Title: .htaccess Site Access Control Author: Miina Sikk Published: 29 janeiro, 2016 Last modified: 11 maio, 2016 --- Pesquisar plugins Este plugin **não foi testado com os 3 lançamentos principais mais recentes do WordPress**. Ele pode não ser mais mantido ou suportado e pode ter problemas de compatibilidade quando usado com versões mais recentes do WordPress. ![](https://s.w.org/plugins/geopattern-icon/htaccess-site-access-control.svg) # .htaccess Site Access Control Por [Miina Sikk](https://profiles.wordpress.org/miinasikk/) [Baixar](https://downloads.wordpress.org/plugin/htaccess-site-access-control.zip) * [Detalhes](https://br.wordpress.org/plugins/htaccess-site-access-control/#description) * [Avaliações](https://br.wordpress.org/plugins/htaccess-site-access-control/#reviews) * [Instalação](https://br.wordpress.org/plugins/htaccess-site-access-control/#installation) * [Desenvolvimento](https://br.wordpress.org/plugins/htaccess-site-access-control/#developers) [Suporte](https://wordpress.org/support/plugin/htaccess-site-access-control/) ## Descrição Using the password protection will give you extra security layer of protection from brute force hacking attacks. Additionally, it’s also an easy way to password protect your entire site, without needing to create separate WordPress users for each visitor. When you enable the password protection, the user won’t be able to see anything – not even see the protected page – until he/she inserts the username/password. You can password protect the whole website, including the administrator pages; you can password protect the administrator pages; or you can password protect the WordPress login page. Free plugin options include: * Enabling/disabling the password protection to wp-login.php, WordPress admin pages. Note that you’ll be asked to re-type the .htaccess username/password you created before enabling any of the settings – to ensure that you wouldn’t enable the password protection without even knowing the password yourself! * Modifying the existing users: you can change any .htaccess user’s password and remove the users. * Adding one .htaccess user. Premium plugin options: * Create/modify an unlimited number of .htaccess users; * Protect your whole site, making it accessible to only those who have the .htaccess user. If you have any other suggestions, please let us know! You can contact us via http:// www.wpsos.io/wordpress-plugin-htaccess-site-access-control/ For more information and support, check out: http://www.wpsos.io/wordpress-plugin- htaccess-site-access-control/ ## Capturas de tela [⌊Screenshot of the main configuration screen⌉⌊Screenshot of the main configuration screen⌉[ Screenshot of the main configuration screen [⌊Screenshot of the enabling/disabling password protection configuration⌉⌊Screenshot of the enabling/disabling password protection configuration⌉[ Screenshot of the enabling/disabling password protection configuration [⌊Modifying existing users⌉⌊Modifying existing users⌉[ Modifying existing users [⌊Adding a new user⌉⌊Adding a new user⌉[ Adding a new user [⌊A password protected wp-login.php page⌉⌊A password protected wp-login.php page⌉[ A password protected wp-login.php page ## Instalação The installation and use is very straightforward. You should: 1. Upload the folder `htaccess-site-access-control` to the `/wp-content/plugins/` directory 2. Ative o plugin por meio do menu “Plugins” no WordPress 3. From the ‘Settings’ menu, there will be a new option, called ‘.htaccess Site Access Control’ ## Perguntas frequentes Which options do you modify? As of version 1.0, you can choose between the following options: 1. Enabling/disabling the password protection to wp-login.php, WordPress admin pages, and/or the whole site. Note that you’ll be asked to re-type the .htaccess username/password you created before enabling any of the settings – to ensure that you wouldn’t enable the password protection without even knowing the password yourself! 2. Modifying the existing users: you can change any .htaccess user’s password and remove the users. 3. Adding a new .htaccess user. Note that you have to have at least one user to be able to enable any of the options: otherwise you would be locked out! For more information and support, check out: http://www.wpsos.io/wordpress-plugin- htaccess-site-access-control/ The plugin is giving a warning that some of the files need to be writable for it to work, what does this mean? Since the plugin is protecting your site via modifying .htaccess and .htpasswd files, it works only if these files are writable by WordPress. If the files don’t exist, you can just create empty writable files to the location brought out in the plugin’s warning. You can also see from there which files are already writable and which not. I forgot my password, and got locked out from the site! What can I do? For accessing your site again, you have to modify two files: 1. .htaccess file in your WordPress root directory (the directory where the file wp-config.php is located); 2. .htaccess file in your WordPress wp-admin folder From both files, delete everything BETWEEN these two lines: * # BEGIN WPSOS htaccess plugin * # END WPSOS htaccess plugin IMPORTANT: Before modifying either of the files, make a copy of them! For accessing the files, either use FTP or log in to your web hosting service provider, usually they also enable direct file modification. Where can I get some support? Check out our site, at: http://www.wpsos.io/wordpress-plugin-htaccess-site-access- control/ I have some suggestions for other options I want edited Let us know, via: http://www.wpsos.io/wordpress-plugin-htaccess-site-access-control/ ## Avaliações ![](https://secure.gravatar.com/avatar/1b02697f1c0632758437ac2d7ce62b3f58845248f2520857403f8f10d1b918ee? s=60&d=retro&r=g) ### 󠀁[Useful but in need of improvement](https://wordpress.org/support/topic/useful-but-in-need-of-improvement/)󠁿 [pcgardner](https://profiles.wordpress.org/pcgardner/) 9 novembro, 2016 The purpose of this plugin is to create additional password protection for the wp- login page, or the wp-admin folder, or even your entire site. It does this by the standard method of adding code to the .htaccess file that gets an additional username and password from a .htpasswd file (in which the MD5 hash of the password is used rather than the password itself). So far so good: it works, but it could be better– hence four stars. When you open the plugin's settings page, it asks you to enter a new user. At first I thought I had to enter my WordPress username, but in fact it wants the new username that you want to use for the additional login box. I realised that when I thought about it, but it should be made clearer. More seriously, it puts the .htpasswd file in the same directory as the .htaccess file that it has modified. That is within the webroot, and so is accessible via http – although the plugin author has attempted to mitigate this by adding some more code to .htaccess preventing Apache from serving .ht* files. Much better is to put the .htpasswd file into the private folder, which is outside the webroot. I did that manually by moving the file and altering the location in .htaccess, both of which can be done using FTP, but it's not convenient. Conclusion: using the plugin is quicker than doing the whole thing manually. It would be quicker still if the settings page allowed you to choose where .htpasswd should be placed. The main advantage of the plugin is that it creates the .htpasswd file automatically; otherwise you would need console access to the server in order to run a script to create the file, or the ability to calculate the MD5 hash of the password if you want to create the file in a text editor. ![](https://secure.gravatar.com/avatar/78c46a00951db59001ef113247e968a07895b067d87141fd8182ade01722d200? s=60&d=retro&r=g) ### 󠀁[Bravo](https://wordpress.org/support/topic/bravo-51/)󠁿 [bill57](https://profiles.wordpress.org/bill57/) 3 setembro, 2016 Ce plugin fait sont travail, protéger l'admin, créer des htaccess et htpasswd et en plus ça fonctionne ![](https://secure.gravatar.com/avatar/afdf43aeeece9a03648ab1164d196f494e19f88568477fb1fb8513eb15abb437? s=60&d=retro&r=g) ### 󠀁[Work but with some annoying bug](https://wordpress.org/support/topic/work-but-with-some-annoying-bug/)󠁿 [hendsiyas](https://profiles.wordpress.org/hendsiyas/) 3 setembro, 2016 I try to manually set password on the wp-admin page but did not work, this plugins work, but with some bugs. First GUI bug, if I disable some option, it ask for password even when the user and password form not showed. And 2nd bug is with woocommerce. If I enable Protection for wp-login, when buyer logoff their account, this plugin ask for password. The only solution is disabled wp-login protection and only enable it on wp-admin page. Not perfect but this plugins work. Hope you fix the bug and get more download. [ Leia todas as 3 avaliações ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/) ## Colaboradores e desenvolvedores “.htaccess Site Access Control” é um programa de código aberto. As seguintes pessoas contribuíram para este plugin. Colaboradores * [ Miina Sikk ](https://profiles.wordpress.org/miinasikk/) * [ citywanderer ](https://profiles.wordpress.org/citywanderer/) * [ Miina Sikk ](https://profiles.wordpress.org/stubgo/) [Traduzir o “.htaccess Site Access Control” para seu idioma.](https://translate.wordpress.org/projects/wp-plugins/htaccess-site-access-control) ### Interessado no desenvolvimento? [Navegue pelo código](https://plugins.trac.wordpress.org/browser/htaccess-site-access-control/), consulte o [repositório SVN](https://plugins.svn.wordpress.org/htaccess-site-access-control/) ou assine o [registro de desenvolvimento](https://plugins.trac.wordpress.org/log/htaccess-site-access-control/) por [RSS](https://plugins.trac.wordpress.org/log/htaccess-site-access-control/?limit=100&mode=stop_on_copy&format=rss). ## Registro de alterações #### 1.0 * Initial version. ## Meta * Versão **1.0** * Última atualização **10 anos atrás** * Instalações ativas **800+** * Versão do WordPress ** 3.0.1 ou superior ** * Testado até **4.4.34** * Idioma * [English (US)](https://wordpress.org/plugins/htaccess-site-access-control/) * Tags * [htaccess](https://br.wordpress.org/plugins/tags/htaccess/)[htpasswd](https://br.wordpress.org/plugins/tags/htpasswd/) [security](https://br.wordpress.org/plugins/tags/security/)[WPSOS](https://br.wordpress.org/plugins/tags/wpsos/) * [Visualização avançada](https://br.wordpress.org/plugins/htaccess-site-access-control/advanced/) ## Classificações 4 de 5 estrelas. * [ 1 avaliação com 5 estrela ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/?filter=5) * [ 1 avaliação com 4 estrela ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/?filter=4) * [ 1 avaliação com 3 estrela ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/?filter=3) * [ 0 avaliação com 2 estrela ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/?filter=2) * [ 0 avaliação com 1 estrela ](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/?filter=1) [Sua avaliação](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/#new-post) [Ver todas avaliações](https://wordpress.org/support/plugin/htaccess-site-access-control/reviews/) ## Colaboradores * [ Miina Sikk ](https://profiles.wordpress.org/miinasikk/) * [ citywanderer ](https://profiles.wordpress.org/citywanderer/) * [ Miina Sikk ](https://profiles.wordpress.org/stubgo/) ## Suporte Tem algo a dizer? Precisa de ajuda? [Ver fórum de suporte](https://wordpress.org/support/plugin/htaccess-site-access-control/) ## Doar Gostaria de contribuir para o desenvolvimento deste plugin? [ Doe para este plugin ](http://www.wpsos.io/wordpress-plugin-htaccess-site-access-control/)