Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records KHALAF Login Access Guard version 1.0.3 as active, updated 1mo ago and tested up to WordPress 7.1.
Overview
About this plugin
php path into a private, customizable URL of your choice.
Unlike typical hide-login plugins that simply display a generic 404 error or a blank screen, KHALAF Login Access Guard provides a dedicated visual customizer and a real-time live preview inside your dashboard to design a modern, branded 403 Access Denied page for blocked visitors.
Key Features
Custom Secret Login URL: Move /wp-login.php to any custom slug (e.g. /my-secret-door ).
Visual Access Denied Customizer: Full control over background gradients/colors, card border radius, shadows, padding, icons, typography, and button styling.
Interactive Live Preview: Preview your custom 403 Forbidden page in real time directly from the admin settings before publishing.
Dual-Language & RTL Ready: Native support for Arabic and English with seamless RTL (right-to-left) typography and layout switching.
Zero Disruption to Core Actions: Password recovery links with secure reset tokens, logout, privacy confirmations, and protected post actions continue working seamlessly.
Safe Redirect Option: Option to redirect unauthorized attempts to any custom URL on your domain instead of rendering the denied page.
One-Click Toggle: Activate or deactivate protection anytime without losing your customized design or settings.
Cryptographic Slug Generator: Generate secure, randomized login slugs using browser cryptographic randomness with one click.
Non-Intrusive Admin Notices: Dismissible dashboard reminders compliant with WordPress Guidelines.
Security Notes
The plugin does not alter the WordPress admin dashboard ( /wp-admin ). Once logged in, administrators and authors work normally.
Hiding your login URL provides a strong layer of defense against automated scanning bots, but should be combined with strong passwords and 2FA.
The redirect option restricts destination targets to the same site domain to eliminate open-redirect vulnerabilities.
Reserved system slugs ( wp-admin, admin, login, xmlrpc, wp-json, etc.) are blocked from being set as the login slug.
All settings and requests are sanitized, validated, and escaped following WordPress coding standards.
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
brute force
custom login url
hide login
security
Compatibility & maintenance
Compatibility & maintenance
Tested with WP 7.1
Marked as tested with the current WordPress 7.1 release.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 5.0 · PHP 7.4
Update activity1 Oct 20261mo ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
Version1.0.0→1.0.3
WordPress compatibility7.1.2→7.1.3
Directory statusinactive→active
Directory statusactive→inactive
WordPress compatibility6.7.9→7.1.2
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
