah, I know) to insert a "You must login" error message to the login form
// If this breaks in the future, oh well, it's just a pretty message for users
function LoginFormMessage() {
// Don't show the error message if anything else is going on (registration, etc.)
if ( 'wp-login.php' != basename($_SERVER['PHP_SELF']) || !empty($_POST) || ( !empty($_GET) && empty($_GET['redirect_to']) ) ) return;
global $error;
$error = __( 'Only registered and logged in users are allowed to view this site. Please log in now.', 'registered-users-only' );
}
// Tell bots to go away (they shouldn't index the login form)
function NoIndex() {
echo " \n";
}
// Update options submitted from the options form
function POSTHandle() {
if ( !current_user_can('manage_options') )
wp_die(__('Cheatin’ uh?'));
check_admin_referer('registered-users-only');
$settings = array(
'feeds' => $_POST['regusersonly_feeds'],
);
update_option( 'registered-users-only', $settings );
update_option( 'users_can_register', $_POST['users_can_register'] );
wp_redirect( add_query_arg('updated', 'true') );
exit();
}
// Output the configuration page for the plugin
function OptionsPage() {
$settings = get_option( 'registered-users-only' );
?>