Title: GlocalSaino WebPagesPassworded Author: glocalsaino Published: 17. August 2026 Last modified: 13. September 2026 --- Search plugins ![](https://ps.w.org/glocalsaino-webpagespassworded/assets/banner-772x250.png?rev =3669424) ![](https://ps.w.org/glocalsaino-webpagespassworded/assets/icon-256x256.png?rev= 3678773) # GlocalSaino WebPagesPassworded By [glocalsaino](https://profiles.wordpress.org/glocalsaino/) [Download](https://downloads.wordpress.org/plugin/glocalsaino-webpagespassworded.4.5.1.zip) * [Details](https://de-ch.wordpress.org/plugins/glocalsaino-webpagespassworded/#description) * [Reviews](https://de-ch.wordpress.org/plugins/glocalsaino-webpagespassworded/#reviews) * [Installation](https://de-ch.wordpress.org/plugins/glocalsaino-webpagespassworded/#installation) * [Development](https://de-ch.wordpress.org/plugins/glocalsaino-webpagespassworded/#developers) [Support](https://wordpress.org/support/plugin/glocalsaino-webpagespassworded/) ## Description **GlocalSaino WebPagesPassworded** creates a single access page that acts as a gateway for a group of password-protected child pages. Place the `[glocalsaino_wppw]` shortcode on a parent page: the plugin renders a password form and, on a correct match, redirects the visitor directly to the matching child page. Every feature listed below is included, free and unlimited — nothing is locked behind a license or upgrade. #### How it works 1. In WordPress, create a parent page (e.g. «Private Area») and set the pages you want to protect as its children. 2. Assign each child page its own password via **Publish Visibility Password protected** in the editor. 3. Insert the `[glocalsaino_wppw]` shortcode on the parent page. 4. When a visitor arrives, they see the plugin’s password form. If the password matches a child page, they are redirected to it automatically. #### Features * **Single entry point** — one page with the shortcode gives access to all protected child pages. * **Automatic redirect** — the visitor lands directly on the right page without extra steps. * **Session cookie** — the password is stored in a cookie for 10 days so the visitor does not need to re-enter it on subsequent visits. * **Security nonce** — the form includes a WordPress nonce to guard submissions against CSRF attacks. * **Customisable error messages** — configure the wrong-password and lockout messages from the settings panel. * **Brute-force protection** — after 5 failed attempts from the same IP, access is locked for 15 minutes using WordPress transients, with no extra database tables. * **Secure cookie** — the session cookie is set with `HttpOnly` and `SameSite=Strict` flags. * **Form design** — adjust the colours, font sizes, and spacing of the form fields and button directly from the settings panel. * **Button icon** — choose a Font Awesome icon to display on the submit button, with configurable position (left, right, or above the text). * **No external dependencies** — the plugin loads no external libraries or remote resources. #### Usage Insert the shortcode on the parent page that will act as the access form: ``` [glocalsaino_wppw] ``` Optional shortcode parameters: * `label` — submit button text. Default: `Enter`. * `id` — `id` attribute of the `
` element. Default: `glocalsaino-wppw-login`. * `parent` — ID of the parent page whose children will be searched. Default: the current page ID. Example with parameters: ``` [glocalsaino_wppw label="Log in" id="my-form"] ``` #### Requirements * WordPress 5.0 or higher. * PHP 7.4 or higher. * Child pages must be published and have a password configured from the WordPress editor. ### Privacy Policy GlocalSaino WebPagesPassworded does not collect, store, or transmit any personal data. * The plugin reads the password entered in the form only to compare it against the passwords of the child pages stored in the WordPress database. That comparison happens entirely on the server and the data is not saved or sent to any third party. * A cookie (`wp-postpass_*`) is stored in the visitor’s browser to maintain access for 10 days. This is a standard WordPress cookie and contains only the hash of the password, never the password in plain text. * No external connections of any kind are made. ## Screenshots [⌊Password form on the front end — parent page showing the password input field as visitors see it.⌉⌊Password form on the front end — parent page showing the password input field as visitors see it.⌉[ Password form on the front end — parent page showing the password input field as visitors see it. [⌊Admin settings — General Settings: button label, shortcode reference and available shortcode parameters.⌉⌊Admin settings — General Settings: button label, shortcode reference and available shortcode parameters.⌉[ Admin settings — General Settings: button label, shortcode reference and available shortcode parameters. [⌊Admin settings — Error Messages: customisable wrong-password and too-many-attempts messages.⌉⌊Admin settings — Error Messages: customisable wrong-password and too- many-attempts messages.⌉[ Admin settings — Error Messages: customisable wrong-password and too-many-attempts messages. [⌊Admin settings — Form Design: appearance controls for the password input field( colours, size, icon).⌉⌊Admin settings — Form Design: appearance controls for the password input field (colours, size, icon).⌉[ Admin settings — Form Design: appearance controls for the password input field ( colours, size, icon). [⌊WordPress editor — parent page with the [glocalsaino_wppw] shortcode and annotated explanatory overlays.⌉⌊WordPress editor — parent page with the [glocalsaino_wppw] shortcode and annotated explanatory overlays.⌉[ WordPress editor — parent page with the [glocalsaino_wppw] shortcode and annotated explanatory overlays. [⌊WordPress editor — password-protected child page with annotated explanatory overlays showing the required configuration.⌉⌊WordPress editor — password-protected child page with annotated explanatory overlays showing the required configuration.⌉[ WordPress editor — password-protected child page with annotated explanatory overlays showing the required configuration. ## Installation 1. Upload the `glocalsaino-webpagespassworded` folder to `/wp-content/plugins/`. 2. Activate the plugin from **Plugins Installed Plugins**. 3. Create a parent page and add child pages with their passwords via **Publish Visibility Password protected**. 4. Insert `[glocalsaino_wppw]` on the parent page. ## FAQ ### Can I have several parent pages each with their own group of child pages? Yes. The `[glocalsaino_wppw]` shortcode placed on each parent page searches only among its direct child pages. Each group is independent. ### What happens if two child pages share the same password? The visitor is redirected to the most recently published child page that matches the entered password. ### How long does the access cookie last? 10 days. After that, or if the visitor clears their browser cookies, they will need to enter the password again. ### Does it work with HTTPS? Yes. If the site uses HTTPS the cookie is automatically marked as `Secure`. ### I entered the correct password but I see the lockout message. What should I do? The lockout lasts 15 minutes and is tied to the IP address. If you are the administrator and need to clear it early, delete the transients with the prefix `glocalsaino_wppw_lock_` and `glocalsaino_wppw_fail_` from the database or with a transient management plugin. ### Is it compatible with page-exclusion plugins? Yes. If the site has a plugin that exposes `pause_exclude_pages()` / `resume_exclude_pages()`( a common pattern in menu and listing exclusion plugins), the plugin calls them around its query to ensure protected pages are always found. ### The password is correct but the visitor is not redirected. What could be wrong? Check that: * The child page is published (not a draft). * The child page is a direct child of the page containing the shortcode, not a grandchild. * The password in WordPress is saved without leading or trailing spaces. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “GlocalSaino WebPagesPassworded” is open source software. The following people have contributed to this plugin. Contributors * [ glocalsaino ](https://profiles.wordpress.org/glocalsaino/) * [ rafammoo ](https://profiles.wordpress.org/rafammoo/) [Translate “GlocalSaino WebPagesPassworded” into your language.](https://translate.wordpress.org/projects/wp-plugins/glocalsaino-webpagespassworded) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/glocalsaino-webpagespassworded/), check out the [SVN repository](https://plugins.svn.wordpress.org/glocalsaino-webpagespassworded/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/glocalsaino-webpagespassworded/) by [RSS](https://plugins.trac.wordpress.org/log/glocalsaino-webpagespassworded/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 4.5.1 * Fixed: the access cookie set after entering a password (or opening a Magic Link from the WPPW Magic Links add-on) used a `SameSite=Strict` policy, which browsers can refuse to keep when the visit originates outside the site — e.g. a Magic Link opened directly from an email client. Confirmed as a real failure in Firefox. Changed to `SameSite=Lax`, which still blocks the cookie for third-party/embedded requests but correctly survives a normal top-level navigation from an external link. #### 4.5.0 * Architecture: removed the Freemius SDK entirely. The plugin never had premium code of its own; the SDK served no purpose beyond unnecessary overhead. No functional change for site owners — the plugin works exactly as before. The WPPW Magic Links add-on is now registered as an independent Freemius product and no longer requires the parent plugin to carry the SDK. #### 4.4.10 * Redesigned the «Extensions» submenu: the Magic Links add-on is now a compact card with its logo, and the page now also cross-promotes GlocalSaino Auctions Displayed by Shortcodes and GlocalSaino Layer Map Viewer, each showing «Active» automatically when already installed. #### 4.4.9 * All admin UI text changed to English as base language for translation support. #### 4.4.7 * Fix: replace wp_redirect() with a rendered page in the Extensions submenu (PHPCS SafeRedirect). * Update Tested up to: 7.1. #### 4.4.6 * Disable Freemius add-ons marketplace UI (has_addons: false); add-on promoted via own «Extensiones» submenu instead. #### 4.4.5 * Add «Extensiones» submenu linking to the Magic Links add-on page. #### 4.4.4 * Enable add-on support (has_addons: true) so Freemius can register the Magic Links add-on. #### 4.4.3 * Tweak: rename first submenu item from «WebPagesPassworded» to «Configuración» so it fits in the sidebar. #### 4.4.2 * Fix: rename $wppw_core, $wppw_admin, $wppw_styles to use the glocalsaino_wppw_ prefix in the main plugin file (PHPCS PrefixAllGlobals). #### 4.4.1 * Plugin renamed to GlocalSaino WebPagesPassworded (slug: glocalsaino-webpagespassworded). * Shortcode changed to [glocalsaino_wppw]. * All features (custom error messages, form design, button icon) are now fully free and unlimited. * Magic links feature removed from this plugin; will be released as a separate add-on. * Inline styles replaced with wp_add_inline_style() for WP.org compliance. * All registration identifiers (menu slug, option names, script handles, transient keys) updated with the glocalsaino_wppw_ prefix. #### 4.3.1 * Fix: admin assets (Font Awesome, colour pickers) not loading after moving to top-level menu. * Fix: update admin enqueue hook from settings_page_ to toplevel_page_. * Added composer.json to satisfy WP.org plugin checker. * Author unified to Glocal Saino across all files. ## Meta * Version **4.5.1** * Last updated **3 Wochen ago** * Active installations **Fewer than 10** * WordPress version ** 5.0 or higher ** * Tested up to **7.1.3** * PHP version ** 7.4 or higher ** * Language * [English (US)](https://wordpress.org/plugins/glocalsaino-webpagespassworded/) * Tags * [access-control](https://de-ch.wordpress.org/plugins/tags/access-control/)[child pages](https://de-ch.wordpress.org/plugins/tags/child-pages/) [password](https://de-ch.wordpress.org/plugins/tags/password/)[protected pages](https://de-ch.wordpress.org/plugins/tags/protected-pages/) [shortcode](https://de-ch.wordpress.org/plugins/tags/shortcode/) * [Advanced View](https://de-ch.wordpress.org/plugins/glocalsaino-webpagespassworded/advanced/) ## Ratings Es wurden noch keine Rezensionen eingereicht. [Your review](https://wordpress.org/support/plugin/glocalsaino-webpagespassworded/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/glocalsaino-webpagespassworded/reviews/) ## Contributors * [ glocalsaino ](https://profiles.wordpress.org/glocalsaino/) * [ rafammoo ](https://profiles.wordpress.org/rafammoo/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/glocalsaino-webpagespassworded/)